Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
File:                     eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json)
Hash identifier:          h4JOhgLn3hFk8LDjyziblK0tI6w95hwJtMIzdVbwFnE=
Subject key identifier:   8F:75:FC:23:4F:B8:E2:42:8D:66:EB:EC:F4:27:C7:4D:1D:47:E0:14
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       115F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
Manifest number:          10DE
Signing time:             Fri 18 Jul 2025 17:31:31 +0000
Manifest this update:     Fri 18 Jul 2025 17:31:31 +0000
Manifest next update:     Fri 25 Jul 2025 17:31:31 +0000
Files and hashes:         1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: usuhEUHKH7uqM0r9x6xuPsZB1A7YQemiyKuDI66sgr4=)
                          2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=)
                          3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=)
                          4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=)
                          5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=)
                          6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=)
                          7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=)
                          8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=)
                          9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=)
                          10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=)
                          11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4447 (0x115f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Jul 18 17:31:31 2025 GMT
            Not After : Jul 25 17:31:31 2025 GMT
        Subject: CN=687a84f3-52c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:6a:3b:99:ce:b4:81:1c:b2:80:6d:0f:9a:
                    58:86:56:e4:b1:a7:ff:1d:2a:20:bc:bc:74:ea:6f:
                    00:03:4e:32:96:5e:26:f8:15:bd:26:9a:0d:e1:19:
                    bb:30:6f:d2:60:f2:9b:d6:3c:4b:d6:64:d0:46:5b:
                    11:83:b9:3d:c1:7b:83:27:b2:2b:d2:03:1a:e5:cd:
                    d7:25:d0:8f:7c:3c:1d:5a:e9:cf:a8:91:24:c4:32:
                    b9:7b:5e:a5:f7:4c:f2:7a:51:b9:54:03:b0:61:90:
                    4f:00:db:e2:9a:8b:2a:fc:b6:c5:51:c4:4c:3a:cf:
                    be:40:49:06:85:8d:85:8b:7e:60:f5:bf:e4:6f:69:
                    fb:10:d9:90:83:32:91:58:c3:4d:02:27:f0:27:ad:
                    dd:08:a8:06:68:45:ae:11:7a:cd:0e:1e:60:62:0b:
                    74:bf:e1:6a:d3:22:35:66:99:f6:80:bd:73:6e:f7:
                    96:c4:81:c5:e8:0e:0b:c1:e6:9c:0f:c8:60:19:e6:
                    86:f0:f2:b1:55:ee:a8:1a:ea:94:5a:28:56:41:c9:
                    90:32:ca:1e:60:4c:bc:55:8d:0c:98:77:e4:26:fe:
                    78:b8:66:71:7c:58:10:fd:bd:6a:f9:f2:e6:e6:2f:
                    e3:f5:e6:ad:6c:5b:e3:20:e3:4b:be:0d:ef:f2:60:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:75:FC:23:4F:B8:E2:42:8D:66:EB:EC:F4:27:C7:4D:1D:47:E0:14
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:45:64:32:d0:a3:1c:97:88:a6:a7:bc:eb:40:86:63:c4:a6:
         35:14:2b:68:f8:16:77:8d:57:a1:53:7a:0d:5c:a2:a1:16:f1:
         0a:bb:f4:48:d3:fb:4d:c2:27:fe:1b:af:08:49:bf:a1:70:14:
         67:86:d0:e3:16:18:3f:44:65:67:c2:f5:b0:4e:44:78:77:f8:
         15:e2:c5:1e:d5:e4:70:6e:d2:c9:db:d3:6f:66:83:76:77:4d:
         a5:75:1f:5c:01:a6:b0:0f:0c:1e:04:f1:8d:b9:db:fb:ac:62:
         39:24:1c:84:bc:bb:7b:17:fc:af:a2:48:5c:df:e8:6e:7d:f6:
         9d:8f:f5:15:ae:8f:22:ef:d9:04:8d:4d:8d:d8:3f:6e:46:f8:
         69:ba:6a:77:49:e9:18:ff:79:b7:7e:b8:ec:74:18:b1:85:eb:
         14:ed:90:90:c8:2a:3e:6e:9b:3e:e1:18:3b:76:b9:89:56:3d:
         79:ee:15:f4:a4:3e:3e:bf:91:4b:34:4d:f7:d8:fe:6d:52:ef:
         58:d9:7a:47:70:71:24:2c:fb:79:72:99:68:3a:27:b1:6e:b4:
         4d:d7:7c:8c:47:b5:6c:25:2a:74:3f:43:30:82:77:4b:1a:df:
         62:c7:73:e5:6a:6a:58:66:f9:c9:e9:91:a9:b3:1c:99:8e:b7:
         de:af:3b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:23:21 2025 by rpki-client