Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
File:                     7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft (raw, json)
Hash identifier:          FjFQeAgHt4SF7QuIhkoDPQY9XIMdUuAYs4JbdG8TzZg=
Subject key identifier:   BA:88:7D:08:FE:36:81:AB:73:1A:46:48:89:0F:39:D7:92:F0:94:B8
Authority key identifier: EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
Certificate issuer:       /CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
Certificate serial:       0697
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
Manifest number:          0691
Signing time:             Fri 22 Aug 2025 22:27:54 +0000
Manifest this update:     Fri 22 Aug 2025 22:27:53 +0000
Manifest next update:     Fri 29 Aug 2025 22:27:53 +0000
Files and hashes:         1: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl (hash: msv0PO8URY2LlWTeol0A9MPkxmOgeuuIeOtz4532vEs=)
                          2: 98536A8A8D1811EBA3DEC15BC4F9AE02.roa (hash: GZC1H6bkYz3KSM38VOTZVhfdcChKVhr9TmELY8NJ80g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FF9, serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
        Validity
            Not Before: Aug 22 22:27:53 2025 GMT
            Not After : Aug 29 22:27:53 2025 GMT
        Subject: CN=68a8eee9-f9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:79:cc:84:46:76:30:fb:59:de:b3:db:29:
                    20:ea:ff:98:d5:80:f8:a5:ca:4e:fb:e4:9b:76:67:
                    5e:4f:86:ae:36:0a:7d:cb:bf:7b:21:d3:7b:d6:23:
                    62:c3:25:b5:25:d3:5c:6e:45:79:d2:de:8f:2e:6f:
                    0f:8c:1e:be:3f:60:a8:f9:92:a7:da:5d:48:db:49:
                    f0:63:41:ca:ba:08:ff:89:b6:7f:73:93:cf:6b:78:
                    7f:53:8b:89:f9:c7:ec:ed:43:a5:0a:0f:94:41:95:
                    27:1c:5d:73:1b:1d:8c:cf:7b:23:b5:d8:99:f3:e4:
                    d0:c5:c1:1d:22:fe:d7:b8:39:12:d3:b3:21:5a:bf:
                    73:29:58:8e:4a:46:19:29:71:5d:05:70:96:6d:54:
                    ab:07:89:d1:0f:e3:6d:f5:d0:18:02:c0:a1:1a:01:
                    57:c9:d3:5a:4d:b1:6d:04:fb:92:2e:68:cc:1d:8f:
                    30:14:1b:3b:55:ba:67:77:1c:b8:47:ce:ec:39:e8:
                    1b:76:ee:5a:05:30:22:ec:f1:36:3d:ee:4a:8a:d8:
                    7c:63:7a:df:77:7a:b1:e5:d6:74:bd:ae:f9:c6:0c:
                    fe:06:c7:99:e6:f2:ef:5f:3c:66:e2:b0:6a:31:9c:
                    ef:b8:be:b4:17:b6:a7:87:34:f4:7a:ae:2f:41:fd:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:88:7D:08:FE:36:81:AB:73:1A:46:48:89:0F:39:D7:92:F0:94:B8
            X509v3 Authority Key Identifier:
                keyid:EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:64:63:68:d3:b4:25:73:4e:5e:58:52:2a:3f:7a:59:d0:dc:
         04:41:4f:4b:94:76:7e:b2:db:c0:ee:8b:92:ec:79:d5:d0:7f:
         5b:2f:ac:ee:49:66:c2:39:18:75:ac:41:ae:a6:d9:c1:8c:65:
         65:98:0a:72:e3:b6:bd:3c:5a:30:99:fc:ec:7a:ee:eb:f3:09:
         bb:41:d1:ad:bf:c6:f7:a4:2f:b8:26:f0:c1:fb:5f:82:95:48:
         2c:03:2d:59:f5:d9:54:7e:6f:02:2e:62:7c:4e:61:95:3c:86:
         48:8b:b6:2d:6a:6b:ec:6e:39:48:d6:eb:ed:fd:82:52:25:47:
         37:b5:d7:b3:e8:9e:ec:16:eb:c2:09:8a:90:ff:34:da:e2:e5:
         c8:38:b1:59:53:96:e5:bf:ff:51:bb:c4:44:62:89:af:ba:6e:
         af:af:42:51:11:d7:0f:1e:d3:57:f6:fe:8a:c5:a9:eb:96:5f:
         f8:d1:38:89:01:72:1d:eb:58:cf:72:cd:22:a7:53:37:8b:6c:
         09:89:03:aa:bf:ae:af:a6:49:6f:9a:f4:0e:e0:28:6e:07:91:
         2f:32:8f:d9:ff:45:25:79:89:2b:9d:95:e5:9f:96:ef:fb:fd:
         a2:97:60:e7:d0:9d:fe:c3:29:fc:58:56:c7:71:0f:b0:9c:57:
         40:17:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:48 2025 by rpki-client