Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
File:                     7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json)
Hash identifier:          ISgsnGuqhF4NCo5KRqWH/wf8SHK0q6GVDCbSqe+GHSQ=
Subject key identifier:   0E:5B:F9:11:FF:52:6D:1C:7A:E2:61:8E:F7:C8:23:5D:C1:CB:B7:D6
Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
Certificate issuer:       /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
Manifest number:          01FF
Signing time:             Sat 23 Aug 2025 02:35:13 +0000
Manifest this update:     Sat 23 Aug 2025 02:35:12 +0000
Manifest next update:     Sat 30 Aug 2025 02:35:12 +0000
Files and hashes:         1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: J+8eV7HbceJNhjaNzZlafqsDGCUQRgOdzovmvHFel60=)
                          2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
        Validity
            Not Before: Aug 23 02:35:12 2025 GMT
            Not After : Aug 30 02:35:12 2025 GMT
        Subject: CN=68a928e1-4b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:b0:a3:25:46:20:e6:ba:eb:15:bc:e0:5a:
                    3b:0e:65:07:ba:92:97:cb:e0:93:9a:81:bf:b7:33:
                    ad:11:16:af:c7:f4:e1:3a:45:9b:c6:7d:b5:15:e0:
                    f3:f9:49:5c:fe:23:0a:9c:da:56:2b:6f:58:e2:08:
                    6e:b7:7d:02:7e:7b:69:04:60:81:30:ea:ac:bd:1e:
                    79:1c:e3:85:08:26:b9:25:7c:53:05:1d:5b:99:86:
                    2e:98:65:5d:73:37:0b:0f:6f:fb:29:4f:47:b3:f0:
                    86:27:32:24:72:58:0b:94:4a:43:a1:a1:6c:20:5d:
                    6c:43:2e:a2:c8:14:f3:c6:06:36:82:b9:cb:d5:ee:
                    8e:3f:7d:a3:40:57:56:3d:25:9b:af:f3:b9:b6:5a:
                    f3:40:15:6a:b4:cc:64:92:52:9a:24:86:e1:f8:15:
                    4e:46:13:20:fa:e4:87:46:57:26:1e:f4:dd:3d:f9:
                    d7:bc:22:71:4b:03:f4:d9:b5:3f:fb:11:4c:a8:79:
                    b5:c2:0f:87:c6:f4:0a:8b:d8:89:36:a2:11:2f:2b:
                    3b:ff:ed:ce:f8:51:74:04:b6:03:cc:1e:e6:c9:8e:
                    c9:e5:b4:73:26:42:2a:b2:8b:fd:c1:a5:87:2b:e2:
                    5b:a2:e9:24:75:51:15:19:53:75:45:a6:a1:31:75:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5B:F9:11:FF:52:6D:1C:7A:E2:61:8E:F7:C8:23:5D:C1:CB:B7:D6
            X509v3 Authority Key Identifier:
                keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:72:39:88:2b:1d:dd:1d:22:9c:1d:99:c4:94:78:b9:8e:f8:
         be:f4:95:21:32:9e:f9:76:0e:50:37:f8:12:86:77:39:36:d8:
         28:31:5f:2f:9c:21:a6:79:d6:e3:28:4b:11:53:0a:fc:9f:0b:
         9b:47:41:39:4e:2b:91:c0:f6:b4:0c:0c:1d:05:5b:9f:fc:eb:
         e5:ee:68:61:8c:75:a3:86:5f:37:bb:aa:8e:e0:75:42:d2:35:
         15:6d:4d:09:75:8e:d6:cd:9f:b1:9a:26:cf:83:a0:04:0f:f5:
         fd:86:72:a7:a3:06:f1:1f:0f:24:54:2c:3a:15:50:ea:1a:29:
         0a:d0:d7:39:dc:7b:bd:35:68:9c:1e:85:0f:5a:ae:3d:d9:3f:
         01:27:ce:2d:75:cc:29:d1:ca:bc:97:11:98:e9:62:56:33:f3:
         dd:25:93:a7:87:67:05:fd:aa:d1:5d:71:4b:12:c8:0c:67:22:
         80:fe:0c:4f:03:7a:a4:65:09:50:fd:f5:f5:b4:0a:45:cc:df:
         81:09:60:40:52:58:ee:d2:1a:e5:8d:b6:fc:cf:95:98:c4:14:
         6c:b5:57:ac:a2:27:10:3f:16:e5:30:8e:bc:51:88:07:b7:d5:
         bf:ba:23:48:9e:e2:ef:95:a2:97:43:ff:25:a0:a9:9b:bb:9c:
         37:70:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:15:17 2025 by rpki-client