Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File:                     feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier:          JKqBEp9HlTOyxwX3H7K8p4EH0VV6f34KL5Iwwc4cNXA=
Subject key identifier:   BE:B6:20:C0:02:3A:C1:5B:20:01:47:76:AE:20:6E:D6:47:CF:F5:68
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer:       /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number:          0103
Signing time:             Fri 25 Jul 2025 01:41:44 +0000
Manifest this update:     Fri 25 Jul 2025 01:41:43 +0000
Manifest next update:     Fri 01 Aug 2025 01:41:43 +0000
Files and hashes:         1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: 4AnxKFxqkDY2+khHiyMGqGbyJIXmxeu/Sp+kKNB0XFk=)
                          2: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: XJ7QEpy838CSAu3M8dENQwDC26GEepMny717MK6FTrY=)
                          3: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: 4hfIidy+VeJThkZpOZWe1fPPKpgeMeUB9YIh+jyw3QU=)
                          4: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: YHWhKcoRyjB0P2neEplhATghOZqZeBUWkCt9dgbhrVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 01:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
        Validity
            Not Before: Jul 25 01:41:43 2025 GMT
            Not After : Aug  1 01:41:43 2025 GMT
        Subject: CN=6882e0d7-b8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:7a:2e:9c:7f:20:7f:07:d6:b1:60:0f:03:
                    0f:a7:42:07:3d:74:a7:29:88:f4:c8:82:68:07:e1:
                    dd:c6:0a:b9:8f:ee:40:b8:2e:7b:6c:3b:fc:37:f7:
                    30:b4:8d:f0:a3:d4:ca:00:05:68:09:1c:76:ea:86:
                    63:c7:d5:c0:c9:21:d0:6c:1e:6b:d8:e2:fb:f5:b9:
                    79:52:b0:24:84:8c:5c:37:81:02:32:3d:d9:e4:10:
                    55:bc:c2:ab:ba:96:a3:63:f0:d0:6e:32:13:e8:da:
                    2d:4f:35:0f:43:ea:d7:b8:0f:aa:82:2f:69:dc:b5:
                    46:70:97:3b:77:6e:62:10:91:27:1e:30:4f:16:a3:
                    77:d4:dc:48:cf:50:ed:66:41:ea:78:0d:6c:cc:9a:
                    22:12:3b:2b:13:1e:a2:e3:89:9d:9b:5d:5c:72:b3:
                    e2:45:7f:f1:0e:be:0e:a5:f1:05:8b:fc:02:fc:82:
                    cb:9e:30:01:64:1c:53:23:7c:9d:4b:e0:75:28:6d:
                    1d:00:24:57:bf:f4:23:f1:b4:f8:63:54:13:8f:07:
                    6f:9e:d3:df:94:39:22:31:c9:51:ad:0b:84:ef:d4:
                    2e:a4:19:c5:4d:dc:80:2b:b7:62:d7:ed:dc:da:7d:
                    ab:1c:6c:60:84:01:36:e1:ee:f4:e1:a4:cf:ac:cd:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B6:20:C0:02:3A:C1:5B:20:01:47:76:AE:20:6E:D6:47:CF:F5:68
            X509v3 Authority Key Identifier:
                keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:78:58:ff:5f:3e:c2:4b:ad:14:1a:ef:6a:53:d5:f9:ba:
         ec:2b:17:23:53:ec:20:04:2f:dc:84:26:3f:41:32:4a:04:2f:
         b8:7a:93:a3:66:7f:f5:a9:af:a2:d2:7b:69:4f:05:c7:ff:7b:
         e2:61:f1:8c:c6:8e:43:b6:72:dc:d8:60:7d:02:8d:2c:1f:23:
         ea:7d:ec:c3:ee:c0:8b:e1:ae:99:64:60:4e:b7:90:ce:2d:4b:
         54:66:22:0d:d3:c6:f7:82:48:b0:d5:99:1d:10:5d:75:54:d0:
         11:62:4b:20:5e:e2:3a:7f:af:47:cd:43:b4:9d:3a:36:00:5e:
         d4:73:9c:b4:14:e4:36:df:ec:83:1c:4e:04:b0:63:00:f4:62:
         e4:c1:fe:ce:b6:7f:fb:ce:03:96:15:9d:16:bc:ff:e1:c9:de:
         c3:c6:e7:e6:5f:99:e7:23:66:0c:6b:98:0d:00:58:92:70:c9:
         4c:ea:01:83:72:6a:d0:b1:58:7d:eb:84:1a:ed:c2:39:fc:a8:
         11:a8:18:e7:ba:db:b1:b5:8e:31:03:f9:9c:8f:72:b0:26:72:
         3e:63:54:cb:46:db:4a:f3:07:9c:65:bc:8c:f5:a5:f0:6f:10:
         03:13:24:b0:2f:cf:57:b0:01:df:6e:2e:79:c0:4d:ee:1f:3b:
         b6:34:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:12:33 2025 by rpki-client