Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File:                     -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier:          tTgYpsCkCOO2lssq7POBqu2ZHHQxAr9B8tL3gL9ibJ4=
Subject key identifier:   CF:02:F4:AC:A3:2C:7A:0F:62:8C:1A:7C:89:EA:35:E7:94:FF:C3:A7
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer:       /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial:       0F7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number:          0F6B
Signing time:             Thu 24 Jul 2025 17:42:56 +0000
Manifest this update:     Thu 24 Jul 2025 17:42:55 +0000
Manifest next update:     Thu 31 Jul 2025 17:42:55 +0000
Files and hashes:         1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: ccbvcymVWA0f/mpWG37cWB3hCtTEjp9xZMd/wKUZ9Gs=)
                          2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: O5M1jbKU4KBTSC5g58y6skgHkeCwY767jwNIVlihlmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
                          rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 17:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3963 (0xf7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
        Validity
            Not Before: Jul 24 17:42:55 2025 GMT
            Not After : Jul 31 17:42:55 2025 GMT
        Subject: CN=6882709f-4ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:5c:5c:46:bf:58:3a:61:51:ac:42:c5:a4:
                    f1:1b:eb:38:f5:0b:56:a5:73:bb:ad:a0:b8:95:1e:
                    a1:2e:9e:77:00:2c:42:d3:c9:92:bc:81:84:9b:ae:
                    b6:74:40:e1:d8:bc:bf:98:2f:ad:ae:ff:94:fd:b9:
                    bb:83:b7:1f:e7:54:c7:ab:fe:8f:a4:f8:7d:28:c0:
                    1f:1b:fb:18:5d:23:ae:0c:83:07:77:bf:87:f7:9e:
                    05:8e:25:47:1f:a9:8a:b7:28:13:8b:8f:52:bb:ad:
                    72:07:b6:c7:42:0a:a6:50:8c:24:c1:89:f3:75:2c:
                    73:fb:0a:17:00:8a:4b:b8:aa:08:60:1f:68:68:d7:
                    37:40:df:e6:ac:ae:55:c7:bf:64:15:1c:8c:85:cb:
                    50:f9:43:18:92:0f:bb:af:61:92:e6:f3:1f:0f:bb:
                    96:6c:a4:8a:c4:a5:23:f8:9d:15:90:4c:1f:d5:44:
                    f9:19:87:91:65:8f:92:2f:27:1d:c2:39:19:59:b7:
                    58:3f:60:ed:04:b3:01:1e:0b:4b:f3:24:b5:d9:1f:
                    66:b2:11:02:ab:f5:13:8d:c7:59:58:58:93:80:9c:
                    dd:36:bf:00:7e:cb:54:f1:c5:65:ca:32:1e:0d:70:
                    9c:57:36:da:05:e3:b6:f8:4b:b7:eb:25:8e:de:c4:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:02:F4:AC:A3:2C:7A:0F:62:8C:1A:7C:89:EA:35:E7:94:FF:C3:A7
            X509v3 Authority Key Identifier:
                keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:02:b8:fa:3b:05:4b:20:7b:53:09:2b:3e:7d:c8:f3:90:bf:
         f7:6a:e7:57:90:db:cc:8b:86:c7:02:ae:16:90:1b:af:22:c5:
         a7:6e:1c:85:1c:bb:e6:74:d7:4c:5e:d5:5d:05:08:b0:ba:e7:
         35:16:e2:0c:9d:6e:10:39:a4:2d:08:2d:67:38:b6:4c:31:8d:
         d6:8f:55:77:70:b4:70:e9:98:5e:48:69:44:f2:09:2f:96:ad:
         8d:7e:4b:60:eb:11:50:66:ec:ae:c5:87:43:a0:fa:b6:7a:03:
         bb:41:a6:b1:72:cc:d7:c4:f4:c2:1f:01:2d:86:eb:28:35:17:
         e5:6e:6a:75:c3:f2:9d:fd:6d:bf:e0:4b:e0:f8:83:68:d4:4c:
         40:ee:11:ac:05:d5:4e:e1:7b:4b:af:de:f1:d2:4b:ba:44:f3:
         68:50:5b:39:bd:5c:65:35:fb:43:52:b9:a8:c2:b5:6b:6f:50:
         1d:a1:6d:d8:bb:a4:d7:ec:19:8a:3e:3a:48:6f:55:52:90:13:
         dc:d6:54:fc:8a:8d:dc:ce:44:cc:61:27:c7:e0:8b:cd:a1:8a:
         3e:8b:c9:5e:0c:35:03:c6:9f:c5:aa:9d:6f:88:e2:c7:b3:d8:
         86:90:5d:88:61:ab:9c:66:e5:9d:e0:19:63:34:5c:20:cd:a3:
         fe:87:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:10:26 2025 by rpki-client