Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File:                     zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier:          R40qVtVFmAHP/sVKnPtvb9iT7h/ZQJsVWn07KBkCSeY=
Subject key identifier:   24:70:1F:53:A2:D7:D3:5A:26:48:75:69:C9:23:1D:FB:54:27:CB:DB
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer:       /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial:       0737
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number:          06D7
Signing time:             Sun 20 Jul 2025 22:36:15 +0000
Manifest this update:     Sun 20 Jul 2025 22:36:14 +0000
Manifest next update:     Sun 27 Jul 2025 22:36:14 +0000
Files and hashes:         1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: iqzq6BRDD0SuwkzlkWtos9x/lLkN5UrXPCsV+N+5SUc=)
                          2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=)
                          3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=)
                          4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=)
                          5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=)
                          6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=)
                          7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 22:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
        Validity
            Not Before: Jul 20 22:36:14 2025 GMT
            Not After : Jul 27 22:36:14 2025 GMT
        Subject: CN=687d6f5f-fdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:95:06:f6:e4:d3:88:2d:c4:4d:12:38:fa:
                    b0:0d:57:db:0d:4e:ba:73:ca:f2:49:4d:d9:1f:a0:
                    cf:1a:75:58:ea:0f:c5:49:64:c2:3f:cb:8c:ad:19:
                    ec:e4:d1:ed:a6:8b:9e:d8:ee:b4:8b:7e:8a:63:d8:
                    97:bf:f3:19:10:ab:78:5a:19:03:f5:3b:73:82:b8:
                    88:f6:c3:7a:0e:3a:88:ce:58:f7:f1:bd:df:28:5b:
                    d4:01:32:39:3d:e0:06:6c:1d:1d:d4:43:32:30:1a:
                    c1:c8:7d:f8:4e:ad:10:c3:ad:28:39:1e:ca:94:bc:
                    38:b7:72:4c:cb:62:4e:5e:8a:8f:c5:0f:bd:25:08:
                    07:2a:e2:3d:2e:30:b4:e9:8b:3f:8f:d2:1f:14:56:
                    b7:bd:e9:ff:0f:bb:05:27:54:ee:2e:5c:8c:d9:42:
                    59:c4:1d:ac:f9:cf:31:43:8e:3d:a8:46:5f:df:97:
                    2b:fd:ed:40:01:95:d6:9e:ca:f5:49:79:e9:1b:0b:
                    0b:45:15:7c:44:aa:bf:94:f7:4a:39:05:c0:3f:0f:
                    aa:3a:fc:1b:44:4c:36:1e:66:14:9b:0c:90:97:81:
                    7c:69:72:55:60:ca:1f:22:a1:79:0e:f3:6a:9d:f4:
                    c1:9f:02:6b:d3:3f:79:c4:90:b5:9d:e5:c4:69:f9:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:1F:53:A2:D7:D3:5A:26:48:75:69:C9:23:1D:FB:54:27:CB:DB
            X509v3 Authority Key Identifier:
                keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:42:50:15:94:db:b9:f2:4a:dd:dc:05:23:1c:c7:b5:ba:da:
         40:4d:9b:a0:9c:92:50:12:58:42:48:e8:cc:00:9b:00:d1:22:
         31:85:af:96:38:b7:71:c0:e5:9c:9a:11:6d:cd:ed:63:18:d5:
         db:6c:d9:42:d6:86:77:04:d3:b3:b4:d8:df:53:56:23:48:1e:
         63:17:65:8a:dc:86:8c:25:be:fc:76:2c:89:bf:4d:2e:b6:89:
         f4:0f:21:99:2b:d0:e0:aa:c0:bb:93:f9:85:2f:ca:f6:ae:50:
         27:2c:f3:26:3b:39:ba:a1:64:ea:4c:03:00:e2:1a:42:a0:5f:
         9c:2e:87:c7:74:f8:09:ec:c3:05:4c:bb:cc:57:55:30:56:84:
         5a:79:4f:4b:8f:7d:fd:b1:99:f3:8a:44:63:ea:f7:81:ac:c8:
         dc:b1:f0:19:f9:8d:aa:72:59:e3:86:c0:4c:5e:d2:54:62:9d:
         47:40:82:18:af:90:a3:f9:18:ee:71:bb:b7:2a:5b:b8:5e:b5:
         89:0e:0b:6b:19:b7:48:a7:b9:36:de:08:51:aa:f3:26:c0:09:
         f7:13:fd:2a:91:38:9a:e6:68:c0:85:6e:35:59:c3:b9:53:c3:
         0d:e8:b8:55:26:46:fe:91:92:aa:78:9e:96:94:80:44:24:78:
         5b:12:8c:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD
NTBCNUJBMTQwHhcNMjUwNzIwMjIzNjE0WhcNMjUwNzI3MjIzNjE0WjAYMRYwFAYD
VQQDEw02ODdkNmY1Zi1mZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3iVBvbk04gtxE0SOPqwDVfbDU66c8rySU3ZH6DPGnVY6g/FSWTCP8uMrRns
5NHtpoue2O60i36KY9iXv/MZEKt4WhkD9TtzgriI9sN6DjqIzlj38b3fKFvUATI5
PeAGbB0d1EMyMBrByH34Tq0Qw60oOR7KlLw4t3JMy2JOXoqPxQ+9JQgHKuI9LjC0
6Ys/j9IfFFa3ven/D7sFJ1TuLlyM2UJZxB2s+c8xQ449qEZf35cr/e1AAZXWnsr1
SXnpGwsLRRV8RKq/lPdKOQXAPw+qOvwbREw2HmYUmwyQl4F8aXJVYMofIqF5DvNq
nfTBnwJr0z95xJC1neXEaflZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRwH1Oi
19NaJkh1ackjHftUJ8vbMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3
QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN
TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgQlAVlNu58krd3AUjHMe1utpATZugnJJQElhCSOjMAJsA0SIxha+W
OLdxwOWcmhFtze1jGNXbbNlC1oZ3BNOztNjfU1YjSB5jF2WK3IaMJb78diyJv00u
ton0DyGZK9DgqsC7k/mFL8r2rlAnLPMmOzm6oWTqTAMA4hpCoF+cLofHdPgJ7MMF
TLvMV1UwVoRaeU9Lj339sZnzikRj6veBrMjcsfAZ+Y2qclnjhsBMXtJUYp1HQIIY
r5Cj+Rjucbu3Klu4XrWJDgtrGbdIp7k23ghRqvMmwAn3E/0qkTia5mjAhW41WcO5
U8MN6LhVJkb+kZKqeJ6WlIBEJHhbEozF
-----END CERTIFICATE-----
Generated at Tue Jul 22 12:32:07 2025 by rpki-client