Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
File:                     1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json)
Hash identifier:          Z0+/qXjvif6QT9TlmlNzivbpzkqXgXkBBHWAOOs/6q8=
Subject key identifier:   78:8F:E6:9E:AE:13:E6:70:E7:4C:DD:9D:24:C5:91:C5:6B:90:59:13
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Certificate issuer:       /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial:       3537
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
Manifest number:          34EC
Signing time:             Sun 20 Jul 2025 14:22:51 +0000
Manifest this update:     Sun 20 Jul 2025 14:22:51 +0000
Manifest next update:     Sun 27 Jul 2025 14:22:51 +0000
Files and hashes:         1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: 9TYPOJTIQJOlwGNLTadNKZcBLSeW7MFqi0Fvv3FGzRk=)
                          2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: Tkov50IGnDt1hyq9qJWuipAiAibSfj8yyNwvUl9JT4c=)
                          3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: WjrEbNUJ4DVarxA0iyhxVHDDaIrwbJkyI1tAP4DGJzI=)
                          4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: 4sO+Kf2WaaDXEC/1X4RERNKVRvAzlJHXuYZYU7/KNho=)
                          5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: klKJYHTI4INqcBgBGuobupIA1CcWLSCCQBLrEH0i7XE=)
                          6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: eRgET6FlBHt/Mo7JjkKJdhZ1XnrQ5sT4pK+CsAVXRfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13623 (0x3537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
        Validity
            Not Before: Jul 20 14:22:51 2025 GMT
            Not After : Jul 27 14:22:51 2025 GMT
        Subject: CN=687cfbbb-aee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:4e:41:20:fa:be:8e:ed:ce:9e:1c:e3:dd:
                    39:22:87:30:24:0b:9a:89:3c:67:15:5e:ed:f6:a8:
                    89:32:17:4e:66:fd:18:2e:38:2a:9d:00:c9:d2:c3:
                    05:6b:15:1b:96:4d:37:1e:ba:a4:91:06:ce:9c:92:
                    3c:4b:a4:9d:99:6c:cf:a9:28:06:ec:2a:2a:2b:d2:
                    5f:8d:bd:b6:fe:53:9c:e2:68:b9:2e:1c:09:29:94:
                    8b:a7:65:3e:1b:db:e5:43:e9:29:a9:a8:c7:58:c2:
                    74:d7:29:21:1a:a7:27:81:ec:a8:c5:6f:3e:ce:72:
                    52:8b:f5:23:91:d3:25:1e:44:bd:aa:16:af:26:62:
                    4a:d5:c1:0a:b8:33:18:e7:15:73:12:c9:ae:7d:ea:
                    02:82:85:30:72:3c:03:c9:ec:23:36:35:45:b9:b9:
                    32:07:54:8a:a8:92:2a:cc:c9:c2:06:32:25:a3:74:
                    53:9c:6f:9a:2a:bc:1e:da:93:78:17:97:ad:7d:cd:
                    93:0f:2b:e7:6b:c2:18:cd:94:ab:3d:62:3f:50:dd:
                    d6:15:c7:22:bc:1c:bf:aa:41:a2:06:45:04:dc:f7:
                    86:ed:84:23:04:7c:6c:a1:dc:d6:e5:df:00:11:35:
                    7a:ac:5a:cd:13:47:5c:97:79:1c:c6:87:56:83:12:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8F:E6:9E:AE:13:E6:70:E7:4C:DD:9D:24:C5:91:C5:6B:90:59:13
            X509v3 Authority Key Identifier:
                keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:a0:d0:57:fc:db:87:c0:79:f6:12:71:47:81:1e:59:a0:
         16:91:b6:2e:7b:b1:4f:dd:00:40:26:e5:fd:29:80:31:78:88:
         ed:1f:23:81:be:95:65:6a:99:7c:cd:6a:f1:78:c5:26:dd:c5:
         20:d6:37:14:44:ac:9d:19:ae:dd:e6:7c:4e:51:74:5c:f2:93:
         16:d1:25:04:d3:7c:ee:31:df:a7:9d:3b:64:92:21:d8:ce:23:
         4c:03:e5:76:64:c0:fe:68:c8:b1:4c:dd:64:d4:eb:5f:e4:28:
         9b:ac:94:6b:e9:12:96:16:08:0b:4d:78:d3:5c:0b:e2:8d:53:
         86:f5:f1:5a:d4:ec:09:20:e7:9c:f6:d8:28:14:36:b9:e6:8c:
         d5:ec:bb:59:ab:a4:9f:12:b0:5b:ac:d8:16:29:ff:bb:78:c4:
         ac:21:f6:da:e6:0e:8e:f8:32:94:85:55:ac:50:52:d8:03:dc:
         06:8e:9c:45:a9:92:da:e3:5e:b7:02:f7:22:b4:55:05:55:a3:
         90:5b:51:10:00:43:7d:ed:29:92:de:ac:fd:b7:00:2b:c5:b0:
         6b:68:4d:7d:d9:90:63:7d:a5:28:96:2e:22:ca:ec:59:da:ce:
         a6:8b:ad:5e:b2:2a:1c:96:e2:18:1c:66:73:fc:bc:32:0d:4e:
         b6:ae:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:54 2025 by rpki-client