Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
File:                     7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft (raw, json)
Hash identifier:          9RlGpGpV/NfLH5KnDcwR8R91wv6X8Q6Pg9hX9ZuhVbw=
Subject key identifier:   A8:B2:90:BD:DA:67:80:20:EE:04:FE:0A:91:B7:26:C9:5E:D3:2F:28
Authority key identifier: EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
Certificate issuer:       /CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
Certificate serial:       067B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
Manifest number:          0675
Signing time:             Sat 28 Jun 2025 22:00:00 +0000
Manifest this update:     Sat 28 Jun 2025 22:00:00 +0000
Manifest next update:     Sat 05 Jul 2025 22:00:00 +0000
Files and hashes:         1: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl (hash: jTFrt0c4Ri0S1mKhsjD2OwAiaRn2vdpy+SsoblbHB3g=)
                          2: 98536A8A8D1811EBA3DEC15BC4F9AE02.roa (hash: GZC1H6bkYz3KSM38VOTZVhfdcChKVhr9TmELY8NJ80g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 21:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FF9, serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
        Validity
            Not Before: Jun 28 22:00:00 2025 GMT
            Not After : Jul  5 22:00:00 2025 GMT
        Subject: CN=686065e0-2365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:01:48:7c:a2:ea:31:2c:ae:06:20:aa:8a:
                    79:f0:ca:da:39:c0:7a:d1:8e:35:85:c8:ce:af:ad:
                    69:b9:3a:b1:61:6c:f0:c7:fc:ca:24:75:94:3a:ac:
                    94:98:e8:a1:8e:14:92:b1:82:cd:29:22:d5:72:08:
                    09:a3:f5:e5:96:b5:c6:12:2b:ba:91:93:ba:16:ac:
                    4a:22:99:ee:aa:f6:e4:bd:3f:36:e3:f2:a6:ca:b9:
                    08:73:bf:3e:d4:ad:fc:dc:20:56:60:ab:2c:42:83:
                    f2:19:6c:db:b1:92:ad:c0:99:b3:3a:77:a7:ee:84:
                    16:1a:72:7c:69:67:75:02:3f:e3:30:55:c1:53:a7:
                    f2:41:af:07:b1:7a:ba:aa:65:98:b5:06:45:bf:4d:
                    e6:18:8a:14:8e:f2:df:fe:81:aa:5a:ec:46:d4:a9:
                    af:85:78:72:29:cc:4b:31:80:13:bf:8f:d0:0b:85:
                    b1:35:89:5c:fc:d8:97:59:9d:30:4c:23:cf:87:57:
                    8f:6e:50:ce:ce:0c:ab:47:09:07:16:69:b8:01:59:
                    23:bf:d6:e6:5d:0a:ed:c7:e3:00:72:63:55:84:b1:
                    b4:8f:23:db:7d:bb:8f:06:de:9d:26:85:2f:2a:9c:
                    3c:ef:1d:3d:79:6e:0b:60:ec:0b:b4:17:43:f3:bc:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B2:90:BD:DA:67:80:20:EE:04:FE:0A:91:B7:26:C9:5E:D3:2F:28
            X509v3 Authority Key Identifier:
                keyid:EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:66:65:fb:53:7b:57:7c:a2:1a:6a:e8:84:ff:a9:bd:12:
         af:81:91:ac:d1:af:16:d1:0b:5c:b7:bb:87:26:9a:f1:ea:dc:
         db:7e:36:71:ce:89:59:83:3f:d5:0e:30:82:9c:f2:b6:a8:84:
         0a:52:d3:08:d8:68:15:98:f4:32:02:4d:dc:13:96:d9:0c:73:
         4b:c7:74:25:75:4f:6b:ea:f2:23:1c:41:c4:76:97:5a:de:06:
         14:57:07:2f:48:1b:8a:80:c3:6f:f7:81:d3:ac:16:fa:b3:56:
         1c:82:6e:37:5b:42:1a:e9:5b:ac:e9:6b:d9:f2:73:56:83:13:
         b1:88:2b:22:cb:5d:dc:ac:65:cb:14:5f:79:20:df:99:1e:2e:
         56:26:bc:6b:99:e4:b6:4b:74:1c:a3:19:02:97:ce:00:85:3d:
         c8:13:5c:19:58:23:c3:81:4b:d3:da:1d:10:c3:91:df:23:2c:
         95:7a:76:4e:9c:51:b6:eb:37:c7:f6:d3:e5:ef:49:cf:19:34:
         0f:fd:e5:c8:24:73:34:c2:b2:eb:e8:98:03:da:98:00:50:38:
         34:6f:0d:09:25:d0:e1:05:1a:bc:4d:8f:22:bc:f7:ef:d3:a2:
         c5:e9:26:b8:0c:cf:aa:d7:a7:f9:ab:cb:5e:b8:f6:89:51:62:
         19:ba:4b:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBGRjkxMTAvBgNVBAUTKEVFRkQzRTg2QUY3NEY5NDgzNDY0MDE2QjkzNEZDM0VG
MTRDODJENDYwHhcNMjUwNjI4MjIwMDAwWhcNMjUwNzA1MjIwMDAwWjAYMRYwFAYD
VQQDEw02ODYwNjVlMC0yMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsZwBSHyi6jEsrgYgqop58MraOcB60Y41hcjOr61puTqxYWzwx/zKJHWUOqyU
mOihjhSSsYLNKSLVcggJo/XllrXGEiu6kZO6FqxKIpnuqvbkvT824/KmyrkIc78+
1K383CBWYKssQoPyGWzbsZKtwJmzOnen7oQWGnJ8aWd1Aj/jMFXBU6fyQa8HsXq6
qmWYtQZFv03mGIoUjvLf/oGqWuxG1KmvhXhyKcxLMYATv4/QC4WxNYlc/NiXWZ0w
TCPPh1ePblDOzgyrRwkHFmm4AVkjv9bmXQrtx+MAcmNVhLG0jyPbfbuPBt6dJoUv
Kpw87x09eW4LYOwLtBdD87yoHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiykL3a
Z4Ag7gT+CpG3Jsle0y8oMB8GA1UdIwQYMBaAFO79PoavdPlINGQBa5NPw+8UyC1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZGOS9ERDZBNzY1MDgw
Q0UxMUVCOTM1MDE4NjhDNEY5QUUwMi83djAtaHE5MC1VZzBaQUZyazBfRDd4VElM
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd2MC1ocTkwLVVnMFpBRnJrMF9EN3hUSUxVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEZGOS9ERDZBNzY1MDgwQ0UxMUVCOTM1MDE4NjhDNEY5QUUwMi83djAtaHE5MC1V
ZzBaQUZyazBfRDd4VElMVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMVGZl+1N7V3yiGmrohP+pvRKvgZGs0a8W0Qtct7uHJprx6tzbfjZx
zolZgz/VDjCCnPK2qIQKUtMI2GgVmPQyAk3cE5bZDHNLx3QldU9r6vIjHEHEdpda
3gYUVwcvSBuKgMNv94HTrBb6s1Ycgm43W0Ia6Vus6WvZ8nNWgxOxiCsiy13crGXL
FF95IN+ZHi5WJrxrmeS2S3QcoxkCl84AhT3IE1wZWCPDgUvT2h0Qw5HfIyyVenZO
nFG26zfH9tPl70nPGTQP/eXIJHM0wrLr6JgD2pgAUDg0bw0JJdDhBRq8TY8ivPfv
06LF6Sa4DM+q16f5q8teuPaJUWIZukuD
-----END CERTIFICATE-----
Generated at Sun Jun 29 12:39:03 2025 by rpki-client