Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
File:                     7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json)
Hash identifier:          bfJBtzF9QG4uOTy5I1CywkSqXkP050pwocccC+Th3MM=
Subject key identifier:   F6:41:4B:68:33:3F:95:7F:69:70:78:D1:D4:47:80:69:8A:51:FF:13
Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
Certificate issuer:       /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Certificate serial:       0322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
Manifest number:          0311
Signing time:             Wed 23 Jul 2025 01:43:14 +0000
Manifest this update:     Wed 23 Jul 2025 01:43:14 +0000
Manifest next update:     Wed 30 Jul 2025 01:43:14 +0000
Files and hashes:         1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: dMlAoXTCTg5ZktCGYKV5fF2fx8je8dfId/YAMMUPJ2o=)
                          2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: LMp5kVNCStiwGpSsrDjiKfBvLER7LLTCwt6mJ3nCrNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
                          rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 01:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
        Validity
            Not Before: Jul 23 01:43:14 2025 GMT
            Not After : Jul 30 01:43:14 2025 GMT
        Subject: CN=68803e32-f0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:c1:7f:9c:b0:6b:fd:cb:61:85:76:97:37:
                    56:aa:3a:85:e2:d6:ef:36:4b:66:ce:00:c6:4b:f7:
                    f9:31:9f:04:2f:d1:e6:87:93:a8:30:c1:e4:85:42:
                    ec:1e:f2:27:f9:7e:f0:fe:ed:66:7c:4e:28:12:f4:
                    e7:87:e2:75:f5:dc:eb:01:b4:20:3d:48:15:83:29:
                    80:fc:23:31:89:02:9a:18:b5:0f:7a:6a:a8:f8:c6:
                    76:60:57:df:a7:fc:92:42:e5:64:3d:7f:ad:f6:6b:
                    e0:c5:25:43:54:f2:14:da:d0:cb:4d:de:3a:19:36:
                    a6:c2:17:0f:9b:ad:9b:97:b1:b8:e6:fc:72:43:8f:
                    d9:05:be:ae:07:cd:cb:ab:2c:1e:31:57:01:c9:6d:
                    77:08:a4:bd:42:db:66:83:19:94:78:fd:1f:75:fe:
                    f4:6a:04:3c:40:c8:ac:af:3a:29:ca:f9:8e:23:86:
                    ef:15:08:7e:4f:43:16:40:a9:be:c0:0c:c6:96:17:
                    5b:9a:9d:18:db:e3:6b:87:10:3c:26:ad:67:86:eb:
                    5d:a0:67:d6:07:a5:06:ae:12:5a:da:f9:00:a8:0a:
                    54:c4:29:64:f4:e8:a8:c3:78:16:58:40:64:a5:51:
                    f2:f6:aa:9d:c2:37:59:71:7e:fd:db:72:88:ab:45:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:41:4B:68:33:3F:95:7F:69:70:78:D1:D4:47:80:69:8A:51:FF:13
            X509v3 Authority Key Identifier:
                keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:e8:6e:01:49:d9:31:18:0d:97:c6:cd:85:f6:cd:fd:ee:
         2d:3d:d2:85:a4:e3:26:c9:d8:2a:62:e0:30:b2:ad:b1:8c:3f:
         35:5f:be:98:a5:bd:23:fe:65:54:ce:47:e0:0a:bf:df:d5:4c:
         6f:06:91:11:1b:91:1c:02:62:f3:38:29:7a:e0:6b:fa:5d:23:
         58:10:93:1b:c6:a8:56:f3:55:04:38:c1:65:be:d5:cd:a9:8a:
         63:87:76:ce:be:97:61:53:fc:22:12:60:83:18:a7:66:42:19:
         ff:2e:1c:30:94:be:5e:47:cb:35:a9:e7:d8:8a:9c:98:67:4e:
         cc:b0:aa:93:1d:59:ad:fd:75:15:71:cc:ea:45:0f:06:5f:62:
         29:8c:bd:1e:90:27:59:88:83:32:5a:6c:c3:3f:af:c8:ab:e2:
         d7:a8:5a:73:16:c0:ed:25:26:30:c5:1c:aa:7b:72:90:92:1e:
         2d:e0:4b:42:81:4a:a5:e9:9e:5c:a3:bc:0c:d4:1c:c7:c4:ee:
         ec:fd:a0:2c:b9:b5:1c:b0:94:8a:cc:fb:ac:fe:56:f7:55:a4:
         4f:e8:4a:dc:94:0f:d4:a5:d8:70:8f:d0:f8:c4:b1:0d:a4:8d:
         9e:1d:92:43:35:e3:e9:9a:02:28:d4:ce:9d:25:f4:61:16:4e:
         1d:8e:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:19:18 2025 by rpki-client