Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
File:                     t6ep_77HE_hOC1GAr3besW5ykik.mft (raw, json)
Hash identifier:          Ilddi1u2MrfUzTimsj4JJL3v9Vbw6JVaE8ylPiNLbcQ=
Subject key identifier:   5F:8C:DE:35:85:8B:FE:77:F2:A9:F6:CA:06:77:10:11:AD:A2:4F:4C
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Certificate issuer:       /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
Manifest number:          057F
Signing time:             Wed 02 Jul 2025 23:38:22 +0000
Manifest this update:     Wed 02 Jul 2025 23:38:21 +0000
Manifest next update:     Wed 09 Jul 2025 23:38:21 +0000
Files and hashes:         1: t6ep_77HE_hOC1GAr3besW5ykik.crl (hash: Tbu3CWHdopjrJ1no4it8XngxWgsHbL7EpE11aM+pH8Y=)
                          2: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (hash: V6GGgopQM/9MURG7ZCjHLUUN1Fak1PfMVntGosPl4Vo=)
                          3: F68AC4D84D9B11EC9CF19624C4F9AE02.roa (hash: DYCid3LLEniTmBG1cDjym9t3s6fpWuAE5JDaOW/kSN8=)
                          4: B63ACB8CCB8411EC98BF6718C4F9AE02.roa (hash: YAUteCmPsOym2G6bKX0x3ZydCIKVsenbUJgAGliknoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
        Validity
            Not Before: Jul  2 23:38:21 2025 GMT
            Not After : Jul  9 23:38:21 2025 GMT
        Subject: CN=6865c2ed-1d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:7b:55:43:38:86:ac:d8:58:85:76:3d:b5:
                    a1:91:0f:a2:00:fe:db:1c:0d:cc:1a:b7:25:98:39:
                    38:df:ee:1f:c6:f6:e1:3c:aa:19:65:be:e5:db:f7:
                    7a:c7:e0:de:2e:71:f0:b7:c7:86:d7:34:d3:61:d1:
                    50:6e:37:80:d2:31:d5:3a:06:ce:0b:6b:12:53:0e:
                    c8:ef:2a:21:71:80:aa:a6:5c:9a:16:03:f4:ff:9d:
                    65:18:ea:70:61:8b:0c:dd:c3:7f:fc:ac:b7:f8:f0:
                    6c:a6:bb:cb:9d:79:8d:43:36:d7:6e:4d:2b:e5:cc:
                    5b:66:80:f0:dc:c0:0c:8f:6b:83:a5:64:bc:74:f7:
                    b9:4f:72:c0:9f:f2:a5:49:46:93:fc:35:76:63:b7:
                    ad:cd:59:d2:61:69:be:68:d9:85:ef:05:07:d9:0c:
                    dd:4f:bf:34:13:fd:04:5f:07:5f:77:08:c7:02:40:
                    13:0e:eb:8b:8a:28:27:e9:7e:6e:e2:33:ca:ef:a5:
                    50:f5:98:0e:9d:50:ad:56:de:80:96:cb:a1:b4:68:
                    10:7d:99:42:74:65:2c:39:9f:fc:2a:74:7a:bc:05:
                    8e:98:ea:f8:b3:50:cb:d5:28:99:e3:9b:3f:9f:26:
                    80:2e:54:2a:51:cf:ce:54:c6:f9:50:68:37:fa:6d:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8C:DE:35:85:8B:FE:77:F2:A9:F6:CA:06:77:10:11:AD:A2:4F:4C
            X509v3 Authority Key Identifier:
                keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:46:ec:29:d4:55:c3:b2:59:69:42:a1:82:87:98:d5:6d:79:
         63:07:ac:d4:5e:43:12:e2:6a:03:d8:76:31:7e:75:87:22:23:
         e2:65:22:75:f0:49:93:32:a5:ac:29:98:d2:32:a5:d8:2b:a8:
         5a:c0:ee:aa:ae:2b:ec:b6:23:99:02:bc:cb:af:a4:0d:02:1c:
         a4:21:bf:0c:f8:ce:0d:5f:bb:74:0e:40:c8:66:3e:c1:7a:63:
         6f:ef:8c:41:32:e9:1b:7e:bb:88:44:90:6b:5a:cb:6e:3c:59:
         4b:71:b3:70:73:de:ff:c7:eb:41:00:53:a5:cf:61:4c:a5:24:
         ba:5b:ea:80:b7:b8:d2:e5:e1:1d:ea:24:ff:99:1c:8c:20:d0:
         bb:e1:ba:5b:ee:6f:19:fc:70:97:30:7e:ee:00:1a:40:9d:d4:
         99:2b:2e:8f:79:e5:80:8c:5e:c8:d4:ad:6b:96:20:90:e3:9a:
         98:b6:6d:7e:a7:57:b5:df:79:56:0f:ff:75:e7:20:c5:db:d3:
         5a:49:76:cf:13:9a:86:6b:a6:f2:4f:49:46:e5:47:6a:ee:a8:
         91:a4:3e:ed:15:80:3e:0f:bd:70:32:ea:f7:f7:ab:f4:b2:a2:
         f8:d6:4d:5d:01:3c:41:d0:27:bc:f1:e3:9b:f3:9b:2f:0c:5e:
         41:56:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:40:59 2025 by rpki-client