Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
File:                     07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json)
Hash identifier:          dS1niIzSt1hREgM57nOElpmuNTZY1mk0u/7NucbqPjo=
Subject key identifier:   EE:E6:73:19:1F:36:7B:0C:CC:09:3A:41:25:E1:EA:83:FA:D5:48:78
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Certificate issuer:       /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial:       0662
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
Manifest number:          0660
Signing time:             Wed 02 Jul 2025 14:50:53 +0000
Manifest this update:     Wed 02 Jul 2025 14:50:52 +0000
Manifest next update:     Wed 09 Jul 2025 14:50:52 +0000
Files and hashes:         1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: 4ZtWKf3Yyhwm4ICnxjIM60Rs5XtY57pdC0KTZxnuyBw=)
                          2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: /bP5RMzdbkL7/5EZqhq7cO3FfNuTY5k1xdEgv+lDTck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 14:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
        Validity
            Not Before: Jul  2 14:50:52 2025 GMT
            Not After : Jul  9 14:50:52 2025 GMT
        Subject: CN=6865474c-7c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7f:57:d0:9a:d2:4a:ef:35:e6:db:b8:57:66:
                    64:82:1c:7f:a2:72:78:eb:d2:7a:d9:9e:6e:75:81:
                    c8:f7:44:64:bc:8d:30:29:aa:74:19:3d:8d:52:c3:
                    76:6b:7b:00:6a:34:47:4b:56:fe:8f:d2:99:1f:22:
                    03:9d:da:f8:c6:e5:fd:c2:51:f0:2b:fd:eb:97:3e:
                    62:dd:a8:fb:9b:1d:ed:ad:ef:7f:a2:e0:e3:43:5f:
                    41:88:b0:15:e7:45:15:5a:dc:6d:0a:10:83:8a:f2:
                    fe:23:08:54:81:6f:2e:49:7e:25:1a:a9:e3:ed:17:
                    32:38:f4:8e:98:e0:41:13:7b:af:b7:89:0b:a7:56:
                    97:c2:68:98:1c:89:dd:0d:bd:06:7e:dd:66:14:da:
                    b0:97:ea:f0:41:af:f6:04:f5:7c:e7:a3:11:d2:f9:
                    60:2e:66:d1:18:ec:e9:77:29:bd:66:29:ad:0e:f4:
                    ad:ae:8d:02:a6:e4:99:5e:1e:5f:67:ea:c6:cb:42:
                    a5:80:7d:3f:2b:d0:48:aa:14:84:84:b2:15:bf:0d:
                    8f:aa:9f:6f:f0:14:e7:98:e7:1d:b8:1c:8f:ba:ad:
                    8f:c7:a3:bb:9f:2b:54:17:3c:96:fb:5b:a0:48:88:
                    32:b8:f6:2b:78:14:0a:27:4e:e5:84:53:06:c5:fb:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:73:19:1F:36:7B:0C:CC:09:3A:41:25:E1:EA:83:FA:D5:48:78
            X509v3 Authority Key Identifier:
                keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:41:5e:f9:51:d2:d9:7d:8a:4d:38:96:bb:ca:a5:75:50:5f:
         d5:9d:68:05:76:be:ce:e7:8e:b0:40:4c:a0:0b:e0:4d:53:77:
         94:9c:50:c0:8c:3f:0d:19:f1:e8:62:7b:7d:03:35:22:77:4f:
         f5:3f:60:54:ee:6f:8a:5a:65:6e:8a:0f:da:64:56:40:17:70:
         e6:7b:90:fd:51:89:6c:e0:59:fa:5d:0f:a5:08:b0:73:c9:f2:
         c2:72:75:c8:fc:53:f6:0c:e7:e6:06:6a:bf:d2:93:81:d2:23:
         ca:70:24:01:cb:c7:6e:34:ad:4a:e5:ed:aa:6e:6c:55:6e:64:
         83:53:e1:50:49:8f:ff:26:b2:89:c8:44:8c:a2:17:bd:e5:5c:
         c6:92:f8:a7:09:c5:69:d3:92:5a:84:92:f5:72:72:b0:c8:4b:
         22:7b:b4:fd:25:29:18:5e:eb:f2:bd:81:8b:ce:98:0c:f4:24:
         ee:70:7d:2c:3a:70:95:4a:64:ee:8a:f5:68:79:f1:c7:2b:c5:
         6e:6b:c5:0b:1b:19:b5:d5:2d:1d:fb:d1:c1:2b:ca:b7:00:c4:
         d6:81:26:23:7e:60:8d:1d:55:6f:55:c8:44:4a:02:1a:af:78:
         cd:3f:38:a0:2a:5e:aa:42:5c:31:14:6f:97:8b:46:7b:c6:aa:
         15:2c:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:57:14 2025 by rpki-client