Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File:                     F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier:          a+Az2yEaugyWMuEdsUeNBajBjsrRaqb3KEmNZyQJM/c=
Subject key identifier:   DF:26:CD:DF:82:5D:04:29:4D:6B:74:8E:FB:B1:76:0A:74:B1:B4:42
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       07DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number:          07CD
Signing time:             Mon 30 Jun 2025 21:18:36 +0000
Manifest this update:     Mon 30 Jun 2025 21:18:36 +0000
Manifest next update:     Mon 07 Jul 2025 21:18:36 +0000
Files and hashes:         1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: 8dhAfkB9zVeQRfyKdYytTDiUo9EQjY34+luDpEPAJkw=)
                          2: 8D38DE3C2FED11ECB35A414FC4F9AE02.roa (hash: 4nNxlXf6o0nnD5I2xWyRCuAKUzO3zgq8UO0w+zr/898=)
                          3: 8E7B872C2FED11ECB35A414FC4F9AE02.roa (hash: OlQKH7ACIVrHGtlUAnuv3tHbt5ORT3G0pc9ERA6ytzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 21:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: Jun 30 21:18:36 2025 GMT
            Not After : Jul  7 21:18:36 2025 GMT
        Subject: CN=6862ff2c-12ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:37:5a:02:a9:74:85:d6:e2:29:85:f6:a8:
                    d4:02:5c:d3:af:41:b7:5d:c5:ab:13:a7:34:a1:aa:
                    ab:f9:0c:73:2b:44:c3:d0:6b:78:6d:bf:b3:3c:5d:
                    f6:3b:ee:f7:aa:15:fd:57:3e:fb:e3:a4:f6:9f:18:
                    5c:6e:c4:85:f3:ce:bc:cc:01:46:f9:ed:bd:bc:97:
                    93:32:36:9b:18:c6:a5:91:c1:6a:57:c3:63:2f:a1:
                    e3:a2:58:9b:17:e9:de:c4:9b:7b:02:de:02:aa:88:
                    8a:4b:02:78:1f:aa:59:a7:f2:5f:0d:cd:68:e7:ab:
                    3c:27:a7:34:34:1a:2f:6f:fa:5c:25:ea:06:06:c5:
                    75:34:f9:37:99:99:d0:b9:a0:8c:b3:a7:d1:39:e0:
                    ec:6a:6c:fa:c7:e2:50:50:e4:72:58:5d:05:e1:ce:
                    0e:9c:a2:9a:81:63:41:2a:b8:66:0b:0f:12:2f:65:
                    c8:2a:c4:12:e1:e3:83:82:25:a2:f4:b1:29:67:98:
                    6a:1c:68:0d:64:cb:f4:f0:50:7f:21:71:fe:07:2a:
                    3a:6a:11:04:44:5b:a4:2b:b6:40:76:26:ea:1b:7d:
                    17:7f:cb:d0:3c:9e:68:72:b4:07:01:f8:f8:03:f0:
                    ad:45:42:05:62:db:7d:29:c8:36:02:1a:19:82:33:
                    b9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:26:CD:DF:82:5D:04:29:4D:6B:74:8E:FB:B1:76:0A:74:B1:B4:42
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:a2:fe:1d:52:a5:13:d9:f8:5a:70:72:ff:30:9c:34:00:
         7d:ef:2d:79:62:52:49:04:1b:b4:cb:9d:94:76:c2:f6:64:53:
         c9:e7:3d:46:43:ec:fe:d8:34:3f:3a:42:7a:3c:01:30:78:b7:
         14:10:ea:4c:46:4c:b6:26:c4:2e:43:2b:61:88:dc:83:4a:7e:
         9f:dd:3c:20:23:77:da:14:7d:51:ad:f7:92:a3:bc:35:62:ba:
         4e:24:47:c7:e6:ec:61:d1:24:46:7d:ce:e2:2f:a2:70:96:5a:
         d7:bd:65:7d:08:9a:e3:9d:39:d0:42:4f:36:bd:8b:48:d7:49:
         c8:2e:44:d4:cb:c2:1e:05:50:bb:e1:c8:83:d6:56:0e:a1:09:
         e1:b8:73:b2:27:c3:10:40:18:ea:87:d8:83:a2:0f:35:b8:56:
         00:bf:3e:eb:84:51:0a:a6:56:3c:1c:21:06:25:d3:b2:06:0e:
         7b:c4:48:02:18:86:89:ec:62:9d:1f:38:56:43:0e:eb:03:c0:
         52:21:60:30:47:58:c0:b5:9b:42:0b:8c:5e:0c:e0:d9:e0:1b:
         50:48:53:59:d6:24:5a:56:dd:9a:e3:d7:f4:55:54:26:9f:f5:
         23:8c:c3:f1:f3:df:26:41:c5:ec:ff:1c:22:71:3e:71:fe:60:
         72:29:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:17:01 2025 by rpki-client