Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          lS68nKXKtnXX0GQ3a8BVtNGgUSRpW26UtXgMPbLpgBk=
Subject key identifier:   33:71:46:25:E0:44:6D:80:C3:58:2F:83:F4:17:1F:DF:10:0E:B9:95
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          0119
Signing time:             Thu 03 Jul 2025 04:59:38 +0000
Manifest this update:     Thu 03 Jul 2025 04:59:38 +0000
Manifest next update:     Thu 10 Jul 2025 04:59:38 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: WpskIGaYVHeRpxRG8F6ivjEpLILf3rdgXRkVs2cShM0=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: Jul  3 04:59:38 2025 GMT
            Not After : Jul 10 04:59:38 2025 GMT
        Subject: CN=68660e3a-e1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:38:4d:51:0a:dd:03:ac:26:36:04:24:d4:
                    85:76:98:60:5b:aa:e4:a4:d2:f1:11:39:6a:d8:9b:
                    41:65:a6:6d:b2:9a:78:e5:38:28:bf:d3:ef:e3:e4:
                    ee:70:a3:28:33:d5:a0:6b:61:ee:ec:41:0c:46:d1:
                    91:e1:e2:b6:0c:bf:53:89:10:16:c1:09:39:1f:a3:
                    de:9b:05:c3:c5:85:f9:1f:a6:5c:7e:da:87:e0:cf:
                    38:18:d3:3d:c9:e8:03:1a:fa:c2:98:81:00:d9:3b:
                    eb:66:a4:a4:f1:43:53:7d:b7:d4:43:cb:2f:85:93:
                    ff:d1:6f:39:5c:89:b5:c1:84:af:6f:5b:74:21:2c:
                    33:62:77:fe:ab:0e:e5:4c:cb:98:6e:86:9e:f1:97:
                    09:4d:57:70:c2:a0:ba:23:a2:f7:12:fb:a5:d5:61:
                    54:f2:98:3d:e9:66:d2:70:cf:69:6b:9c:75:02:e1:
                    45:6b:b4:01:41:5d:ee:34:a9:21:6a:b9:1d:58:8e:
                    05:8a:f0:50:dc:79:6e:5e:7b:b0:31:30:71:bc:d5:
                    6d:8f:68:51:2c:e3:77:98:5c:9b:da:7f:e5:00:fc:
                    cb:f5:e8:fe:ac:0c:07:47:14:21:98:a3:7d:3c:07:
                    40:fb:59:21:45:a7:d6:d7:e6:f0:18:f1:e6:c5:34:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:71:46:25:E0:44:6D:80:C3:58:2F:83:F4:17:1F:DF:10:0E:B9:95
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a2:c2:2b:fa:3a:f9:65:b8:59:b2:63:8b:43:21:e5:a6:7c:
         78:f8:e7:6d:d6:65:4f:37:3d:65:c9:f0:f2:85:db:7a:6f:2b:
         07:f8:f6:7f:59:aa:85:76:c9:c2:dc:7d:40:aa:3f:51:0e:22:
         8b:0d:46:39:c6:1a:04:15:5a:c2:31:94:c3:1b:a3:83:82:d7:
         07:a6:7e:55:b7:8f:50:e3:13:2b:7f:98:98:d1:93:48:b8:2a:
         58:3b:b3:cf:13:a7:1a:48:0c:ba:de:9d:c6:73:45:ba:50:96:
         91:8d:08:a4:1a:e7:6e:67:aa:db:2c:52:44:7d:dc:f2:67:e9:
         70:b8:98:7a:47:d1:df:eb:11:30:1f:26:fd:85:9c:00:b2:28:
         48:81:30:60:51:09:1e:73:78:2a:76:27:62:b5:7e:43:a9:d2:
         18:51:4c:43:9b:9f:24:64:dd:ff:f2:5f:d0:eb:e0:81:f8:62:
         fd:28:43:83:39:6c:f5:3e:26:31:5b:9b:77:df:ac:34:81:87:
         b8:a0:0b:7f:be:8e:09:94:b8:50:40:1c:83:da:f8:d7:c3:50:
         77:93:3a:3c:27:f3:87:ca:3d:3a:f6:f3:d3:ca:39:7f:50:8e:
         cb:3f:6c:de:c0:df:d7:1f:1b:47:48:95:d2:0e:b6:13:16:eb:
         8b:c6:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:16:30 2025 by rpki-client