Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
File:                     a7IptQZEL6BIpPedPLRPoOAEeUE.mft (raw, json)
Hash identifier:          wUvGRuIERzqKP1mEStPVBvyVITc3XhPGbVyQS3cqLs0=
Subject key identifier:   AF:8B:3D:2E:F8:EB:D6:AD:C9:80:69:BA:77:AE:1B:F8:B9:DA:CC:A0
Authority key identifier: 6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41
Certificate issuer:       /CN=A913C928/serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
Manifest number:          0747
Signing time:             Sun 08 Jun 2025 21:21:29 +0000
Manifest this update:     Sun 08 Jun 2025 21:21:29 +0000
Manifest next update:     Sun 15 Jun 2025 21:21:29 +0000
Files and hashes:         1: a7IptQZEL6BIpPedPLRPoOAEeUE.crl (hash: tQDBStnfE08RQBSgznbbS9sCZOlfYZruG1W7UXBSmhY=)
                          2: 08D6D5122A4511EBA2903755C4F9AE02.roa (hash: /eGyMyfZrwg+tW0iicICs4kHkYiGhwJp9BCaRgreCno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl
                          rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 21:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C928, serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
        Validity
            Not Before: Jun  8 21:21:29 2025 GMT
            Not After : Jun 15 21:21:29 2025 GMT
        Subject: CN=6845fed9-9ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:4a:75:a9:fe:06:b7:fb:c6:69:a1:fa:b3:
                    6b:56:2e:a0:96:37:6e:01:ef:bb:2f:f9:26:94:49:
                    b2:e5:31:41:35:6a:27:62:c1:64:2d:a6:2a:e6:e7:
                    f2:81:26:61:54:a8:c6:ec:c7:d1:60:6c:97:55:a5:
                    07:a9:e1:d2:f9:7b:4e:a5:aa:2e:84:dc:bc:2b:ee:
                    32:25:7d:a6:82:95:d1:7c:78:55:53:d2:9d:35:41:
                    7d:25:d5:73:54:23:0f:8e:e7:e5:7c:2c:64:d3:fd:
                    df:5c:96:2f:82:f3:f0:4e:86:01:ec:2c:72:7c:9e:
                    6e:26:fd:80:20:56:dc:ee:81:41:53:89:88:d9:a4:
                    6a:bf:e9:ee:ea:01:65:53:70:b2:a5:1a:20:ce:7c:
                    14:e9:fc:a8:0b:11:5b:6e:35:01:7e:24:0e:6d:d6:
                    2a:c7:14:a6:f7:b2:40:51:ec:6a:a6:28:bb:78:8c:
                    3b:d5:58:c5:45:86:ba:7f:07:3d:ca:98:af:5a:47:
                    72:64:3c:6e:3c:2c:e2:f1:af:08:0c:5e:b1:32:1d:
                    f2:ed:31:cb:fb:c5:3e:b6:17:20:de:b6:f5:a1:1c:
                    c1:d8:3c:14:85:bf:99:4f:b1:92:68:1c:d6:5a:b0:
                    15:83:43:1c:f6:0c:a8:a4:d5:15:bb:91:73:73:4a:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:3D:2E:F8:EB:D6:AD:C9:80:69:BA:77:AE:1B:F8:B9:DA:CC:A0
            X509v3 Authority Key Identifier:
                keyid:6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3b:8b:d6:17:3f:c9:c2:c7:07:67:e6:96:90:b4:35:e5:7a:
         82:74:9d:e1:1d:af:8c:e8:e7:7c:06:93:df:47:82:cb:fc:c5:
         42:6f:92:8a:0c:01:0f:6e:44:95:78:0a:31:cc:05:b0:a6:49:
         7b:42:79:a0:10:57:04:53:e4:e2:61:56:f7:57:42:2c:03:e8:
         fc:fd:26:06:6f:3b:34:cd:49:ea:8d:b6:72:82:0e:0e:1c:73:
         c3:e2:b2:f1:88:07:ed:84:b0:40:05:95:03:93:50:00:94:00:
         68:2f:43:5a:b2:d2:ad:f2:f4:4f:12:cc:f4:5d:26:5b:93:d1:
         56:93:dd:cd:3c:a2:dd:06:e0:4a:e2:18:b8:5e:7d:6e:1a:d0:
         ee:5c:d2:74:08:a1:0c:6e:67:ed:7f:09:60:6e:2c:c8:64:28:
         30:93:92:fd:54:ee:70:c9:2b:5a:4c:86:0e:54:41:f4:c1:f6:
         08:b4:88:02:07:cb:67:a2:4c:f1:ce:f1:40:bc:14:74:d5:c9:
         1f:80:cd:08:77:97:54:61:cf:47:0b:df:65:40:0a:0a:3e:83:
         62:67:ab:8b:65:c6:dc:d9:51:a6:3a:21:89:88:32:61:14:6b:
         92:0f:90:75:12:d7:a3:99:37:54:96:5e:ac:20:aa:3e:75:65:
         fd:85:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:24 2025 by rpki-client