Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
File:                     10rBuKMzUkP8svmQW8UdvcsOI20.mft (raw, json)
Hash identifier:          YQEtcwi7HZF9+4mSx980Rfo5sngDgcLyIMw+KlVnfjA=
Subject key identifier:   45:C2:33:98:EF:B0:6F:7C:A2:D4:5F:FA:EF:51:25:21:8F:95:98:EF
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Certificate issuer:       /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial:       0AEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
Manifest number:          0ADB
Signing time:             Sun 20 Jul 2025 19:33:01 +0000
Manifest this update:     Sun 20 Jul 2025 19:33:01 +0000
Manifest next update:     Sun 27 Jul 2025 19:33:01 +0000
Files and hashes:         1: 10rBuKMzUkP8svmQW8UdvcsOI20.crl (hash: 7X+hCTIDoQahCrx173rIUguWylKsK27ruhzErEANQNo=)
                          2: 98DBD8B660D311EEA9C80344C4F9AE02.roa (hash: Iq6DjDAWYaikvNVka5L51lFXKJ+7UZRQJoPc5OKJvsI=)
                          3: AF3CEA305ADB11EEA96AE979C4F9AE02.roa (hash: O+Syjtqn23Qr9c/D9JPic1jy/KjI63RsKq7ObP7Z1Pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
                          rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 19:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2798 (0xaee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
        Validity
            Not Before: Jul 20 19:33:01 2025 GMT
            Not After : Jul 27 19:33:01 2025 GMT
        Subject: CN=687d446d-ce22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:fb:76:54:2f:03:10:44:03:0f:60:91:1c:
                    69:e5:8d:85:be:c4:4f:1f:f9:5f:91:06:f9:de:7d:
                    0d:58:3d:6e:88:b5:38:36:1b:e3:33:b6:c8:3c:6f:
                    45:59:2a:d9:01:1d:0c:27:c0:0a:4f:7a:e4:08:19:
                    45:1d:47:6c:60:92:eb:e8:13:39:65:7d:f5:c7:ee:
                    36:2b:c7:af:27:03:68:38:4d:61:1d:3f:63:45:d1:
                    2d:73:65:d0:dd:ef:33:51:db:04:c2:df:47:29:f7:
                    36:8f:cd:37:96:b8:37:32:b3:e3:46:de:3b:f2:3b:
                    cb:ac:3a:d6:60:ca:49:4d:64:fc:49:06:4e:be:6e:
                    81:0f:90:ad:3f:17:06:ca:b2:7e:ef:1a:b7:af:4e:
                    d3:b8:40:6c:05:45:49:33:c2:2d:46:cd:bd:8b:fc:
                    5a:65:c5:7c:ea:8d:55:34:16:7f:a8:9b:4f:82:25:
                    b1:9c:bb:14:09:cb:26:94:e2:52:c1:78:78:50:2c:
                    35:03:2f:34:1f:d8:b4:5c:2b:31:bf:b8:c9:2c:c3:
                    12:51:9f:09:56:25:96:4f:af:11:5c:48:91:8e:4e:
                    76:ed:8a:77:a4:78:71:2c:8b:75:43:49:0b:4b:d7:
                    69:6b:8e:b6:91:73:45:3a:c2:1a:11:d9:81:b8:37:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C2:33:98:EF:B0:6F:7C:A2:D4:5F:FA:EF:51:25:21:8F:95:98:EF
            X509v3 Authority Key Identifier:
                keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:73:5b:5c:ea:ae:b7:7a:d5:2f:c1:d8:c5:63:18:32:3b:6b:
         81:fb:38:1f:26:ae:e2:5e:c1:4e:12:29:65:e0:3f:b0:4b:be:
         91:3f:87:01:26:2c:36:32:4c:ef:be:7a:c6:68:14:e1:51:6a:
         f0:5e:b7:a1:0c:70:62:39:59:87:73:de:5e:1f:f8:fd:df:17:
         31:89:4d:4d:1e:e8:79:50:90:e2:b1:7d:0f:aa:d6:9f:82:4e:
         15:4b:35:fe:04:28:3c:54:16:5a:e1:93:14:8f:e8:07:a4:66:
         7c:42:92:77:25:67:c5:5b:8c:28:08:95:bd:9c:ed:af:25:df:
         11:26:f5:44:02:be:b3:19:34:b6:f3:e5:fd:7d:a9:a0:a0:7f:
         eb:f3:ad:96:80:80:82:36:22:58:84:27:41:a1:b5:e2:43:20:
         d7:8e:e7:b9:65:00:6f:f5:ed:f5:bf:3a:67:12:c9:70:01:30:
         52:88:9b:cd:11:5b:6d:42:16:f8:d4:98:c0:fe:f1:de:60:6c:
         fd:d6:30:92:41:fd:6b:70:7d:db:84:99:09:ac:cc:4b:4b:79:
         dd:5a:9d:f5:c0:14:67:d2:91:c5:a5:f1:3e:4c:18:a8:e1:49:
         35:71:af:86:65:b4:b5:7d:62:e6:dc:b5:b7:69:12:1d:fa:00:
         fe:0f:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:23:47 2025 by rpki-client