Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
File:                     SV79PNQ-P-7r0irR3ep5817UePU.mft (raw, json)
Hash identifier:          4IC19/BzukgNbOarfCJdVslW8ZZxyKRVoRP+CjrWW04=
Subject key identifier:   D3:B0:5C:C8:CF:10:A6:20:F2:49:25:2A:73:09:B9:96:C3:6A:24:06
Authority key identifier: 49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5
Certificate issuer:       /CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
Certificate serial:       1392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
Manifest number:          1389
Signing time:             Sun 20 Jul 2025 16:59:52 +0000
Manifest this update:     Sun 20 Jul 2025 16:59:51 +0000
Manifest next update:     Sun 27 Jul 2025 16:59:51 +0000
Files and hashes:         1: SV79PNQ-P-7r0irR3ep5817UePU.crl (hash: oBq+jl0hGgJCLNFY+90QYzu7ieI3SPg2N2ZC5QrsiQg=)
                          2: C569659C02DF11EBB54FAE29C4F9AE02.roa (hash: ksZCQUpgjigR3J12hgj4ozKRCV6ZGeFDC2+Ja2MoW5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl
                          rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 16:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5010 (0x1392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A717, serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
        Validity
            Not Before: Jul 20 16:59:51 2025 GMT
            Not After : Jul 27 16:59:51 2025 GMT
        Subject: CN=687d2087-576c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:17:35:50:30:a4:2a:f4:52:e6:03:22:88:
                    4b:80:c5:c7:f4:3c:12:6a:b5:4f:1a:c9:17:a6:4a:
                    af:1f:14:04:0d:d3:f9:98:6d:7a:9c:41:72:21:c1:
                    9f:8c:03:48:d4:d9:79:7e:46:cf:f1:db:49:63:8e:
                    b7:e0:8c:66:cb:cb:e2:8c:9c:e4:11:41:e0:76:e4:
                    08:b5:54:2b:d4:71:25:67:f2:f8:5d:0d:b7:9c:7a:
                    2b:4c:7f:c4:0c:c9:cb:eb:67:6b:fe:d7:40:ad:81:
                    84:40:8e:2c:e2:24:b0:a1:10:75:84:35:c4:83:e9:
                    82:6e:c3:a9:e7:f5:22:56:f2:76:77:a3:37:0e:13:
                    ed:b8:7e:d8:e2:65:66:52:1a:74:46:7b:0f:88:7e:
                    74:fa:54:dd:95:2f:7e:15:8b:2c:65:7f:af:e1:1b:
                    b5:43:df:19:e7:de:54:f8:14:05:c6:4e:d3:4c:07:
                    64:aa:a3:b7:67:fc:4e:98:fb:cc:2d:0c:08:4b:cd:
                    0e:74:73:c9:a2:ec:23:66:ff:f5:90:22:a4:07:7a:
                    e1:88:2c:41:22:47:4d:1b:48:3a:4d:de:4c:17:67:
                    28:12:2b:57:9c:4d:2b:0a:d9:77:c0:01:96:54:7c:
                    4e:a4:76:ee:94:fa:60:f8:8e:26:16:e6:94:3a:ff:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B0:5C:C8:CF:10:A6:20:F2:49:25:2A:73:09:B9:96:C3:6A:24:06
            X509v3 Authority Key Identifier:
                keyid:49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:62:19:87:ca:1b:e4:32:3c:e5:0f:55:d0:e7:8b:b3:9d:b5:
         22:37:91:fd:4d:06:a5:7e:06:8f:cc:7f:73:b2:c1:09:2c:bc:
         63:f5:0c:e6:f5:76:bb:95:87:6f:1d:09:71:73:06:38:f9:b2:
         bf:23:80:6e:7d:fb:11:a9:f0:a8:12:98:ea:f4:15:2f:47:d0:
         07:b4:17:fa:01:2e:61:3b:bc:56:d0:fd:e6:4f:83:c2:a6:b1:
         58:7e:eb:37:bd:db:7d:2f:07:d2:29:84:91:08:f3:38:1f:b7:
         44:a0:8e:58:2b:62:03:78:a5:eb:5f:71:8c:46:34:7f:75:cc:
         b8:74:07:32:35:55:c9:1f:68:58:26:50:22:cb:5c:55:57:6d:
         ba:77:f6:2e:79:02:a5:21:a1:7c:b6:de:a3:06:2b:00:ec:85:
         11:cc:df:bb:e8:09:d3:f9:92:a4:a4:d0:26:91:53:c0:13:9b:
         ff:20:65:30:a9:1c:b1:60:f8:1d:a3:99:36:d6:bb:4d:dd:25:
         17:60:19:1e:e4:cc:45:5b:92:4f:69:98:59:c0:92:9f:b7:b0:
         25:b2:0b:4a:52:8e:a2:06:53:b9:66:8d:76:21:3f:30:fd:65:
         a2:a0:6e:1d:81:12:07:82:12:5d:9a:44:b0:cb:b9:4e:ad:75:
         73:5c:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:24:59 2025 by rpki-client