Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
File:                     6EferVwP7UnjOjtiJO_z5OzaQZY.mft (raw, json)
Hash identifier:          ahp/E+WFAUfyxEzU/mGBYT84GC+BfDEAmMBh//8s4hQ=
Subject key identifier:   2A:99:62:25:EE:DC:6D:03:DB:CC:DA:F3:6B:34:1F:F9:0D:1C:9F:55
Authority key identifier: E8:47:DE:AD:5C:0F:ED:49:E3:3A:3B:62:24:EF:F3:E4:EC:DA:41:96
Certificate issuer:       /CN=A91F2573/serialNumber=E847DEAD5C0FED49E33A3B6224EFF3E4ECDA4196
Certificate serial:       07B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
Manifest number:          07AB
Signing time:             Fri 22 Aug 2025 21:27:33 +0000
Manifest this update:     Fri 22 Aug 2025 21:27:33 +0000
Manifest next update:     Fri 29 Aug 2025 21:27:33 +0000
Files and hashes:         1: 6EferVwP7UnjOjtiJO_z5OzaQZY.crl (hash: yrM3/4rNQ5evukvST9v1oH/6ff5bgv1WuBDPCNxfaJ0=)
                          2: D35D0A48129B11EB97265731C4F9AE02.roa (hash: YPo4JrjUY8rokDYSsOS/zRUheikbdfmmqRlCH28JQPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.crl
                          rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970 (0x7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2573, serialNumber=E847DEAD5C0FED49E33A3B6224EFF3E4ECDA4196
        Validity
            Not Before: Aug 22 21:27:33 2025 GMT
            Not After : Aug 29 21:27:33 2025 GMT
        Subject: CN=68a8e0c5-dfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:a9:b9:cc:3f:a1:3c:99:ae:23:93:64:70:
                    f7:15:af:d8:08:e3:74:84:35:b9:b1:e6:63:30:25:
                    35:d3:52:b1:4c:3f:00:58:2f:23:9b:c0:d3:ad:2e:
                    f1:d9:ab:e9:fd:53:92:8e:a5:49:e7:6e:35:ac:a2:
                    23:40:c1:eb:3a:c7:e1:0e:39:a6:f0:20:50:f0:06:
                    ad:bb:46:68:89:be:af:8e:a9:bc:41:f9:cc:a0:6b:
                    14:42:50:77:be:65:4c:db:82:b7:0a:00:c1:dd:17:
                    09:78:1a:36:6a:22:42:92:bd:a9:fe:e9:01:a8:73:
                    9e:9c:10:3a:22:ad:af:81:42:7e:2e:87:2a:c1:3e:
                    f4:5d:df:73:4f:74:6b:29:b2:86:49:61:85:77:d8:
                    e3:86:db:a3:a0:4d:36:dd:8f:c2:66:db:68:ab:7a:
                    40:da:30:c4:fc:5b:9c:81:54:19:2a:61:5e:6d:c7:
                    1b:b7:79:0d:0d:1d:20:f2:6d:5b:cc:14:56:8a:d0:
                    52:94:c2:42:b7:dd:04:b5:42:c1:c9:17:6d:2d:b1:
                    ce:a1:6f:14:7a:60:e8:44:21:7d:ba:02:9c:3b:e6:
                    bb:7d:2a:76:29:2a:4c:9a:8c:0a:9e:75:38:a9:7b:
                    1c:f4:9b:67:95:f7:ae:53:d6:bd:e0:00:2b:e2:47:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:62:25:EE:DC:6D:03:DB:CC:DA:F3:6B:34:1F:F9:0D:1C:9F:55
            X509v3 Authority Key Identifier:
                keyid:E8:47:DE:AD:5C:0F:ED:49:E3:3A:3B:62:24:EF:F3:E4:EC:DA:41:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3a:36:0f:43:2e:47:24:fc:e0:f4:65:94:76:2b:53:fb:b8:
         38:72:d7:86:b1:4d:5e:b6:87:09:a0:ff:4f:e7:33:56:fd:de:
         80:6a:63:13:67:17:01:66:cc:70:b6:3b:b2:ac:56:5f:9c:55:
         cd:8d:25:6f:c6:71:97:9e:4a:38:18:b3:d7:b6:5c:5f:37:89:
         f2:f5:a5:7d:d3:46:b5:2b:f0:20:cb:19:19:2c:ed:d6:f3:2d:
         6e:46:e3:94:05:f4:25:94:15:3d:25:50:8e:59:26:ba:1e:ac:
         4e:9c:37:ef:c3:d7:b8:45:d2:4f:53:f2:ab:f7:c6:5f:41:9f:
         58:3f:a8:0f:33:2b:17:85:46:39:da:17:d1:70:6e:b5:11:f7:
         66:5d:7c:d0:d8:0f:12:15:9c:87:cc:14:7e:4f:b4:ed:bf:3e:
         9d:55:11:89:77:8b:a1:8f:20:ef:e3:ce:dc:0f:a0:60:92:96:
         5f:a8:f9:29:55:7b:5c:1f:20:97:03:4c:5f:8a:36:c4:d0:20:
         c5:91:5c:52:ae:7c:44:ee:45:ff:32:a6:e9:21:6a:89:d1:40:
         86:2f:a4:e4:66:9d:d2:be:27:13:98:f3:4e:45:95:5d:be:be:
         2a:ed:64:63:92:7e:d9:77:ab:25:18:5b:f7:22:8f:f3:80:54:
         11:fe:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:04:25 2025 by rpki-client