Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
File:                     e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json)
Hash identifier:          QXewyHfdH1G/PV4GX+rE+bggETm19dHLMnyN2HUKfKo=
Subject key identifier:   F5:67:AC:99:84:5A:7E:8A:2E:65:BC:FF:EE:C4:89:B6:A5:23:5E:56
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Certificate issuer:       /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
Manifest number:          0BF9
Signing time:             Fri 18 Jul 2025 19:13:00 +0000
Manifest this update:     Fri 18 Jul 2025 19:13:00 +0000
Manifest next update:     Fri 25 Jul 2025 19:13:00 +0000
Files and hashes:         1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: yGCzf+THNvu09Mlt5rtunwnGvsbwu/sSQt1+6i2ccLM=)
                          2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: teLLfJcXs/WVE6HHR1PJI4gLt00YbMNATiTLdmWgtzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
        Validity
            Not Before: Jul 18 19:13:00 2025 GMT
            Not After : Jul 25 19:13:00 2025 GMT
        Subject: CN=687a9cbc-7dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:3e:ed:4b:9b:e6:4c:ae:6c:e7:a7:84:2e:
                    d8:c7:89:b8:6e:34:45:86:3d:ac:5a:5b:6c:e8:79:
                    83:a7:41:9e:e7:fb:d6:5f:7a:1e:2d:47:8e:56:d4:
                    c4:cf:dc:a4:96:35:a2:8f:03:cc:41:97:fe:a5:55:
                    e5:d9:40:b9:6c:63:a6:03:7f:24:9f:e4:b8:be:d2:
                    a8:f8:b1:61:d5:8c:d9:1e:ae:d1:50:59:7e:c2:47:
                    ff:d1:50:24:30:f0:20:70:7e:bf:de:e1:6b:d7:03:
                    c4:93:b3:ed:6e:52:7b:62:1e:14:10:53:14:e2:3f:
                    83:15:11:c9:f1:a6:28:55:4f:c7:64:45:f1:a6:06:
                    33:d7:2c:62:28:68:03:40:fd:5d:a6:2e:ae:b3:fa:
                    02:09:47:90:53:45:64:5c:ee:46:65:40:14:ec:2e:
                    61:b3:e0:5a:b5:b1:7f:a6:ed:86:23:cc:02:53:46:
                    de:c4:c6:fa:9a:cb:e2:97:a7:d4:9e:e2:0d:0f:14:
                    5b:4d:9d:1d:16:39:b0:5f:7c:02:e2:dc:4b:55:97:
                    db:69:9c:6f:19:c4:6c:75:78:0a:43:55:24:e0:fb:
                    23:20:45:36:08:39:e7:5f:38:8e:a1:ad:09:9b:26:
                    62:7b:b7:1a:66:16:89:72:35:a4:bc:3d:45:52:6e:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:AC:99:84:5A:7E:8A:2E:65:BC:FF:EE:C4:89:B6:A5:23:5E:56
            X509v3 Authority Key Identifier:
                keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:98:07:f8:a1:4c:b5:93:78:9a:ee:e6:f5:cd:21:f4:01:
         42:c5:3d:05:17:c9:3c:c8:11:be:d2:a6:a2:d7:3a:a1:42:a9:
         2c:11:fb:e0:02:95:1b:c1:c4:db:9f:4f:e0:23:ca:3c:a8:40:
         c0:84:d0:0f:c0:5a:fe:ee:ad:9b:9c:b7:45:6e:72:a5:9d:0f:
         94:ca:e1:f7:9f:df:59:8a:36:7f:02:bf:dc:e1:e5:8b:24:dd:
         07:bc:74:8c:d9:20:ce:07:79:e6:89:92:90:fc:66:a0:9e:ff:
         c6:29:88:d0:f1:d7:f5:8c:85:40:07:c8:43:69:9a:45:a1:d1:
         73:ad:9a:dd:48:1f:47:f0:86:14:83:18:72:05:b2:8a:b9:b1:
         42:95:35:ef:55:d8:0b:ca:9a:2b:9d:73:48:24:52:5b:c5:04:
         46:ef:31:ce:6f:54:ea:3f:25:97:5e:77:db:46:f0:1f:e5:13:
         ed:d4:a5:e2:a6:e1:ad:0f:c7:e2:62:dc:0e:83:f6:d4:b6:77:
         63:d7:bf:9a:30:b3:28:2f:a4:5b:8b:91:52:98:38:b7:6d:75:
         74:c0:2b:33:65:5d:30:a5:24:0c:87:51:c9:9f:32:81:7d:8f:
         ce:5b:de:fc:a0:27:8f:b1:36:f6:1d:5c:51:ca:87:49:93:da:
         99:2a:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:16:20 2025 by rpki-client