Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File:                     7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier:          HQYuGFtKe/Qv+6qztm76NMNBKZCxX3j7rujcpwSJELY=
Subject key identifier:   EB:96:7F:B7:C6:3D:F3:C5:12:FB:FA:09:E9:DB:07:31:BB:ED:34:F6
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer:       /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number:          05
Signing time:             Sat 23 Aug 2025 08:25:08 +0000
Manifest this update:     Sat 23 Aug 2025 08:25:07 +0000
Manifest next update:     Sat 30 Aug 2025 08:25:07 +0000
Files and hashes:         1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: +d+hB0v1IxBLvjadOf2SgG0grmj36q0IL776N6zeVNs=)
                          2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: au2fE5QZV4wi2bNW1k3MSZSx8H26Znmq3AG3Io7itYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
                          rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
        Validity
            Not Before: Aug 23 08:25:07 2025 GMT
            Not After : Aug 30 08:25:07 2025 GMT
        Subject: CN=68a97ae3-861b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:d1:e3:6a:07:a0:c1:73:2b:db:5d:f7:b3:
                    1b:a9:d7:ea:45:f5:96:8d:2d:18:c7:c5:92:25:b9:
                    3d:ea:a7:b6:0f:eb:d8:43:a2:c5:02:18:db:49:e7:
                    9f:e9:d0:41:ec:f1:fb:04:d9:18:2c:52:67:87:51:
                    92:19:c2:98:e6:b6:41:06:27:6c:b6:ce:7e:42:65:
                    08:7e:39:f8:31:72:60:08:ba:0f:0a:23:eb:09:a2:
                    93:7e:37:d0:b1:84:5c:5e:09:ca:57:1e:ee:92:9f:
                    37:45:1b:c3:1d:5a:1f:75:04:ce:64:4c:b8:78:60:
                    18:9d:e7:df:0e:59:48:a0:1b:21:79:dd:36:03:39:
                    50:9e:76:a0:7d:0c:04:ae:51:f5:7f:bf:3c:7d:c9:
                    89:b2:6c:22:a8:fa:37:81:38:64:93:92:4b:70:c9:
                    31:29:c5:0d:fa:42:10:40:31:52:d2:bc:d2:68:54:
                    51:00:8c:3d:1b:9c:44:dd:ba:d9:81:70:1d:f9:bc:
                    c9:3b:cd:00:5e:8c:74:af:0d:ab:3b:9b:4c:7f:fe:
                    ea:72:d9:eb:7a:6a:0a:dd:ea:e0:85:34:41:0d:d2:
                    d5:d0:16:c7:c4:ce:04:26:bf:7b:60:6d:ad:db:b7:
                    cc:32:2e:cf:fc:92:ab:ae:ad:8b:7d:e5:f5:bd:56:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:96:7F:B7:C6:3D:F3:C5:12:FB:FA:09:E9:DB:07:31:BB:ED:34:F6
            X509v3 Authority Key Identifier:
                keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4f:da:87:f5:cb:a9:b5:37:bf:3c:72:53:91:fe:4b:8d:a8:
         a0:a4:9d:ec:47:cd:ab:f8:2b:1a:21:bb:56:af:5e:2f:e3:0e:
         96:d3:4e:75:b0:33:63:64:5d:38:dc:c4:00:cf:0e:69:e8:25:
         6e:b7:21:74:c0:5c:b2:26:b5:eb:71:39:08:d4:6e:56:cd:cb:
         b6:2c:a7:66:ef:ad:52:b5:8b:6c:28:07:8d:74:a8:63:6f:fc:
         c3:95:86:60:aa:f3:01:29:7d:f1:f1:7e:1d:20:70:8c:71:a6:
         94:73:fe:51:e2:e3:77:90:85:2f:a4:01:4c:35:a8:25:78:5e:
         7b:93:32:76:1d:d1:3c:c3:2d:1c:db:b0:19:7f:7c:4a:de:9b:
         8d:b3:4c:f0:ed:15:a2:fe:ab:51:ae:c0:21:33:a0:8b:f1:6b:
         e5:e0:f7:65:bb:30:cc:32:dc:b3:23:e7:fd:e6:1f:c0:23:d0:
         c9:ba:a2:f7:38:8b:25:db:a3:ea:2b:a7:74:90:59:eb:b3:7f:
         92:c2:6b:e2:fb:a6:70:fa:be:c0:39:53:df:14:a4:49:20:18:
         29:74:c0:44:17:93:8a:47:e8:a9:f2:5f:e0:96:50:e5:b2:7d:
         62:20:e2:19:da:ea:5c:a1:7e:00:c9:72:50:6d:1e:70:be:55:
         b0:bc:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:40:01 2025 by rpki-client