Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
File:                     f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft (raw, json)
Hash identifier:          /2hnXhohnKhjCJ7///4fExrm6EXs4FZiIjgpQO0nEY0=
Subject key identifier:   A8:5F:D5:B1:9F:87:76:56:36:4E:63:6A:A2:E9:F8:68:5C:0A:0A:AC
Authority key identifier: 7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C
Certificate issuer:       /CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
Certificate serial:       03ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
Manifest number:          03E7
Signing time:             Tue 01 Jul 2025 01:36:36 +0000
Manifest this update:     Tue 01 Jul 2025 01:36:35 +0000
Manifest next update:     Tue 08 Jul 2025 01:36:35 +0000
Files and hashes:         1: f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl (hash: oZm/dW14hFNC/2tqwZHtUDcK+ic7WkSwqdQn4fpIHkQ=)
                          2: 95EE2A18A8C511EC8F560C42C4F9AE02.roa (hash: 9bIT9Wti4Q16RNara0yjrmc8CnpGQxIQgk88L2RqepI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D50, serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
        Validity
            Not Before: Jul  1 01:36:35 2025 GMT
            Not After : Jul  8 01:36:35 2025 GMT
        Subject: CN=68633ba4-f8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:5f:15:65:2a:4a:7e:d0:73:9c:28:57:37:
                    c1:db:e1:02:41:bc:bd:c9:23:6e:cc:ff:a3:f0:26:
                    ba:0e:7b:8d:cd:6a:04:1d:f4:e6:ef:52:4e:89:3d:
                    b3:01:8b:0e:62:3c:0a:f9:1b:b0:3e:3e:0b:1c:52:
                    17:43:91:d6:f3:fc:2e:5d:b7:11:0b:a7:8d:a5:4b:
                    e4:c9:fa:95:c0:14:bf:c4:1f:2b:19:6d:19:bd:29:
                    3f:c2:a6:5a:0d:7d:7a:53:ae:32:27:68:a8:b8:68:
                    af:a1:e5:3c:fe:56:ed:9c:eb:cc:92:90:2b:06:ce:
                    d7:33:c6:ea:7c:88:7d:89:4b:e0:f3:f7:74:f5:db:
                    ba:50:86:10:77:da:44:80:80:50:09:54:e6:10:6f:
                    e8:e7:63:d4:60:f8:40:92:70:62:48:ea:71:79:83:
                    7f:a1:f4:7a:2e:db:bb:b2:d1:50:3e:88:de:df:53:
                    01:a6:e1:f7:fa:2a:cb:bb:16:1c:c0:45:90:95:7e:
                    6d:b5:c1:14:cf:93:f6:29:98:3c:23:7a:ed:07:20:
                    f6:23:b1:7d:63:66:d4:7f:c3:b6:26:e7:b4:4f:d1:
                    80:22:f8:b6:a9:63:62:73:8d:cb:cf:67:ac:a6:22:
                    e3:10:fa:06:63:78:7e:7a:70:c4:e1:e3:d0:b1:52:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5F:D5:B1:9F:87:76:56:36:4E:63:6A:A2:E9:F8:68:5C:0A:0A:AC
            X509v3 Authority Key Identifier:
                keyid:7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:b9:46:8f:10:c1:f9:eb:20:39:17:16:93:ee:ab:9a:d6:
         92:63:88:17:0d:80:95:a6:4c:8d:da:8a:b8:72:c1:90:91:ca:
         8f:3a:57:6e:2c:fb:46:41:8c:ef:fb:90:4b:7d:0d:bf:f9:54:
         b0:70:a9:0e:1d:82:f6:59:9f:7b:c9:3f:6d:4c:9d:7a:df:e1:
         1c:f4:e7:d5:ef:e9:3e:eb:80:63:d8:48:94:b5:54:ea:73:9a:
         41:8f:c8:55:5e:8e:17:74:0e:90:b7:f0:88:84:ab:cf:31:ca:
         6a:61:14:64:d3:67:ca:1d:3d:cf:30:d6:a9:8b:2f:f0:ae:df:
         cb:03:5a:7b:2f:ea:20:a0:72:0a:f6:40:8d:31:b2:eb:8c:5d:
         ad:54:b6:45:19:b9:16:a1:43:8b:9f:2d:95:e7:7f:05:d3:22:
         2a:d0:00:bc:9d:2f:ee:79:00:5b:2f:95:4b:08:9b:02:ea:fe:
         20:ad:0d:d0:2a:37:02:6c:96:8a:fe:e5:58:70:74:17:63:87:
         76:f0:97:43:18:5c:0c:6f:a6:cb:9b:6d:fb:a6:68:44:a9:12:
         32:a6:c5:06:98:11:3b:01:44:90:e3:02:2e:f4:8d:5a:2b:bf:
         1e:70:a9:07:f0:d3:fd:a2:a9:6c:0c:38:ab:55:1d:c9:3a:da:
         19:7b:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:12:41 2025 by rpki-client