Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
File:                     7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json)
Hash identifier:          QXP+4i4iHQyg2KRQ3aCJtkg3+8SJwNQ1MH2Y5Ltmwn8=
Subject key identifier:   13:2F:F6:D5:4E:52:9A:9A:CE:1A:3A:42:A1:A5:F2:12:6F:F8:AE:ED
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Certificate issuer:       /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
Manifest number:          07AD
Signing time:             Fri 22 Aug 2025 21:27:54 +0000
Manifest this update:     Fri 22 Aug 2025 21:27:54 +0000
Manifest next update:     Fri 29 Aug 2025 21:27:54 +0000
Files and hashes:         1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: tSYcaZTiA/d/zOiu4nhjrHXtiOdnLW1DSkR1XZ/kryc=)
                          2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: 9lbHf1cHckf8dUxoW20HZsn96REnlD7CWohZQ19csPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
                          rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
        Validity
            Not Before: Aug 22 21:27:54 2025 GMT
            Not After : Aug 29 21:27:54 2025 GMT
        Subject: CN=68a8e0da-255b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:48:44:a4:9a:36:3f:f2:4d:35:5d:54:b2:
                    5e:c0:63:a9:03:2f:08:ad:69:25:12:47:90:fb:46:
                    6a:b7:7f:3e:c3:4a:dd:57:4f:ed:dc:a4:e2:6a:20:
                    05:d5:18:63:92:dd:c8:4a:7e:75:45:95:4f:35:65:
                    b9:fe:fa:e1:0c:ca:e2:29:08:f5:26:8e:53:9f:cc:
                    f7:64:c3:49:be:de:06:78:52:16:ff:65:6f:72:9f:
                    e8:9c:94:3a:97:bf:b8:4a:f2:b1:88:9f:08:ef:dd:
                    08:56:6f:7d:52:1a:b3:14:96:81:90:a4:56:14:e3:
                    22:27:f1:44:27:8c:0b:f4:bb:d2:24:1d:05:34:e2:
                    8d:63:0d:bc:1c:c2:d9:68:a5:c8:0e:75:0d:8e:80:
                    89:08:fe:ac:13:32:68:8c:33:ed:8c:6b:8a:29:b8:
                    d5:8c:c1:aa:15:a8:1c:f0:46:97:bb:fc:10:d8:f7:
                    67:aa:c1:db:20:44:29:8a:44:a6:35:e5:fd:f7:e0:
                    20:27:b9:7a:0c:75:8f:f6:2f:e2:3f:88:8a:6a:9e:
                    52:9f:0b:85:ad:1b:e7:01:12:e8:69:d2:0a:9c:82:
                    8e:9b:69:6c:4a:65:c7:70:a1:6d:fc:3d:a3:74:34:
                    e6:8d:1a:ec:7a:8e:37:25:a5:10:91:9f:13:58:67:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:F6:D5:4E:52:9A:9A:CE:1A:3A:42:A1:A5:F2:12:6F:F8:AE:ED
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:e5:81:b0:65:3f:90:ab:49:85:ae:0b:b5:c9:8d:cb:21:
         69:17:53:cc:c2:c0:e9:a4:f1:0d:7b:d9:72:71:a5:f7:b3:5b:
         ae:e0:d1:b4:bf:8b:37:dc:46:3e:2a:4b:70:55:2a:fa:e2:d5:
         e4:e0:8e:fa:59:a2:ae:9a:18:d6:21:67:ee:cb:20:56:b1:2b:
         f5:90:cf:f4:1a:7b:a3:b2:0e:d1:66:e7:94:2a:7f:5d:40:fb:
         fd:48:2e:6e:9a:da:62:93:ed:b5:6a:8e:22:89:cb:b6:45:f5:
         96:24:9a:ff:26:b6:2c:90:c3:47:0d:ca:16:d3:25:06:8c:e2:
         dc:23:f8:d5:70:aa:61:5f:f1:1a:64:27:c3:2e:77:dc:9f:5f:
         cb:51:a1:f7:4a:7c:1e:77:8d:40:c6:d7:16:3f:06:60:d9:b9:
         76:ee:01:e6:d6:24:52:e1:4c:08:fc:60:38:ef:73:cb:b9:80:
         9d:d3:df:0e:1c:06:9b:91:43:76:62:bd:4f:a4:59:9c:b4:6b:
         ed:77:66:08:ca:52:1d:d6:ea:96:e8:ad:aa:a4:b7:57:13:09:
         bd:82:32:59:d0:1e:4b:7c:60:7a:f2:0d:d6:fb:4a:75:a1:08:
         21:26:d9:35:ac:3a:6b:59:49:73:0a:e6:89:03:3a:5f:7b:bd:
         50:17:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:43 2025 by rpki-client