Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
File:                     t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json)
Hash identifier:          xnxMGXnXXmI57ElrbWegoz76zC2n1QcFNqrstEEdDuo=
Subject key identifier:   8C:88:96:95:95:FC:85:F8:99:06:0F:31:82:E5:B1:84:53:6F:FC:98
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Certificate issuer:       /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial:       266D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
Manifest number:          25E5
Signing time:             Fri 22 Aug 2025 15:47:40 +0000
Manifest this update:     Fri 22 Aug 2025 15:47:40 +0000
Manifest next update:     Fri 29 Aug 2025 15:47:40 +0000
Files and hashes:         1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: 8F/6tMnvpK4SQsSNc9vagrSpDJU/iBwP7EjVpACDors=)
                          2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: qiiCfqFkoE73eTUuEAWAlpV2z6GCWd7ckeeiGxi5A4g=)
                          3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0=)
                          4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: OnnEcT/kT/2u+quSNu4e6UQE5EuukB+yT7k1rnta/B8=)
                          5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 7w5j+dyzSy7t29HEAco9XLxp6MYZWlL3SdlWBrNw0GY=)
                          6: A8ED74B2677F11F0A8B65370C4F9AE02.roa (hash: V/RoWqDdFNTou3RWIV5KwIL9w5loJak511PG4DuKPHs=)
                          7: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: rA4hkIUyghNJGhY6y7qlDGe8Bvu+DeS8X5hf3GA24oo=)
                          8: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: qP1taxaDkzPIRlzYJOWEFK27iFdTzqw6PgRMtNqW7DY=)
                          9: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=)
                          10: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: SGtpHicj9fj12PvzOePuISsi6bvGYuZWMeMkAXSkEcc=)
                          11: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: R4Hu6VZOII2INVF3IDAiNevmkDezpOVd/aGcqQwbfzw=)
                          12: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: BUsQ5wBegaz/A2q7GTFIUHkDuT4PXl4dcLWVKVnr0mQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9837 (0x266d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
        Validity
            Not Before: Aug 22 15:47:40 2025 GMT
            Not After : Aug 29 15:47:40 2025 GMT
        Subject: CN=68a8911c-81c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:77:ff:39:92:4b:2a:18:ea:41:45:90:d4:
                    b0:b0:fa:82:ef:56:2c:31:8f:c2:83:c4:55:f2:d8:
                    c8:dc:fa:92:74:88:cb:df:7e:58:1d:0f:c9:74:e3:
                    4c:cb:52:48:d4:aa:b0:4d:da:89:4a:7c:d8:2e:b5:
                    d3:b2:fa:72:ea:0a:75:aa:ae:0f:2f:df:d9:ee:64:
                    cd:e9:22:2f:ef:36:f1:08:ef:5b:e3:22:40:ad:da:
                    f7:e2:b1:d4:d1:30:1a:e7:3e:4f:d8:4b:e0:df:59:
                    e8:bf:80:15:c4:b3:39:9f:bb:b8:a8:1e:fc:0e:b2:
                    aa:03:3a:2d:4c:75:4e:5d:79:0a:5e:07:04:f3:c9:
                    22:f0:86:7d:b4:71:18:95:52:cc:57:dd:26:61:98:
                    17:22:ab:35:73:61:a5:0f:90:d8:ea:d6:4f:1f:e4:
                    5b:b2:17:6e:c4:e9:df:90:48:4b:d0:96:a9:b2:c0:
                    af:57:20:83:ce:a8:4e:8f:27:8d:6e:21:75:e3:56:
                    de:d0:17:bd:00:32:a3:fc:70:f9:61:a0:b5:7b:da:
                    9a:2d:54:22:ea:7a:c8:fe:8b:97:a5:30:7d:82:48:
                    eb:f7:ab:38:25:36:fa:dd:d9:7f:a6:01:36:83:ba:
                    fe:88:41:a6:ef:74:16:ea:5f:a6:00:d5:2f:a8:d8:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:88:96:95:95:FC:85:F8:99:06:0F:31:82:E5:B1:84:53:6F:FC:98
            X509v3 Authority Key Identifier:
                keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c5:7c:82:0a:ad:67:83:cd:94:da:c2:a0:b7:da:5e:5b:0c:
         0c:c9:42:70:a7:43:dc:52:0d:1f:91:c1:eb:d3:61:cd:40:f4:
         00:8c:9b:b8:71:29:c7:20:e9:71:32:57:d7:bc:d2:e6:8d:4f:
         08:c1:b6:65:99:53:14:64:ed:89:4a:20:fe:b7:8d:d7:49:4d:
         e0:70:f3:c7:99:e5:11:31:3e:27:85:15:d7:8e:0b:44:61:df:
         7f:d9:53:5a:f2:bd:9c:7c:ba:66:5c:ae:04:9b:de:fd:2a:f5:
         5b:43:da:30:88:94:69:38:9c:49:45:0b:b7:b9:ab:fb:b1:4a:
         67:69:ee:fd:33:c5:05:e9:dd:63:e9:ec:0b:c4:cf:e1:c4:ea:
         6e:38:c2:ef:29:35:94:89:a7:e7:e3:2f:8d:14:bc:69:44:65:
         c1:9e:ce:1c:69:13:a7:bb:da:c1:df:7b:06:b1:f5:08:7c:8f:
         05:47:f4:e5:f2:ce:65:18:3a:2e:a1:53:6b:b5:84:a4:74:4d:
         7f:ce:7a:cc:46:21:71:fc:42:da:60:0c:e0:7d:21:43:e3:8c:
         14:b9:fc:fe:f9:bf:10:9f:fa:65:08:15:b3:db:b2:99:1b:ec:
         f4:66:a1:cd:46:d0:99:82:1c:5c:55:45:0a:be:79:e9:b2:65:
         ec:16:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:36 2025 by rpki-client