Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File:                     7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier:          y16GMinxpToKEBVeNDeazyUAF4aY16QlavHdmjhMVDM=
Subject key identifier:   0C:69:64:26:2E:A1:59:7F:26:C4:AF:C1:AF:E4:FB:50:B1:A2:A9:22
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer:       /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial:       0C02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number:          0BEB
Signing time:             Fri 18 Jul 2025 18:58:52 +0000
Manifest this update:     Fri 18 Jul 2025 18:58:51 +0000
Manifest next update:     Fri 25 Jul 2025 18:58:51 +0000
Files and hashes:         1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: 0BK8t9CDCC8qVkA14hbh/e4geYtRKmuiXh5Wv+de3nc=)
                          2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: cpZDWElJkWHfyDoaFzzaYvQgJmBavPZ5GGxiNrY4lcE=)
                          3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Ia7YlzfnZVrXXaoAHWfWApYxD2x/ixMau7CG/ipkyT8=)
                          4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: uO9dKN19ATuVxFqwADIfuDOdZhJHHOsW2uFtJZD9uM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
                          rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 18:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3074 (0xc02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
        Validity
            Not Before: Jul 18 18:58:51 2025 GMT
            Not After : Jul 25 18:58:51 2025 GMT
        Subject: CN=687a996c-70be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:8f:14:d5:94:f1:07:bd:ac:94:88:ce:c5:
                    85:ba:7e:9d:4f:74:55:3a:cd:92:a0:ab:7f:45:f6:
                    39:ae:f6:1b:1b:0e:39:98:16:b2:5a:52:9f:a8:fe:
                    82:eb:39:a2:72:af:1e:53:aa:62:e7:9c:35:ce:5f:
                    1e:f2:b8:7e:b0:39:fe:bc:56:7b:30:25:09:45:92:
                    e3:c8:f5:dd:bf:a5:c0:cc:5b:14:e6:d5:df:e5:33:
                    a2:35:7e:4f:d0:a4:33:29:a0:e9:a3:7c:35:3d:bc:
                    33:e2:d5:f3:77:d0:b1:5b:f0:3f:9a:8c:c0:eb:be:
                    1d:e6:5a:ff:94:4b:73:2b:91:0b:6e:c4:1c:eb:7e:
                    0d:bc:12:1e:1d:f4:cb:b3:6a:99:b6:a0:56:3d:51:
                    f6:6f:ed:72:44:3c:5c:b5:f3:8b:3e:28:d4:6d:4a:
                    ee:fe:9b:19:b2:d2:4d:4d:92:55:ad:07:54:df:d2:
                    4b:96:02:b8:03:e7:f7:6b:1a:37:2c:0b:4c:7a:0e:
                    4f:b7:7b:76:4e:6d:ae:dd:c6:6d:46:cc:46:24:76:
                    60:e3:1f:df:ea:54:30:14:57:d7:30:91:61:91:d5:
                    5a:d5:18:5e:a9:2d:50:b4:51:df:7b:7f:3f:4f:bc:
                    9a:6d:b8:95:42:7f:bf:eb:7a:25:1b:2b:61:95:bf:
                    2e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:69:64:26:2E:A1:59:7F:26:C4:AF:C1:AF:E4:FB:50:B1:A2:A9:22
            X509v3 Authority Key Identifier:
                keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:47:04:06:10:ce:37:3d:58:c0:00:4b:c0:ad:fb:9d:02:
         11:e7:03:94:94:4e:52:9a:88:7e:fb:4e:5c:dc:f0:e3:f6:bd:
         f5:87:fe:39:ff:2d:15:9b:22:2d:cb:bb:44:a7:a5:49:d2:c0:
         b2:f0:62:d7:df:85:bb:f7:f3:f6:b2:db:43:fd:7c:87:9a:68:
         b0:96:27:0b:1a:4e:cb:f5:41:4f:60:9e:34:c7:ef:0a:98:54:
         f7:44:92:b9:9f:cc:f3:0b:fb:89:98:b7:39:ed:f0:dd:a5:8c:
         ca:a5:62:7c:20:7d:12:36:45:5b:31:ad:20:8c:b8:5a:3c:4f:
         a5:49:b8:cb:1d:0f:b8:39:a0:92:15:8f:94:86:d4:ee:2d:91:
         b6:cd:3a:5d:51:14:51:e1:bb:0a:1d:d6:85:6d:d8:f3:3c:d8:
         96:9c:f0:2c:07:73:ee:ad:8d:ae:35:e6:43:5d:e1:30:4a:ac:
         9c:24:8e:b1:b5:75:90:6c:d3:ea:f0:54:67:b8:1d:41:e2:18:
         4b:81:e1:ef:e2:1a:e3:2a:20:f8:ae:1d:3c:09:8c:cf:4c:2a:
         53:09:cd:06:52:6c:94:f7:84:f2:d8:a8:a6:97:ad:1d:a0:30:
         0e:ae:4c:d5:23:23:1b:8d:4e:9d:5e:5c:13:2d:d2:ca:63:d2:
         62:89:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:42:51 2025 by rpki-client