Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File:                     7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier:          7hnA977IeL3FkAo65SUg6xzHy3uTKE0jBP2mU0SWQz4=
Subject key identifier:   EB:91:D3:F4:64:46:03:DC:9C:57:26:C1:A3:4D:94:50:85:D1:9E:B9
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number:          93
Signing time:             Sun 19 Oct 2025 09:40:15 +0000
Manifest this update:     Sun 19 Oct 2025 09:40:15 +0000
Manifest next update:     Sun 26 Oct 2025 09:40:15 +0000
Files and hashes:         1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: m0BexZEPs72jc7sMhsnacGPGmZ/aRwvzZxyZzANiiks=)
                          2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: Oct 19 09:40:15 2025 GMT
            Not After : Oct 26 09:40:15 2025 GMT
        Subject: CN=68f4b1ff-9e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:6f:bd:98:d7:2e:7b:42:99:a0:eb:1a:ea:
                    7e:9f:3f:01:ef:b9:14:4c:a4:a2:26:65:8e:d6:6e:
                    1c:06:24:54:e6:f9:52:67:cd:ff:15:09:b1:d9:1e:
                    06:11:ac:8b:ef:34:fb:2d:e7:4c:7f:74:2e:6d:30:
                    36:b5:bf:4a:dd:1c:70:6d:af:c0:bb:6e:c9:e7:04:
                    b1:a8:47:21:08:01:fe:77:43:2b:99:95:4e:5b:61:
                    a9:46:c2:4f:e2:49:e7:76:36:79:1a:0e:c9:ca:55:
                    55:8d:e3:a0:32:16:81:c6:07:ae:d4:a1:5e:8f:51:
                    e1:98:ef:e2:e6:1c:4e:c4:b0:39:93:7c:b8:81:a9:
                    3d:73:34:51:6d:a1:27:16:83:e0:36:a1:b1:2d:b3:
                    9d:83:b5:ba:42:65:b2:35:a8:c7:e3:bb:cc:90:8d:
                    9c:0c:ee:a4:0c:60:c9:1d:83:b8:a9:37:87:eb:a3:
                    63:e6:36:9f:74:f6:c5:b9:d0:6a:1c:41:29:0d:1a:
                    dd:f3:35:ee:4a:ec:77:00:3c:08:9c:24:6f:30:44:
                    4d:3e:6f:d8:40:7d:03:d9:a2:c4:d3:f6:7f:c5:ab:
                    e3:c4:b5:e7:2a:85:08:d7:a5:48:05:09:e3:6a:a0:
                    7d:55:90:0b:2c:15:f6:8f:d6:d8:e9:03:50:09:b4:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:91:D3:F4:64:46:03:DC:9C:57:26:C1:A3:4D:94:50:85:D1:9E:B9
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:86:ba:f2:12:d9:f3:7e:8e:47:59:93:b5:86:6e:0b:08:66:
         2d:20:78:f4:12:90:4a:12:cf:7c:85:38:02:78:20:e4:b1:cc:
         9f:fa:f0:74:45:74:c0:b8:7c:3d:be:f1:b3:b0:02:26:ab:ae:
         ba:9f:aa:b4:c3:f1:9d:68:84:aa:6c:8f:65:35:32:df:de:7f:
         06:02:4c:e1:f8:d7:28:e4:3b:f0:24:dc:f5:37:f1:8b:d0:e2:
         6e:92:86:5f:8e:a9:dd:43:37:07:a9:b0:58:f6:c8:8b:ba:56:
         9a:e5:19:94:25:be:b3:1c:d7:0b:79:1e:ea:c5:ec:21:24:05:
         24:4b:0e:3d:81:16:8f:1b:db:99:71:44:65:3f:df:9f:67:ef:
         93:f8:c1:f3:74:ac:46:1b:bd:6a:46:7e:7c:0a:85:99:05:07:
         56:fb:0f:62:a2:d1:19:0b:07:7c:0d:3c:82:20:4c:8c:06:73:
         cc:40:9a:66:ac:b7:f8:97:9b:3c:6f:88:ae:80:4b:84:8d:22:
         da:90:4f:bb:75:aa:4c:9a:45:0d:2e:a1:14:0a:17:b2:cc:87:
         67:ba:39:3f:6a:ee:a6:13:e2:2b:fa:d1:29:47:23:12:7e:77:
         aa:2d:20:c9:94:97:47:96:af:4b:93:04:a1:39:d2:14:d3:89:
         3e:f8:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:37:10 2025 by rpki-client