Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File:                     fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier:          XfmDkmPDHO/mlu4cfMLiGBpiR8L6yIPSy1tvP7zAGIw=
Subject key identifier:   5B:E2:BB:5C:9D:8E:42:69:14:01:6D:E8:89:84:55:CF:DF:1C:39:A9
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer:       /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial:       07D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number:          07CA
Signing time:             Fri 18 Jul 2025 21:22:51 +0000
Manifest this update:     Fri 18 Jul 2025 21:22:50 +0000
Manifest next update:     Fri 25 Jul 2025 21:22:50 +0000
Files and hashes:         1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: d37d81miT5zhdiHOUYD0LDmcVxPOTQC5s9DBCjlaNRM=)
                          2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=)
                          3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
                          rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
        Validity
            Not Before: Jul 18 21:22:50 2025 GMT
            Not After : Jul 25 21:22:50 2025 GMT
        Subject: CN=687abb2a-42d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:8f:dd:db:cc:4e:94:43:d7:93:c0:42:7d:
                    32:31:d4:52:cb:8c:99:52:0c:ea:09:37:8c:d3:f8:
                    bd:b6:44:32:6b:92:c5:62:d8:d4:9e:db:4f:71:e5:
                    5a:03:b1:37:3f:36:ea:9d:13:03:cd:05:d0:3f:16:
                    7a:14:d3:73:1a:29:62:6f:59:6a:f9:0a:21:30:43:
                    cc:86:44:af:5a:e2:0a:83:6c:4c:b8:92:ed:c5:95:
                    0c:0c:57:7f:2c:fb:e4:c1:32:03:d2:1c:1a:7e:a7:
                    d1:4e:62:70:4d:fa:ec:80:87:1e:6b:9e:73:62:69:
                    e1:10:f9:1c:5d:b7:d1:4b:75:29:61:74:bb:42:f5:
                    34:a1:c5:51:b3:91:92:77:36:e6:94:46:19:f9:cb:
                    28:5e:e6:c5:dd:23:dd:f3:b2:e5:bf:26:de:bb:be:
                    10:ec:bd:33:8e:0f:60:82:e6:0e:a0:40:3d:d4:d9:
                    73:d9:56:c2:62:c4:b0:d8:dc:fb:f7:28:a1:58:28:
                    08:bd:a9:ba:72:32:9c:2f:ff:25:29:35:3b:b3:fb:
                    c2:55:72:3f:d3:4c:e4:2d:99:42:35:d4:5b:40:c3:
                    73:d7:91:31:50:47:f1:c7:4c:d0:63:e0:ab:e7:c5:
                    0c:a9:d6:b9:37:32:25:9c:fb:cc:f5:17:a1:c2:db:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E2:BB:5C:9D:8E:42:69:14:01:6D:E8:89:84:55:CF:DF:1C:39:A9
            X509v3 Authority Key Identifier:
                keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:39:43:0a:d1:49:a1:56:a2:4a:9c:f8:8c:5e:fb:bd:80:99:
         82:3c:fe:4a:21:6d:68:ca:20:e0:7a:e6:97:8c:97:83:46:8e:
         9c:36:74:63:7e:d6:83:ed:68:b2:12:57:15:e7:7e:ae:c7:d8:
         43:08:f2:b5:06:34:c0:07:27:67:4c:99:99:56:21:64:9f:3d:
         b3:28:a9:4e:7e:82:4d:af:8f:c4:c9:0f:83:54:96:82:c4:3d:
         a9:45:6b:be:22:67:c6:4a:34:46:40:89:4c:f0:c7:00:71:df:
         6f:d0:cb:ea:95:49:33:af:11:13:2e:bc:64:f7:aa:6d:1d:66:
         ac:e2:5c:16:39:69:fb:53:47:66:7e:46:5f:b4:e6:48:87:b6:
         1f:87:7a:e7:fa:84:c4:fa:a7:b2:bf:be:53:88:de:82:15:be:
         38:dc:d0:b5:a7:ec:17:12:73:9b:85:c8:64:b9:a2:2b:8a:ae:
         8b:c0:c9:8a:ca:df:70:6e:ae:80:98:c8:12:e2:97:75:7b:d4:
         1e:b4:ab:23:28:51:f5:f0:33:39:68:87:b2:92:ca:41:25:92:
         fb:3f:c3:d6:80:25:03:94:6d:d6:fe:ac:fb:68:1e:24:73:e5:
         93:e9:74:e2:b3:88:a9:25:1d:e8:87:cd:ae:cd:e4:94:b4:d2:
         fa:56:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:27:25 2025 by rpki-client