Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
File:                     7bwZ_qH8tmtPqgoil27hNQs32-s.mft (raw, json)
Hash identifier:          x1rGVJxm8Eyqy+5k55t7gjHrbhDPT0DxLbVrOBKV48s=
Subject key identifier:   00:C8:C0:D1:E8:AF:3A:F5:B6:C3:F7:5C:F5:28:F6:84:42:58:58:2D
Authority key identifier: ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB
Certificate issuer:       /CN=A916A4BF/serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
Manifest number:          19
Signing time:             Thu 15 May 2025 07:17:32 +0000
Manifest this update:     Thu 15 May 2025 07:17:32 +0000
Manifest next update:     Thu 22 May 2025 07:17:32 +0000
Files and hashes:         1: 7bwZ_qH8tmtPqgoil27hNQs32-s.crl (hash: H4nHXrBdcLOzf0aWNQyUdML2txVWCOKDH39Lfk+Fglc=)
                          2: DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa (hash: YKV/U+PooarTthEs+eyt4mbIMbu1go/l4voLZ2DzYhw=)
                          3: 27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa (hash: oaE4p5hJkp4+nLCmgu91heGRJg3fBe+drWuPnIXpClQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl
                          rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 07:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A4BF, serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
        Validity
            Not Before: May 15 07:17:32 2025 GMT
            Not After : May 22 07:17:32 2025 GMT
        Subject: CN=6825950c-8a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:d4:2e:1f:4a:44:f3:ea:e2:6d:80:bc:bd:
                    01:d3:9e:3a:c7:73:09:fc:c0:54:8c:a2:02:3b:b8:
                    2f:7b:35:c9:6a:9a:a3:0c:b6:f4:2e:78:ba:b1:c3:
                    ba:2a:75:c1:f8:bc:ad:e5:c1:cb:e1:54:20:5a:58:
                    9b:e9:63:a4:ec:bd:7e:12:32:55:4b:4c:06:eb:2b:
                    17:1a:c4:d5:d2:10:7d:e2:cd:e8:c7:b5:7a:ad:3a:
                    45:5b:67:10:63:a1:a7:16:10:5b:94:b2:a6:e5:d4:
                    1b:1f:55:c4:a3:a5:8a:51:b6:c6:fd:e3:35:0b:0e:
                    fc:a8:01:88:ce:b6:1b:e3:3b:04:e6:f3:e0:04:df:
                    96:c9:41:2e:39:35:4e:84:68:e2:81:84:0d:ab:58:
                    fe:f3:fe:26:2e:69:9e:bc:46:28:0d:4c:aa:3b:81:
                    d5:64:6a:35:b0:b5:30:60:df:d3:ce:10:77:f3:e9:
                    19:d2:32:50:38:ee:77:3e:04:e9:77:4e:93:b7:c5:
                    a7:14:96:79:7b:34:f4:f0:8d:f4:f8:b8:5e:5d:f4:
                    59:b8:3a:2b:f3:ca:86:b4:28:8b:53:4f:72:9e:80:
                    87:e1:ae:37:f1:83:a1:e6:75:49:72:12:82:68:03:
                    32:84:0d:0c:15:d2:4c:ce:02:68:bb:d2:df:2e:cc:
                    69:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C8:C0:D1:E8:AF:3A:F5:B6:C3:F7:5C:F5:28:F6:84:42:58:58:2D
            X509v3 Authority Key Identifier:
                keyid:ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:6d:cb:2b:4c:e8:d0:85:27:b3:cf:3a:b8:c2:94:fb:00:63:
         c6:1d:5f:22:86:09:67:f2:f0:eb:f8:fe:7c:86:54:48:8b:a5:
         a0:f5:9f:d6:d1:1f:74:72:04:4b:00:ff:15:5d:8e:94:a8:8f:
         14:58:cd:f1:1e:56:1b:2a:cb:03:05:ce:bf:e6:17:6c:c5:72:
         35:33:eb:31:c3:08:ac:db:77:67:fb:9d:ed:eb:df:5f:7d:cc:
         4a:0a:2d:eb:59:6a:f1:97:89:d3:d4:75:3b:2b:0c:f0:51:b7:
         76:e6:5f:f0:62:f0:3a:e6:ac:70:2e:f8:66:42:ab:fe:1f:d0:
         85:6f:36:6d:dd:bf:d2:07:dc:e2:24:11:5c:f8:c5:47:a5:1a:
         09:34:d8:00:9f:b0:6a:c0:79:e4:c6:be:9d:3d:b4:a7:0b:bf:
         b5:14:e2:99:3f:e0:8b:81:00:b4:17:54:07:e0:ba:ca:f1:fc:
         8e:c8:76:9d:fe:31:e1:5d:5d:ec:33:44:0b:31:fb:49:75:75:
         02:03:51:55:3c:24:4a:80:42:ad:56:9c:c8:27:ac:22:f9:cf:
         ed:09:90:2f:be:77:ec:dd:e0:33:35:35:10:33:de:fe:f1:c8:
         e5:10:4d:d5:14:d7:77:3c:07:16:35:1d:56:fd:4d:6b:b4:a2:
         96:50:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 05:29:42 2025 by rpki-client