Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
File:                     rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json)
Hash identifier:          FMVQMtcUPAoWC3rosCzMYJ4GG0jtznBMaplhZN5uMCg=
Subject key identifier:   61:A7:CD:74:41:30:40:68:AF:F5:3E:E8:AA:9B:5F:E7:19:D0:88:48
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Certificate issuer:       /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
Manifest number:          B7
Signing time:             Wed 23 Jul 2025 06:17:47 +0000
Manifest this update:     Wed 23 Jul 2025 06:17:46 +0000
Manifest next update:     Wed 30 Jul 2025 06:17:46 +0000
Files and hashes:         1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: berbi3vZXIdcb4Nyw4tun6XD3UNT8bfOEj52eMu31Ns=)
                          2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: t3nWUOarrxhEFD60ip2NaXslcMEcqGLVxqGfot6fF3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 06:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
        Validity
            Not Before: Jul 23 06:17:46 2025 GMT
            Not After : Jul 30 06:17:46 2025 GMT
        Subject: CN=68807e8a-54fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:5a:48:fa:b8:f7:c2:1a:a8:06:0e:f0:3e:
                    67:7b:14:1e:ff:e1:7d:ea:5a:a1:3b:d2:56:08:50:
                    1a:d4:db:8a:55:c9:88:82:84:98:23:3b:da:ba:1e:
                    fb:8c:77:34:9c:37:28:ba:bd:a8:20:46:65:de:4e:
                    b9:e2:8c:4f:50:c6:d3:dc:9d:4b:b7:36:39:dc:b1:
                    52:a3:94:fd:e6:e0:e0:06:62:33:32:c8:21:f5:a5:
                    f5:1c:23:64:25:0a:55:7f:0d:f4:16:da:ba:5d:7a:
                    1f:5e:a3:2d:6e:76:2e:eb:d6:bb:70:86:9f:de:00:
                    a6:3e:99:7c:79:d2:bd:b4:25:9d:05:c8:c6:6e:11:
                    75:ec:b9:5a:02:39:2e:e5:29:2a:9a:5c:cf:04:ee:
                    d9:b2:b1:19:34:a2:66:d6:40:35:98:cc:41:36:99:
                    c2:c2:20:97:6a:ce:06:22:05:af:bb:b1:d4:43:80:
                    66:23:ab:ad:78:bb:05:5b:d4:1f:9f:38:39:93:2f:
                    ff:5b:f3:fd:8f:b0:96:98:91:f2:ed:14:3b:92:81:
                    af:f9:ef:68:37:1b:7b:2d:ab:cd:73:77:22:12:42:
                    35:1c:b8:06:d6:9b:3e:f6:70:d0:9d:57:5c:d2:b6:
                    74:0a:34:e6:d2:2f:9b:04:e9:47:c7:5c:4d:1f:58:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:CD:74:41:30:40:68:AF:F5:3E:E8:AA:9B:5F:E7:19:D0:88:48
            X509v3 Authority Key Identifier:
                keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:ca:75:82:02:e0:e6:d9:45:22:82:2f:8f:a8:4f:69:bf:
         bc:d5:1f:94:41:4c:f5:7e:a0:e3:f5:0f:e2:4b:53:c7:9f:db:
         03:68:06:35:f7:ed:cf:d9:0f:c7:25:9a:d9:1c:07:b3:bf:99:
         7a:7b:cd:24:ad:77:da:54:f6:e8:93:e0:fd:c8:1c:d5:a3:a8:
         31:38:fd:37:97:85:5a:8e:01:95:60:a5:2b:b1:db:56:06:c4:
         08:34:57:22:11:5e:a1:85:48:97:d4:99:5b:71:9a:88:66:50:
         7f:2f:b2:41:21:78:b2:6c:58:8a:a0:24:c6:61:c5:b9:e5:27:
         32:b1:45:f9:41:d3:ba:b7:31:d3:5d:38:d6:6a:69:54:2f:4f:
         79:13:de:c3:07:56:73:ce:06:e2:2e:07:2a:88:db:e9:e6:f8:
         9e:ed:68:40:10:b1:5b:cf:6f:3a:b3:d3:48:a9:e7:fd:11:43:
         d7:02:d0:48:03:77:30:f1:9e:40:c1:74:5f:4b:57:bd:ee:7c:
         df:be:69:79:9f:7a:7f:06:a1:75:fa:22:54:b3:bb:eb:21:cb:
         82:46:f6:82:fd:10:75:bc:2f:2f:7e:33:86:d7:e8:14:c5:26:
         ab:e1:39:ac:17:56:fa:7e:f3:81:ec:74:cf:da:57:0f:5c:01:
         46:b2:02:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE2OUExMTAvBgNVBAUTKEFFNjU4RUEzNzdFQTExODQwQjA4RUE2Qzg4RDkwOTBF
OEI2QzUyMDQwHhcNMjUwNzIzMDYxNzQ2WhcNMjUwNzMwMDYxNzQ2WjAYMRYwFAYD
VQQDEw02ODgwN2U4YS01NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/taSPq498IaqAYO8D5nexQe/+F96lqhO9JWCFAa1NuKVcmIgoSYIzvauh77
jHc0nDcour2oIEZl3k654oxPUMbT3J1LtzY53LFSo5T95uDgBmIzMsgh9aX1HCNk
JQpVfw30Ftq6XXofXqMtbnYu69a7cIaf3gCmPpl8edK9tCWdBcjGbhF17LlaAjku
5SkqmlzPBO7ZsrEZNKJm1kA1mMxBNpnCwiCXas4GIgWvu7HUQ4BmI6uteLsFW9Qf
nzg5ky//W/P9j7CWmJHy7RQ7koGv+e9oNxt7LavNc3ciEkI1HLgG1ps+9nDQnVdc
0rZ0CjTm0i+bBOlHx1xNH1gHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGnzXRB
MEBor/U+6KqbX+cZ0IhIMB8GA1UdIwQYMBaAFK5ljqN36hGECwjqbIjZCQ6LbFIE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTY5QS84QjBFNzM4MDU4
OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZUUxDT3BzaU5rSkRvdHNV
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JtV09vM2ZxRVlRTENPcHNpTmtKRG90c1VnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTY5QS84QjBFNzM4MDU4OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZ
UUxDT3BzaU5rSkRvdHNVZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvEsp1ggLg5tlFIoIvj6hPab+81R+UQUz1fqDj9Q/iS1PHn9sDaAY1
9+3P2Q/HJZrZHAezv5l6e80krXfaVPbok+D9yBzVo6gxOP03l4VajgGVYKUrsdtW
BsQINFciEV6hhUiX1JlbcZqIZlB/L7JBIXiybFiKoCTGYcW55ScysUX5QdO6tzHT
XTjWamlUL095E97DB1ZzzgbiLgcqiNvp5vie7WhAELFbz286s9NIqef9EUPXAtBI
A3cw8Z5AwXRfS1e97nzfvml5n3p/BqF1+iJUs7vrIcuCRvaC/RB1vC8vfjOG1+gU
xSar4TmsF1b6fvOB7HTP2lcPXAFGsgKy
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:06:15 2025 by rpki-client