Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
File:                     f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft (raw, json)
Hash identifier:          NXm8AncUMdg04idd0APSfL2Hz8poeJgdQuk/u1wIfSA=
Subject key identifier:   A5:3E:91:E8:F3:97:F9:37:D0:89:89:C0:37:B2:3D:D7:11:44:40:42
Authority key identifier: 7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C
Certificate issuer:       /CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
Certificate serial:       03F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
Manifest number:          03F1
Signing time:             Mon 21 Jul 2025 00:45:28 +0000
Manifest this update:     Mon 21 Jul 2025 00:45:28 +0000
Manifest next update:     Mon 28 Jul 2025 00:45:28 +0000
Files and hashes:         1: f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl (hash: ZyHF4LbTv9CKo2pImLgdqcKBmO0nTCHzr0FW2vO36ME=)
                          2: 95EE2A18A8C511EC8F560C42C4F9AE02.roa (hash: 9bIT9Wti4Q16RNara0yjrmc8CnpGQxIQgk88L2RqepI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 00:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D50, serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
        Validity
            Not Before: Jul 21 00:45:28 2025 GMT
            Not After : Jul 28 00:45:28 2025 GMT
        Subject: CN=687d8da8-6f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:a9:97:7c:97:32:e2:4a:60:ef:15:95:d0:
                    64:42:d4:7d:af:05:7f:b8:c7:65:13:71:07:45:c7:
                    b8:d5:52:2d:74:ec:cd:45:b0:b4:41:70:a0:cb:97:
                    1e:13:19:17:d2:a1:03:d8:45:b0:d8:2f:c1:f0:00:
                    6c:c5:a3:73:81:c2:00:72:f0:8b:96:ef:bd:91:15:
                    72:ce:59:30:79:b5:74:48:bc:cd:2f:2e:0a:11:3b:
                    d1:70:5e:47:85:33:77:c9:02:71:e5:50:1c:e9:61:
                    25:76:5e:87:24:b9:7a:ef:60:16:3a:f4:be:ce:e0:
                    3e:08:60:6c:4f:e7:a2:32:67:00:61:9d:25:75:1b:
                    62:3f:be:02:87:41:e9:20:5c:ad:4c:d4:20:f7:21:
                    29:d6:31:cf:3e:15:b6:6f:c2:4f:87:72:c6:5e:dd:
                    3c:ce:6d:6f:e5:99:93:7f:55:0c:9e:98:8d:ba:54:
                    04:d7:cd:a8:e7:67:b3:be:95:59:0f:f9:ad:78:67:
                    9c:81:02:7c:80:19:8d:32:d6:d8:e8:57:e6:56:ca:
                    b3:e2:cf:d4:db:5f:bb:ee:3d:32:a3:da:c6:42:f0:
                    a3:86:20:87:d5:e3:31:cf:13:a4:a5:81:36:7f:7a:
                    31:ed:c4:e2:d9:d0:9c:09:b1:72:25:c7:bb:cd:83:
                    30:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3E:91:E8:F3:97:F9:37:D0:89:89:C0:37:B2:3D:D7:11:44:40:42
            X509v3 Authority Key Identifier:
                keyid:7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9a:dd:3a:80:21:d4:09:1c:8a:42:31:c1:85:32:47:42:52:
         a0:2e:ca:1c:2d:ff:31:8e:35:e2:e4:28:f8:f6:df:11:68:63:
         8c:a6:fc:d9:fa:08:e0:2b:16:de:77:d5:2f:dc:96:00:11:0b:
         5d:e6:19:6c:09:c7:02:ab:28:38:91:7f:7f:0b:71:1d:60:51:
         89:43:e3:79:68:1c:7d:34:6b:28:bd:19:be:b0:4b:10:71:a6:
         ca:84:e7:df:8e:3c:64:a0:74:1f:9c:0c:1a:7d:59:93:1f:95:
         8a:df:89:4b:0b:74:21:04:b3:66:a4:60:ce:0f:ba:e0:3a:27:
         51:44:89:29:67:e7:b5:73:87:57:b7:e9:5f:09:e0:61:67:0a:
         07:b9:63:84:b0:5e:91:c6:90:6e:f4:b4:db:fa:3c:8d:f0:5d:
         3e:36:54:35:4b:27:c6:10:bb:05:63:01:c3:dc:e3:75:44:09:
         55:65:0c:39:2f:23:d5:c4:54:58:9b:63:6d:17:65:ef:1f:c2:
         46:57:c0:e6:fd:cf:98:a9:9c:a6:a6:d4:8d:7c:12:07:d0:7e:
         db:11:68:81:0d:b0:53:df:59:5e:11:70:19:2a:94:da:ba:2a:
         c8:41:f1:55:b6:51:de:13:da:02:ea:b1:40:1d:77:b0:6c:c7:
         97:00:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:00:53 2025 by rpki-client