Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File:                     n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier:          +MYoaJbETMlnJsRkftLWku/UpvfWlWdkyDTV8Sli9w8=
Subject key identifier:   E7:79:6E:DA:D7:69:15:C7:41:98:50:79:E4:AC:12:38:86:24:EB:96
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer:       /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial:       1077
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number:          106F
Signing time:             Fri 22 Aug 2025 17:30:29 +0000
Manifest this update:     Fri 22 Aug 2025 17:30:28 +0000
Manifest next update:     Fri 29 Aug 2025 17:30:28 +0000
Files and hashes:         1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: ZSRrwU64C8boSSmMaYdUKBHJEiXuQlR1Vpw2g1X3dOE=)
                          2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
                          rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4215 (0x1077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
        Validity
            Not Before: Aug 22 17:30:28 2025 GMT
            Not After : Aug 29 17:30:28 2025 GMT
        Subject: CN=68a8a935-8f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:22:52:8a:d5:4b:91:bb:d3:02:97:e1:52:
                    a2:fe:85:d2:90:63:ab:8f:67:cf:3c:62:76:c5:65:
                    66:ca:f0:60:57:62:19:b1:43:6b:cd:76:71:a8:48:
                    bf:65:2c:3e:e4:cc:87:f0:3b:85:c8:47:e6:f6:73:
                    e2:31:dd:18:82:7c:e5:a1:5c:30:bd:3d:14:4a:0b:
                    be:f0:36:29:48:13:c4:62:ec:29:b4:ef:98:a7:8c:
                    b0:dc:e3:c6:3c:13:82:92:df:4e:1b:8d:38:63:a6:
                    fa:0d:c2:cb:04:02:f7:75:98:1d:6d:c7:e6:32:fc:
                    81:ab:5b:40:24:04:7f:13:38:e0:01:31:87:f5:9e:
                    4b:de:d9:20:0a:a1:11:36:41:a3:a5:49:c1:e1:70:
                    bd:03:1c:f6:be:8a:53:f3:46:f2:4f:de:e6:fc:12:
                    d6:b0:86:1f:b3:36:b3:32:17:9e:43:cd:a6:28:0c:
                    61:f6:ee:be:8f:9e:87:ab:18:73:30:2a:0b:74:ce:
                    dc:08:cb:98:64:cc:cb:f3:d9:ec:71:e0:32:5a:be:
                    04:ed:b9:e0:5f:4c:c1:8b:1f:e4:97:bd:e8:42:30:
                    80:57:3a:c5:e3:95:3a:75:4a:fc:e5:93:a5:7a:cc:
                    6d:5b:ae:2b:ed:22:96:e8:27:18:71:d4:71:df:db:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:6E:DA:D7:69:15:C7:41:98:50:79:E4:AC:12:38:86:24:EB:96
            X509v3 Authority Key Identifier:
                keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:92:7f:75:2e:34:f0:15:e0:26:7b:df:cb:98:6a:70:26:2b:
         b1:cc:fd:b0:d3:8f:ed:bc:9a:a9:58:bb:c7:a4:3e:a3:14:db:
         c8:91:ad:3c:28:11:da:36:0e:01:82:18:11:66:de:e9:3c:95:
         76:61:ed:69:23:9a:c1:d3:de:3b:ac:4b:cc:b4:7c:1f:31:56:
         ee:15:87:9a:6f:f1:5a:02:7b:51:37:be:f5:0c:f5:45:a2:84:
         6c:84:5b:70:22:44:f8:62:bb:1e:02:a2:90:22:62:17:23:d5:
         88:d2:43:8b:bd:7a:7d:c0:90:a8:3b:c0:8e:1e:1a:bf:9e:8b:
         99:bf:16:8f:2a:de:08:7a:b9:29:55:24:e6:6c:79:0c:b1:39:
         15:74:3a:d8:c8:58:c5:3b:7a:50:56:ca:ff:03:cf:da:e5:d8:
         88:b1:7f:bd:32:f2:b6:ad:f2:f3:9c:ee:0d:55:19:08:64:37:
         31:78:a8:97:a3:a2:64:83:04:90:83:9f:07:4e:bb:3b:dd:70:
         85:48:2f:45:3a:ef:19:e8:df:7d:1e:94:ae:92:c4:fc:b5:68:
         17:86:0f:a0:e2:04:fb:71:e4:87:5f:54:b4:cf:82:54:79:d9:
         55:91:4b:a2:a5:ee:53:e3:4c:14:6f:0d:71:16:71:6c:99:93:
         3a:58:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:31:30 2025 by rpki-client