Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
File:                     7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json)
Hash identifier:          Yu8XNoT7mHEo6UV5YhYKeEGnqlU0h0R4wyh+ay/njxY=
Subject key identifier:   6A:20:07:00:B6:8D:4F:A5:9D:2E:1E:02:0C:74:62:3A:6D:DD:CA:0F
Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
Certificate issuer:       /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
Manifest number:          017A
Signing time:             Fri 19 Sep 2025 04:15:38 +0000
Manifest this update:     Fri 19 Sep 2025 04:15:38 +0000
Manifest next update:     Fri 26 Sep 2025 04:15:38 +0000
Files and hashes:         1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: MeibQXHRPIrhqHk4sms7ikdAzNvgkaW3j4CCCpVrf0Q=)
                          2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: 1Y1b/QsKKP8Hjc1I0M3GlUj53Sw/Eb4ibtuIxI0mlJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
                          rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 04:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
        Validity
            Not Before: Sep 19 04:15:38 2025 GMT
            Not After : Sep 26 04:15:38 2025 GMT
        Subject: CN=68ccd8ea-fc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:6c:e9:42:2f:d4:4a:59:07:79:00:3a:56:
                    9b:29:4a:f6:e4:29:2d:b6:43:fe:52:88:9b:17:dc:
                    3a:60:6f:69:c4:1f:95:a7:e2:89:d2:18:3f:3a:95:
                    ee:24:01:3c:9a:90:70:57:26:8c:b0:58:24:76:65:
                    1d:a6:99:1e:95:9b:84:50:57:a8:5a:83:b9:de:a0:
                    0b:8c:51:be:2d:bf:f8:71:ea:d8:eb:f5:72:84:fd:
                    a9:2a:cb:04:15:4f:09:b6:c8:30:bd:08:29:a4:88:
                    0e:6d:b0:73:99:6b:85:e1:23:55:5b:c3:b4:8a:11:
                    cd:bb:9b:02:af:eb:03:1d:9d:25:f7:7e:38:62:38:
                    50:57:e2:2e:0d:63:9a:74:6b:91:43:e6:c3:74:ca:
                    5c:25:a9:9c:0a:7f:56:f2:cb:da:ec:77:2d:01:0a:
                    b5:dd:8a:a8:8f:36:20:87:18:46:dd:f2:30:17:64:
                    3b:cf:cb:03:86:4a:1b:bf:84:23:2d:9c:d8:12:42:
                    39:a4:4d:f0:11:00:bb:e6:23:98:f1:33:87:3b:d2:
                    c2:90:7f:b1:a0:fc:68:c6:8f:76:7f:07:a0:4b:e5:
                    20:64:90:32:d9:20:ae:d9:fa:7d:70:29:f1:8c:14:
                    ab:b8:df:c8:4d:9d:5e:61:84:46:63:0c:f3:5a:f3:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:20:07:00:B6:8D:4F:A5:9D:2E:1E:02:0C:74:62:3A:6D:DD:CA:0F
            X509v3 Authority Key Identifier:
                keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0f:69:34:67:81:dc:08:02:48:22:f0:45:39:02:5e:0f:48:
         ae:d5:d5:14:51:19:80:51:65:2a:93:59:86:ed:c5:44:6c:7f:
         af:64:01:cf:88:e4:61:f5:ac:dd:8e:09:47:6a:29:48:d4:af:
         96:25:36:17:85:c7:0f:2f:48:e1:61:d7:2e:34:a6:73:88:28:
         89:d9:20:76:28:d6:26:f1:71:c7:d7:32:0f:19:a3:4c:ec:d4:
         0b:1a:c3:ff:1e:7c:50:6a:e1:5b:bc:17:c7:a7:5a:b4:4c:11:
         5c:f9:12:17:c6:d0:35:12:bb:b6:9f:59:39:fb:62:b2:a0:ac:
         ef:2b:20:32:08:1e:60:eb:e2:2c:d0:05:a9:9f:dd:81:65:e7:
         86:eb:82:75:d8:61:74:7f:f6:e3:14:b2:43:d5:e6:f3:61:e5:
         c6:fa:9f:a4:0f:0d:c7:c5:d2:e8:2f:fc:62:30:f6:b9:bd:bb:
         8d:35:c5:d3:ae:09:a1:b8:b0:6f:47:0e:06:82:2d:79:5d:18:
         07:b6:a4:ee:c4:85:44:9b:ff:7d:73:7b:a0:0f:3a:3e:d5:bf:
         a7:25:83:c9:fc:7d:ba:15:a9:fb:cc:22:c7:38:06:58:94:df:
         e8:f4:c0:7b:61:10:0a:70:85:5b:4a:3b:bc:29:4b:c9:62:bb:
         b1:c1:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:56:17 2025 by rpki-client