Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File:                     7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier:          Zwr0JvdhmHsKuySJEyeAEyNVLXPKAAmbm+O1FsE0MMk=
Subject key identifier:   85:93:A1:47:8C:D9:2F:1B:C2:00:93:A1:4E:4A:27:BB:C7:DB:A6:FB
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       07BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number:          07B7
Signing time:             Sun 20 Jul 2025 21:19:37 +0000
Manifest this update:     Sun 20 Jul 2025 21:19:36 +0000
Manifest next update:     Sun 27 Jul 2025 21:19:36 +0000
Files and hashes:         1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: 3MokpvSE+VdArsYpUSil9EE/Hp07E2/KP09efHt7WpU=)
                          2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: U97kR7RcsCigK2e8XjTe4vPaz//2MFlJM/gHaNAYSkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 21:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980 (0x7bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: Jul 20 21:19:36 2025 GMT
            Not After : Jul 27 21:19:36 2025 GMT
        Subject: CN=687d5d68-53cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:28:60:3a:88:db:1e:c5:bd:6b:89:99:5e:
                    9a:bb:f5:46:70:12:d1:87:95:81:19:cb:f1:52:96:
                    2c:12:8d:09:a3:6a:1c:06:e2:b0:a2:55:c2:24:35:
                    ea:0c:48:96:b2:70:5e:5a:fe:07:1f:f6:ad:3c:af:
                    07:b0:66:16:7d:90:1c:14:c3:81:07:49:6a:19:99:
                    e7:85:cc:be:89:20:fe:c1:2c:4a:de:fc:45:ed:6e:
                    fd:50:f3:18:2c:7c:fc:14:22:6f:5a:a1:4f:f9:be:
                    e9:1b:8f:f3:62:64:fc:68:98:a1:a3:62:e3:47:91:
                    06:c5:2e:ab:b8:e8:bd:9a:9d:5a:87:95:3f:93:b5:
                    f5:cd:a2:ef:c1:f4:d1:e9:9d:87:60:3a:49:0d:c2:
                    c9:ad:66:ac:84:27:94:50:11:8e:65:8e:ef:e8:d1:
                    47:6c:06:c0:e8:27:05:43:8e:1a:87:4c:24:07:7e:
                    30:33:24:09:8d:1d:3a:ee:3d:3c:75:93:43:38:ee:
                    33:16:85:3c:5c:a9:80:9e:68:70:d1:33:81:c8:63:
                    28:90:19:0d:f7:71:35:07:4f:61:9d:02:62:28:7c:
                    05:17:1f:e9:66:f0:ee:65:77:f7:17:1d:f7:29:bf:
                    be:d4:04:22:67:cf:19:ca:87:e0:b7:50:9e:1b:8e:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:93:A1:47:8C:D9:2F:1B:C2:00:93:A1:4E:4A:27:BB:C7:DB:A6:FB
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:94:a6:6b:25:b4:f3:8d:1e:74:53:a9:85:a8:1a:a6:28:63:
         25:14:27:e4:eb:9d:a8:1f:26:b0:67:9a:26:39:de:f7:4e:80:
         0b:a6:a3:f4:5f:e3:40:66:12:ab:9c:1a:ef:f9:e0:83:3e:68:
         25:b5:94:9c:c2:a8:65:65:85:93:c9:d0:8d:55:8b:52:32:33:
         ac:04:46:45:6f:3e:81:09:13:cb:e5:64:71:a4:1a:a2:86:a1:
         aa:f6:34:27:03:d3:b6:eb:3c:22:37:40:7c:ac:64:5c:f1:db:
         5c:ef:48:87:e6:24:44:93:e6:c5:8f:40:70:92:8c:93:22:8f:
         c0:99:a3:e6:0d:51:11:a8:e2:e5:57:24:31:91:31:af:66:2c:
         1e:36:44:77:43:d7:10:fd:50:d7:da:a2:a6:1f:cc:c2:87:0a:
         89:ce:55:44:fb:09:e3:2b:70:e0:5b:a4:d3:c6:0b:b4:f4:e3:
         c2:de:30:5e:94:13:0c:c7:d5:9d:43:a6:b5:4c:ca:ad:ca:37:
         7a:85:8e:c1:08:47:3f:55:76:28:70:8a:01:61:f5:b3:9b:ea:
         b5:61:9e:59:cc:6e:ab:b9:d7:55:6c:4c:49:75:f3:54:dd:c7:
         9e:87:cf:5d:50:66:f9:b7:c2:39:34:ab:46:7d:6a:45:6a:a3:
         67:0c:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:13:44 2025 by rpki-client