Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
File:                     t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json)
Hash identifier:          N/nM4xj4oW9MRfFtapCjQGvTz60TTjp8djPjoNyZsKY=
Subject key identifier:   09:99:91:37:47:3B:C4:CE:DA:F4:73:E8:9C:4C:6E:9A:C5:BC:D9:AA
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Certificate issuer:       /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial:       264E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
Manifest number:          25C8
Signing time:             Wed 02 Jul 2025 15:51:47 +0000
Manifest this update:     Wed 02 Jul 2025 15:51:47 +0000
Manifest next update:     Wed 09 Jul 2025 15:51:47 +0000
Files and hashes:         1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: jrCcKyj06TBtD1ZUWbGxSuO0/AQavv307cXDgQyk2M4=)
                          2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: qiiCfqFkoE73eTUuEAWAlpV2z6GCWd7ckeeiGxi5A4g=)
                          3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0=)
                          4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: OnnEcT/kT/2u+quSNu4e6UQE5EuukB+yT7k1rnta/B8=)
                          5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 7w5j+dyzSy7t29HEAco9XLxp6MYZWlL3SdlWBrNw0GY=)
                          6: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: rA4hkIUyghNJGhY6y7qlDGe8Bvu+DeS8X5hf3GA24oo=)
                          7: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: qP1taxaDkzPIRlzYJOWEFK27iFdTzqw6PgRMtNqW7DY=)
                          8: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=)
                          9: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: SGtpHicj9fj12PvzOePuISsi6bvGYuZWMeMkAXSkEcc=)
                          10: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: R4Hu6VZOII2INVF3IDAiNevmkDezpOVd/aGcqQwbfzw=)
                          11: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: BUsQ5wBegaz/A2q7GTFIUHkDuT4PXl4dcLWVKVnr0mQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9806 (0x264e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
        Validity
            Not Before: Jul  2 15:51:47 2025 GMT
            Not After : Jul  9 15:51:47 2025 GMT
        Subject: CN=68655593-275a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:62:5e:dc:78:0e:0d:e3:4a:8c:e3:1a:d5:
                    c5:ff:ff:a4:32:0c:fb:a2:9c:74:5b:39:f7:47:90:
                    a0:18:23:26:f6:9c:87:49:4c:b5:a1:a5:ff:13:8c:
                    e3:12:be:cd:82:9d:dc:b2:8c:72:0f:44:5f:ee:12:
                    e9:73:94:9c:70:2d:e1:e5:68:60:a6:22:a1:73:fb:
                    88:8b:27:4e:23:33:c5:33:3a:d1:cd:5e:e8:aa:23:
                    5a:9f:8f:81:da:04:4f:cc:a3:2f:3b:78:fe:47:8d:
                    a7:79:d0:bb:6d:35:f4:11:f3:e4:9a:fd:a5:00:e7:
                    ab:04:c4:c9:59:16:f3:f9:4b:71:31:ab:55:14:60:
                    9e:2e:38:98:3d:b7:17:26:64:c6:e1:2f:47:c9:37:
                    b2:c7:90:6a:13:a4:20:4b:c3:98:84:27:0c:50:1e:
                    c2:10:0e:83:0a:b7:79:bc:82:4d:b2:14:a3:81:d8:
                    04:2c:80:a9:64:4e:e5:eb:67:bc:ae:33:ea:ce:fd:
                    5b:de:12:c7:f5:80:85:8d:a8:81:41:54:de:57:75:
                    21:8f:0f:74:01:b2:40:d2:cc:2a:af:f0:77:ed:e6:
                    74:0e:9b:35:e2:98:31:be:45:d2:03:26:e7:38:5d:
                    97:86:50:c6:9d:e4:b6:c6:03:c7:de:aa:94:91:03:
                    4e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:99:91:37:47:3B:C4:CE:DA:F4:73:E8:9C:4C:6E:9A:C5:BC:D9:AA
            X509v3 Authority Key Identifier:
                keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cd:f8:c0:f0:be:f0:87:e6:c6:66:0d:f5:2c:18:cb:40:45:
         13:19:a1:9b:22:d0:73:cf:ee:df:08:7c:b6:d1:53:5a:01:30:
         ba:12:fa:ab:15:5d:0e:d9:3f:1c:b1:24:f6:65:75:84:12:60:
         83:ce:a8:ca:06:df:bf:47:6c:61:b8:bf:5a:f6:39:5f:6b:d5:
         98:97:28:8a:db:38:64:58:79:9c:4e:18:19:32:96:96:e3:10:
         06:45:f5:00:5e:f9:a9:d3:02:76:79:c6:dc:c6:38:ca:d0:9c:
         53:b5:a0:c4:17:40:45:85:0e:63:a0:83:1f:09:e8:10:8d:c1:
         12:50:34:ff:44:49:be:57:4c:57:0e:c3:44:fa:2d:2b:36:c9:
         8d:82:f2:78:34:bf:5d:60:b7:05:02:41:87:12:a6:eb:cb:a7:
         71:e0:08:ce:b8:0f:c3:a3:80:ec:28:f2:16:94:08:c6:1a:77:
         8e:e9:0f:db:0a:b8:ca:8b:98:f3:b0:67:b8:32:0d:2f:52:c5:
         c6:ce:f8:fa:9e:67:24:98:a9:d3:56:dc:58:cf:b1:c7:7a:da:
         7b:9c:9f:1d:20:0d:3d:e7:7f:a0:32:51:e1:fe:e6:6f:dd:29:
         26:c7:78:6f:b4:e7:12:25:89:36:98:51:55:89:95:3c:0f:68:
         7e:9d:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:12:12 2025 by rpki-client