Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
File:                     7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json)
Hash identifier:          WjCmu0/6kA0hz4uip8BoprMTFKRsq0namcF97HH++RI=
Subject key identifier:   17:46:A8:D8:6A:D7:D5:80:F2:EA:77:82:4C:9C:8A:9A:13:20:F5:34
Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
Certificate issuer:       /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Certificate serial:       04B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
Manifest number:          04B2
Signing time:             Sat 19 Jul 2025 00:16:28 +0000
Manifest this update:     Sat 19 Jul 2025 00:16:28 +0000
Manifest next update:     Sat 26 Jul 2025 00:16:28 +0000
Files and hashes:         1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: 6RRDmHAFtUIMpn3u6xH37v4v0BRGFs4OekL3yggPOn0=)
                          2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
                          rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207 (0x4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
        Validity
            Not Before: Jul 19 00:16:28 2025 GMT
            Not After : Jul 26 00:16:28 2025 GMT
        Subject: CN=687ae3dc-127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:21:5e:7e:d8:9b:c0:55:49:45:9c:6d:48:
                    85:05:14:95:6c:a4:6c:11:1e:34:7e:93:25:fa:ed:
                    81:19:7a:af:de:e5:e2:5a:fc:97:2e:43:a7:a7:f0:
                    ae:6a:0c:6a:fc:d3:29:a0:20:27:6d:bd:1d:fe:6c:
                    e3:08:3b:c4:5f:4e:d3:54:fc:10:a5:46:05:d5:6c:
                    de:c3:d3:2e:e9:92:f0:64:86:79:d7:51:0e:4b:64:
                    a8:87:6b:8f:59:2b:e4:d6:65:af:38:e8:8d:7e:60:
                    1b:79:a9:86:10:48:32:4b:6a:ba:c3:83:f9:9c:80:
                    51:3c:29:ce:20:c4:e1:4d:57:0b:91:d3:7f:ac:3c:
                    9c:0f:79:cc:49:8c:19:08:11:9b:bc:b1:1a:77:32:
                    d6:3d:ea:af:27:52:b2:a0:ef:3e:2a:3a:51:5b:70:
                    52:3e:62:dc:87:c4:2e:88:44:35:f4:64:f9:6a:a1:
                    c3:7b:33:6a:4f:02:29:cd:95:8b:97:cf:1c:6a:82:
                    3c:b8:38:0a:6c:d7:c8:51:b1:9c:4c:66:0e:e1:60:
                    aa:61:33:a0:0e:ff:09:f1:1b:a0:fe:3c:cd:91:7b:
                    96:14:f0:a5:6b:63:dc:a4:cb:1e:90:0a:c6:39:05:
                    38:64:5c:37:8a:ab:0d:64:2e:19:dc:4d:21:36:ce:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:46:A8:D8:6A:D7:D5:80:F2:EA:77:82:4C:9C:8A:9A:13:20:F5:34
            X509v3 Authority Key Identifier:
                keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:3c:2a:fb:09:8c:de:34:97:41:a4:dd:1d:58:30:ac:44:
         90:bc:1b:47:1e:01:ee:ef:80:52:6f:79:55:7e:af:76:c4:c0:
         b4:f8:7f:ab:9d:a9:ad:22:6f:46:d1:bf:5b:52:c0:8f:bc:a5:
         d6:07:ec:d5:83:7c:4f:f6:06:4d:98:a4:7e:4c:ef:c8:04:bb:
         49:b0:ba:23:92:66:cc:8b:dc:26:55:12:41:3d:50:77:96:e7:
         46:b0:fb:d4:a5:04:94:f2:ee:21:01:3c:de:fa:37:e3:68:c3:
         a5:28:17:ac:53:5f:bf:5c:8e:7f:f4:52:24:1b:a9:3d:ba:cf:
         b3:6d:6a:59:c1:ab:04:67:da:eb:25:4b:fd:5c:0d:53:d0:76:
         51:c5:1c:6d:07:7c:f2:be:5e:89:5c:82:7b:ef:d4:ae:8f:64:
         68:a6:ae:21:a3:8c:02:37:24:43:4a:e7:84:2c:be:16:b8:ca:
         55:88:1e:b5:47:69:ae:22:d9:92:6d:ee:2a:d8:c0:ac:78:89:
         c8:93:fa:df:47:bb:0f:4d:70:b4:0c:12:eb:b9:7e:99:3e:31:
         22:4e:df:23:02:27:6d:ea:d7:39:76:77:e3:26:65:76:5e:40:
         26:97:b7:bc:09:a5:26:c4:59:26:e5:e5:4a:ba:78:e0:25:d6:
         c1:38:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:51:47 2025 by rpki-client