Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
File:                     -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json)
Hash identifier:          v7eUcNx4zA0rzeOxODg5ANQmcLxd1yq6DFgDYTAuIyc=
Subject key identifier:   75:76:C3:1F:E4:E4:9F:70:14:25:6B:F3:70:7C:A4:62:BB:96:A3:97
Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
Certificate issuer:       /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
Manifest number:          C7
Signing time:             Mon 21 Jul 2025 05:58:38 +0000
Manifest this update:     Mon 21 Jul 2025 05:58:37 +0000
Manifest next update:     Mon 28 Jul 2025 05:58:37 +0000
Files and hashes:         1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: TVZ7v692Iar9yETzgBjocT0qs3rdSzKR9HvajSDFxB0=)
                          2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: 8zOiXd3kRlQoiz32Gjahx1aoeuvy3cZGr/aU3t8eEp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
                          rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
        Validity
            Not Before: Jul 21 05:58:37 2025 GMT
            Not After : Jul 28 05:58:37 2025 GMT
        Subject: CN=687dd70e-20bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:39:6d:87:09:3e:c9:db:93:3b:ec:72:5a:df:
                    ad:39:9a:a6:3c:e5:7f:c2:48:89:68:0d:da:61:5a:
                    5f:8e:fa:e6:f9:5f:57:57:b5:14:c1:cb:1a:ff:b4:
                    77:4b:0e:ca:a8:a4:07:ee:6c:f0:38:58:9d:24:a0:
                    d7:75:6d:3e:b5:34:f3:ca:f7:35:1b:49:38:af:1a:
                    50:a7:d6:0f:54:0b:06:00:c9:7f:2f:85:f7:7b:1e:
                    71:35:3f:68:20:1a:ac:3b:38:c5:52:0f:b6:62:b5:
                    11:b9:8d:02:07:ed:e3:42:9e:3d:eb:a9:79:23:3a:
                    f8:a1:4a:3b:d1:d5:d3:88:0f:83:6a:70:62:fc:02:
                    72:3e:54:b5:dd:11:c1:1a:5b:64:b0:e7:b1:32:8b:
                    23:0f:13:be:2f:be:3d:50:f8:16:8d:21:45:a2:21:
                    93:82:ce:a7:d6:10:5e:a1:8f:a0:2b:27:18:a8:cf:
                    82:3d:3a:a7:33:fd:6f:f1:b8:65:33:67:fa:1a:e0:
                    0c:22:46:85:3f:89:b2:b8:00:01:c2:16:1f:aa:91:
                    98:15:6e:17:f1:64:b6:82:7a:d5:26:56:92:64:ba:
                    6c:60:af:c1:8f:4c:2b:c8:4c:5b:f8:5d:33:60:55:
                    ef:56:5b:75:57:7d:af:23:37:56:e6:c6:83:9f:89:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:76:C3:1F:E4:E4:9F:70:14:25:6B:F3:70:7C:A4:62:BB:96:A3:97
            X509v3 Authority Key Identifier:
                keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:52:7d:d6:08:b4:fe:5e:02:36:54:d7:f0:a4:2c:33:ef:1e:
         26:26:4c:5d:e0:32:c1:0f:73:e4:5d:45:c8:65:2c:9a:78:05:
         b7:35:05:52:38:ee:d7:cf:d9:3b:92:64:1f:1a:1f:ef:fa:57:
         6c:fe:02:2c:14:23:5b:a7:32:e4:54:ed:44:fa:b4:57:04:4b:
         6a:8a:8f:09:2a:82:af:0e:98:6e:6b:bf:fd:3c:27:66:fb:32:
         36:a8:72:64:6b:5c:5e:d9:01:0e:4b:86:18:4a:0c:7d:6c:ff:
         b2:89:f0:f3:0c:97:a4:ee:c5:67:ea:45:03:12:f8:bd:da:a9:
         f8:e1:3d:88:aa:25:66:f4:bc:97:53:e6:41:93:0d:26:1b:e9:
         0e:58:ae:16:f2:31:8c:1a:f2:7a:49:30:55:60:2f:55:aa:ba:
         b2:70:e8:a4:41:fc:08:0c:ff:21:be:e9:09:f8:de:ca:cd:d5:
         03:50:9e:99:4c:bd:76:aa:06:65:a8:58:50:8e:a1:d7:40:05:
         62:ce:e7:05:45:4d:9c:c2:0c:d8:c4:e8:d0:c8:4b:53:cb:70:
         e8:b5:fb:f4:9a:1f:ad:82:e1:da:60:4c:01:12:bf:09:35:bf:
         df:55:bd:a2:c1:33:da:12:de:80:4f:89:7a:65:28:24:b1:72:
         6c:13:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:34:43 2025 by rpki-client