Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
File:                     eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json)
Hash identifier:          PYuowjAQcrGNhc555vmr6cInf5IwIcc0EgRcCVYk35Q=
Subject key identifier:   73:95:B6:CD:7D:1F:E7:9C:31:18:32:11:68:29:CC:D5:11:15:00:0A
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Certificate issuer:       /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial:       05D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
Manifest number:          05C7
Signing time:             Thu 24 Jul 2025 23:24:14 +0000
Manifest this update:     Thu 24 Jul 2025 23:24:14 +0000
Manifest next update:     Thu 31 Jul 2025 23:24:14 +0000
Files and hashes:         1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: 6XzBwu558k8l51VqiSBeL+AT0t7AvhCiYSHf1d5dleM=)
                          2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0=)
                          3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: dJlRsSYRiHAfXA1Nnt7jiiGzcupZLCHRX4H/d6aCfuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 23:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
        Validity
            Not Before: Jul 24 23:24:14 2025 GMT
            Not After : Jul 31 23:24:14 2025 GMT
        Subject: CN=6882c09e-ced9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:f8:0b:95:5b:65:df:41:28:48:f9:a5:36:
                    1a:96:c7:9b:57:e5:09:a9:a8:e9:3c:ea:92:77:52:
                    7b:62:7f:15:4c:c0:ea:92:5d:0f:00:e4:c7:b5:b9:
                    63:a8:13:af:ae:b9:38:91:b3:30:d9:e0:4b:52:dc:
                    c0:60:7b:c3:0f:a3:d2:52:28:57:bb:39:d0:b0:07:
                    a7:bc:e8:2b:c8:c8:0e:6d:d2:9f:57:e0:82:ef:7f:
                    7f:b0:1f:26:b0:6c:73:98:f4:d0:8d:7a:12:1e:6c:
                    28:99:f0:bb:6e:69:a3:79:13:80:d3:b5:66:30:53:
                    37:9a:e3:1e:99:ac:ee:e0:fc:c2:ec:87:95:e7:fb:
                    d9:da:27:d7:87:04:82:3b:62:e4:7e:35:48:2d:79:
                    2e:54:00:5a:e0:82:15:bb:c1:a2:d0:63:78:a4:4d:
                    b1:f0:50:5b:8d:07:6e:c4:36:1d:d5:92:9b:c5:1e:
                    cc:7f:08:e2:1b:7d:cf:04:13:17:fb:ae:a3:dd:d3:
                    7f:6b:b3:53:f4:3e:7d:91:27:d5:8b:72:c3:81:9f:
                    92:d8:58:b7:72:76:f8:99:6f:f4:46:80:b8:5c:ce:
                    76:38:89:40:4c:9e:3c:31:51:a0:99:8d:e9:cf:a5:
                    d9:f9:64:17:50:5a:05:57:01:4d:1f:30:f0:67:8e:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:B6:CD:7D:1F:E7:9C:31:18:32:11:68:29:CC:D5:11:15:00:0A
            X509v3 Authority Key Identifier:
                keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:80:04:9f:13:0c:5d:81:91:a3:d1:18:75:02:f8:da:1f:a6:
         24:49:c3:a8:ea:8b:2c:c1:82:cc:13:b9:90:79:b9:ac:5e:25:
         42:2b:b4:62:a9:aa:6a:2f:ef:97:ac:54:6b:b7:99:47:c7:e0:
         53:1d:4d:85:29:d6:a5:91:71:ed:ca:fe:86:65:98:5b:61:a1:
         48:2e:30:fd:bd:72:cc:79:b2:d6:a0:a5:0c:08:fa:01:ce:e5:
         10:6f:ca:3e:a1:b4:aa:c5:a6:63:0c:63:e4:d5:db:70:77:8e:
         66:17:8c:17:5c:38:5a:1b:e1:34:42:bf:a7:9a:f0:9a:b8:53:
         74:9f:30:83:a5:f0:a6:5c:cc:aa:41:b9:8f:9a:14:a8:8f:9f:
         03:58:07:2c:c5:e1:35:d9:78:4a:9a:ac:3e:19:66:d5:e1:2f:
         de:b2:92:d8:26:6a:b8:37:b8:b9:9b:73:c1:fa:be:0e:23:b2:
         97:d2:cd:67:ea:d1:0d:cc:32:6d:15:04:0f:56:55:5d:39:7d:
         00:c3:0e:07:ef:52:9d:0d:15:9d:10:9c:61:84:5b:fc:6b:bc:
         6c:2e:d3:4f:e2:56:35:db:e9:97:32:f1:58:75:21:8b:db:25:
         9f:f4:2b:4e:83:41:24:c4:d4:d4:d0:8c:69:3e:7a:65:73:90:
         23:16:0f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:30:22 2025 by rpki-client