Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          pK8taBR5Ukz4gpVgjKwY1ro3sN2KgiJop3olExApbhU=
Subject key identifier:   AE:9F:B8:8F:E2:7B:85:35:E6:45:39:EE:DF:03:52:3E:6B:B6:A1:B9
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          01FA
Signing time:             Wed 23 Jul 2025 02:37:37 +0000
Manifest this update:     Wed 23 Jul 2025 02:37:36 +0000
Manifest next update:     Wed 30 Jul 2025 02:37:36 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: QYhTtqdd/QeLqxCyId1IEe0x3q422I/ZRbxShpPVUhg=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 3spAcopzpeJWyW5mR0mGk38MM078PmmdgI27LOSYIH0=)
                          3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: aYUm1aVtuDy+5vYCksuuiVbwXJaF0tNfwYSEMBfgydU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 02:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Jul 23 02:37:36 2025 GMT
            Not After : Jul 30 02:37:36 2025 GMT
        Subject: CN=68804af0-0390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:9b:db:3b:e9:9b:8f:8c:b1:7f:5b:16:2b:
                    5d:d1:92:a7:95:5c:f5:6c:fa:70:f7:8e:c0:73:a5:
                    3e:18:c1:87:c3:ca:ec:c2:cc:54:d0:4b:71:d0:80:
                    1f:c4:1b:35:0d:90:86:ff:6c:3f:75:57:be:c9:e2:
                    60:f1:fc:66:36:a3:90:20:0b:83:7f:9c:09:5b:7f:
                    99:bf:55:d3:a3:07:c6:9b:d8:5c:b6:2a:0f:1d:4b:
                    23:a2:07:c8:50:bb:e2:6f:a8:80:0d:49:97:de:ce:
                    87:86:fb:8f:55:14:88:5a:02:15:b2:84:0a:a9:f6:
                    9e:17:20:b2:2a:1d:a8:e2:8d:fa:ff:30:e6:b8:c6:
                    82:98:3e:3c:35:98:ee:14:66:a3:b5:aa:9a:54:28:
                    eb:bb:98:a9:7e:1a:04:b2:3d:5f:4c:ca:cf:3b:bb:
                    99:d3:e8:da:0d:c4:02:98:54:97:33:fe:09:2d:33:
                    cb:94:d1:3c:fa:10:d8:d4:ac:47:6d:19:d2:16:ab:
                    b1:00:35:94:43:ea:91:b8:5f:04:46:7b:21:ea:60:
                    d4:79:44:32:f5:f8:5e:01:c2:b1:53:78:5a:b7:ff:
                    5f:7a:a0:8f:ae:5d:74:53:c5:e1:cb:af:31:be:dc:
                    50:a9:dc:bb:15:b8:b5:4a:6a:eb:3b:9b:e9:04:ed:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:B8:8F:E2:7B:85:35:E6:45:39:EE:DF:03:52:3E:6B:B6:A1:B9
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a7:7e:1b:db:94:e1:12:ee:ea:7c:33:2e:79:2e:51:05:33:
         aa:b8:af:b3:c1:c4:a5:ce:b1:ea:f3:66:de:72:b0:32:0a:74:
         4a:54:32:f0:4c:cb:a5:e8:35:f2:90:11:f1:5d:14:3e:6e:c1:
         99:ba:f9:ea:1c:e4:34:e4:b2:24:e9:89:e5:0b:73:be:aa:18:
         56:27:5f:95:1d:cb:c3:ff:77:b7:53:42:0c:e5:b7:39:6e:11:
         fe:c3:0a:75:1d:da:86:5b:5a:19:c8:7d:ea:8d:9a:ed:d7:bd:
         a7:43:3f:9d:26:57:71:fd:05:ef:0f:dc:9b:69:58:c7:cc:ce:
         da:82:d8:eb:82:a1:5b:83:10:39:2d:62:4a:41:9c:2f:f4:e4:
         5b:73:1b:11:3a:e8:be:61:08:09:7c:8a:29:5d:21:32:95:33:
         16:74:ec:b5:2a:2a:34:88:54:29:5c:82:e2:d5:d5:3d:96:25:
         8c:4a:58:5c:31:f4:67:e8:f5:2e:c4:87:ac:1f:57:ce:f7:00:
         2f:ff:3a:bf:29:4c:da:4a:67:eb:24:34:17:00:d4:11:e0:2f:
         f2:92:81:51:92:da:b3:0b:58:de:38:ae:11:aa:7b:a4:46:d3:
         8d:98:0c:43:e0:47:49:2a:8b:9e:7e:ef:b8:92:eb:5a:d3:83:
         42:85:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:23 2025 by rpki-client