Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File:                     7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier:          gydOK+HUdWki+FE97faOv+gRPrGJfXt6RydHZNInscE=
Subject key identifier:   97:13:F2:32:AC:61:79:29:95:C8:39:98:0D:1A:69:86:76:DB:1F:8D
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer:       /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number:          84
Signing time:             Sun 07 Sep 2025 07:07:54 +0000
Manifest this update:     Sun 07 Sep 2025 07:07:54 +0000
Manifest next update:     Sun 14 Sep 2025 07:07:54 +0000
Files and hashes:         1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: CsE1WrQIaw5DvcJgCyybqEE8kKzw5exMVW2s6SNzpxo=)
                          2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: NFkplWmsMA3dKF672WmukIl9RpnNjHUYN1V/j7l+GN0=)
                          3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: FPrJ8rYYz3zXm+ulxONvcKZWR1V8127XQSJ/4rwqktA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 07:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
        Validity
            Not Before: Sep  7 07:07:54 2025 GMT
            Not After : Sep 14 07:07:54 2025 GMT
        Subject: CN=68bd2f4a-26ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:7d:8b:e4:f6:34:27:ec:f3:fc:0f:51:29:
                    f8:a3:02:17:b1:4e:3d:f4:de:aa:be:22:60:2e:0d:
                    58:84:a4:cf:0d:2f:d7:7f:35:57:c0:cd:84:a7:70:
                    22:c6:6b:41:fa:5f:ae:38:a3:97:5f:90:1d:54:d9:
                    52:45:5b:9d:b2:a8:6e:02:8b:32:28:26:cc:6d:9f:
                    87:2d:42:0d:87:be:50:d9:21:03:f3:5f:2b:dd:be:
                    19:55:4d:02:37:1e:4a:1c:80:51:6a:c2:e2:f2:32:
                    cd:ba:90:90:01:d9:d3:e6:f4:c5:b8:46:ab:e9:26:
                    90:5a:19:b4:f4:a4:12:5f:98:fa:f9:f2:37:93:47:
                    cd:c5:b0:59:1f:1d:aa:02:dd:cd:7f:97:0d:4a:9e:
                    73:dc:49:0f:95:cd:28:49:2b:ce:42:2c:c7:8f:04:
                    61:8e:ed:3a:a1:60:02:b6:77:c6:f4:df:9a:da:e7:
                    a7:a8:7f:5d:7f:7a:f9:af:2d:14:1f:6e:ae:90:29:
                    81:3c:52:5a:68:ce:c0:17:09:4b:0f:20:bb:93:51:
                    d1:7f:1a:b4:98:37:4b:b7:59:31:d5:f7:2c:cd:c3:
                    ab:6e:6e:3b:43:af:75:16:71:bd:48:d0:46:71:96:
                    35:42:ce:4a:69:2e:6a:c4:6d:bc:33:d8:f0:16:3e:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:13:F2:32:AC:61:79:29:95:C8:39:98:0D:1A:69:86:76:DB:1F:8D
            X509v3 Authority Key Identifier:
                keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9e:83:11:05:d0:f0:07:9b:f5:35:ae:3f:e3:00:bc:9b:dd:
         fa:cb:b3:00:03:8f:ae:e1:04:58:4f:48:69:21:37:52:7b:b4:
         be:92:d2:fe:bf:c9:ad:b8:94:8a:d9:30:23:72:e3:68:0e:ac:
         66:67:13:50:71:b6:da:1b:98:8e:bb:96:32:f5:43:49:f6:b1:
         c5:56:32:76:04:11:fa:ea:58:a9:b8:c9:2e:eb:78:24:ef:53:
         04:22:a8:e7:82:56:4b:c3:f7:40:1b:38:f0:a1:6c:6e:4c:12:
         27:66:9a:f0:f5:97:3d:11:30:20:4c:e8:4c:29:9e:5f:08:22:
         2b:e5:5d:57:26:5b:a3:cf:66:68:97:20:1f:cd:b1:67:dc:a5:
         76:e7:2e:ef:ca:79:5d:af:1d:bb:c4:6a:19:76:22:59:b1:93:
         96:a8:7d:ef:b6:b4:5b:38:01:2a:86:55:28:60:6e:47:7f:6c:
         ed:dd:0f:45:f8:ea:1e:c0:82:22:4d:78:08:c2:5a:d5:80:6a:
         c0:3a:f3:57:92:b2:7c:60:17:fc:51:8f:fa:eb:71:06:eb:2e:
         62:9c:eb:70:e0:37:94:f4:66:08:fc:9d:b0:5d:5e:f1:7e:8f:
         f7:ba:8f:99:8f:bf:9a:e2:35:8f:b7:c5:d8:e1:6f:5f:70:09:
         15:dd:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:07:41 2025 by rpki-client