Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
File:                     E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json)
Hash identifier:          1VY/zPC32I7XNsMxkqn8U5vWzB5m/Z/18XIMvyw7uF8=
Subject key identifier:   79:B3:A6:F7:38:41:04:F0:8D:E4:21:5C:17:C3:33:29:3D:1F:AD:2C
Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09
Certificate issuer:       /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
Manifest number:          01F8
Signing time:             Thu 03 Jul 2025 02:31:32 +0000
Manifest this update:     Thu 03 Jul 2025 02:31:32 +0000
Manifest next update:     Thu 10 Jul 2025 02:31:32 +0000
Files and hashes:         1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: Mv88MRybh/fshxNkC8/b56YCC59LSfPIwKIo9HA4qps=)
                          2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl
                          rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609
        Validity
            Not Before: Jul  3 02:31:32 2025 GMT
            Not After : Jul 10 02:31:32 2025 GMT
        Subject: CN=6865eb84-6ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:26:87:d8:cf:dc:57:21:70:ea:1e:15:b4:
                    0c:da:57:a3:b0:c7:1a:07:75:d3:01:78:cb:ce:57:
                    08:57:0b:11:27:6c:b6:8f:e7:41:77:2c:f1:61:f9:
                    0d:a5:f0:98:15:3b:33:a0:0e:26:fa:0f:12:b4:0e:
                    46:10:fc:e2:36:72:14:40:72:f2:d7:c2:c7:6d:53:
                    fb:ef:23:7d:9e:b2:e0:41:1f:e8:70:08:8b:b2:a2:
                    d7:99:24:76:cc:50:c6:1e:df:a4:9d:4d:34:af:fa:
                    db:94:33:f9:6d:63:4e:19:36:a7:ea:fd:c9:fc:55:
                    37:84:d3:29:c2:6d:38:76:97:4a:1e:e0:c0:6c:97:
                    fa:e8:7a:6e:85:cd:ee:f6:c9:42:dd:12:7b:41:9d:
                    ce:1c:9f:be:05:7a:e6:55:3c:e6:4d:00:93:ff:3f:
                    75:b4:a4:bb:72:33:ec:f4:99:85:62:8b:00:34:df:
                    d3:ce:5c:27:cf:3f:f9:ff:f4:9a:79:3d:bc:76:a5:
                    bd:44:1f:ac:16:a5:a7:e4:a4:28:7e:2f:b2:74:86:
                    ec:94:be:59:f8:76:3a:37:fb:df:8c:4c:d5:34:6e:
                    16:72:c4:fb:f8:a9:bd:38:30:db:e6:01:52:13:93:
                    dd:74:71:2e:c0:98:dd:1e:e8:4c:5a:ed:95:24:ff:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B3:A6:F7:38:41:04:F0:8D:E4:21:5C:17:C3:33:29:3D:1F:AD:2C
            X509v3 Authority Key Identifier:
                keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:db:97:7e:72:f8:14:32:72:ca:0e:5f:3d:72:7c:80:6e:97:
         9f:6b:e0:f2:5e:b5:9d:49:c1:0e:1f:b3:9c:06:7e:d1:e4:09:
         8f:24:69:7a:ac:ed:ac:4a:f4:b4:21:fe:97:d0:1b:27:3b:95:
         4e:97:e4:41:f0:96:0c:4e:9b:6c:c9:09:10:0e:31:e9:32:c7:
         f3:08:68:fa:f6:be:5d:b0:00:a6:cc:3b:bf:e7:58:61:82:38:
         18:ef:3a:a1:e4:1f:a7:bc:de:b1:c8:64:cf:f7:24:df:03:4c:
         c3:39:91:ff:7a:2b:04:a6:9f:fa:5d:c4:50:66:bd:ae:a0:82:
         8c:a4:0f:6d:e3:97:85:f7:ee:0d:e3:32:cc:83:f2:c3:97:e7:
         98:e8:af:e3:c2:9f:58:86:07:7c:6b:e0:5d:25:2d:95:f1:e4:
         b2:f5:98:90:a0:fa:cc:2d:36:5d:68:14:07:b8:ca:f7:cc:1f:
         b2:9b:09:fc:98:3b:7f:3c:d3:2a:65:90:6e:29:d7:db:44:31:
         f1:69:1d:84:94:93:df:80:1c:0a:ed:95:41:09:f2:07:42:97:
         88:f1:33:f4:38:f3:8b:cb:9b:1d:bb:1e:24:83:df:23:d5:77:
         91:58:f9:52:4a:67:71:67:9c:ab:d6:0f:a0:dc:3b:ed:58:61:
         b2:da:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:51:19 2025 by rpki-client