Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File:                     mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier:          FZLOnZ5qnMAdWfV5WnLb32feaM7oRE18JVuUAP3pr9o=
Subject key identifier:   00:4B:9F:DC:C6:44:EB:9B:23:63:3D:27:A6:DA:16:FE:5A:A7:53:B3
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       06FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number:          06F0
Signing time:             Fri 18 Jul 2025 22:13:11 +0000
Manifest this update:     Fri 18 Jul 2025 22:13:11 +0000
Manifest next update:     Fri 25 Jul 2025 22:13:11 +0000
Files and hashes:         1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: 6kPIjiiUPphh6vAnqHdGfUyXyUx1htS/gBMqkjfoSM8=)
                          2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=)
                          3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Jul 18 22:13:11 2025 GMT
            Not After : Jul 25 22:13:11 2025 GMT
        Subject: CN=687ac6f7-17b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:66:d0:e2:fc:59:4a:a2:a1:b1:b0:d4:a6:a1:
                    1a:c5:4c:4d:63:63:3c:99:a7:29:f1:98:0b:8e:92:
                    c8:b9:a2:80:83:7f:5f:41:f6:d4:6e:45:51:79:fa:
                    2b:d1:8e:f5:d3:78:f1:7b:6a:69:ee:eb:bc:22:2b:
                    21:fe:e3:20:88:19:16:4b:56:5d:7f:a0:b7:42:b6:
                    39:e5:a8:3a:dd:ef:28:79:71:06:96:4f:10:d8:5b:
                    fd:cf:2c:e6:18:d6:75:56:32:0b:93:d3:cd:06:de:
                    8e:1b:3b:63:f5:07:7a:4e:3d:b5:ad:ca:13:d8:37:
                    9c:ba:57:d6:7b:63:42:23:a6:3f:8c:d3:7c:8f:77:
                    59:a6:ca:56:9e:e5:77:c6:c6:ea:76:a5:ae:0d:de:
                    96:38:1e:3b:f5:2f:2a:75:5e:15:74:6b:d6:65:a0:
                    9c:6f:46:e4:a8:fd:ab:1f:c8:04:58:b6:bc:70:25:
                    70:b7:6a:78:bd:30:79:2a:f3:44:e4:2a:85:e2:b6:
                    e4:6f:e1:55:f6:25:56:09:16:b1:6b:ef:21:dc:fb:
                    57:8c:3a:f1:45:a4:e7:eb:61:56:32:51:0b:72:76:
                    d9:a1:74:5f:c0:15:b4:76:1a:17:ba:1e:20:79:c1:
                    f0:b4:4b:db:09:90:39:50:ea:22:23:8a:42:c3:7f:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4B:9F:DC:C6:44:EB:9B:23:63:3D:27:A6:DA:16:FE:5A:A7:53:B3
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:b3:b5:48:8e:bf:04:bc:27:f4:f8:9a:b3:5c:55:12:f1:
         26:22:19:0a:36:46:91:65:ea:df:57:21:91:52:65:f8:1d:57:
         10:7e:49:0a:05:18:17:0c:ee:ad:d4:54:ab:29:fe:02:6b:d8:
         fb:98:3e:2c:f8:06:ea:aa:45:9d:cc:e2:66:00:58:e9:d0:34:
         57:80:0e:3f:b6:e0:93:4d:4c:07:3e:e2:12:47:c8:38:83:f3:
         83:dd:a1:2a:7e:2c:0a:ee:92:66:39:fb:26:5f:a1:fa:d3:80:
         d5:9d:76:7b:4c:c0:12:ec:5c:3b:c3:4c:6f:d7:5d:ae:d8:ae:
         98:16:4c:67:82:eb:79:3d:11:7f:15:3d:32:f1:d4:3d:fb:80:
         45:c5:ef:7b:5c:1a:53:76:32:48:b8:67:ab:98:a1:27:54:6a:
         86:1f:4f:ce:51:ea:43:d4:00:6c:3b:63:a6:54:a8:b9:34:7e:
         4d:ea:dd:6e:d3:65:62:25:82:ba:04:01:3c:64:a9:7a:9a:c6:
         1d:19:54:91:63:b0:4c:4d:15:6a:e3:88:68:6e:55:7a:4d:b4:
         ff:f6:75:aa:0b:3c:83:6b:3b:e1:92:4e:6a:71:c5:20:ab:f7:
         38:a8:65:dd:4f:e6:09:09:80:5a:4a:e6:5b:95:b1:53:52:fd:
         fb:71:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:32:02 2025 by rpki-client