Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
File:                     67mxD9JPdAljNjwtk1eAidsN5_U.mft (raw, json)
Hash identifier:          +u6nMzjEzfWOP2YVFdCZFv78RzDJObzpJEwiGU4uc6Y=
Subject key identifier:   65:A0:9A:83:BD:43:60:A2:39:57:79:0A:36:19:7E:56:DF:02:57:09
Authority key identifier: EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
Certificate issuer:       /CN=A915393C/serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
Manifest number:          A7
Signing time:             Sat 19 Jul 2025 06:22:16 +0000
Manifest this update:     Sat 19 Jul 2025 06:22:16 +0000
Manifest next update:     Sat 26 Jul 2025 06:22:16 +0000
Files and hashes:         1: 67mxD9JPdAljNjwtk1eAidsN5_U.crl (hash: hyVPfCTcGtwIk6KtORJSg+isGEKcxmw8FpggxrZ6CXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl
                          rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915393C, serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
        Validity
            Not Before: Jul 19 06:22:16 2025 GMT
            Not After : Jul 26 06:22:16 2025 GMT
        Subject: CN=687b3998-8564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:e0:c5:ae:4f:35:75:e5:c5:ee:36:74:ba:
                    20:66:10:60:7a:cc:33:86:70:ad:dc:b8:de:97:b9:
                    0a:44:bd:cf:d4:c7:94:f4:04:53:20:34:cd:e6:2a:
                    f3:2c:a8:09:64:ba:7c:51:d8:53:a5:60:a3:40:24:
                    08:65:8f:5b:21:31:b7:f4:1a:04:cb:63:a8:e9:ec:
                    d7:b5:fa:6d:41:dc:6e:b1:84:4d:e9:09:1a:23:fd:
                    54:d9:95:8f:ae:c3:4a:c5:bb:92:ef:89:16:4a:82:
                    4c:ad:97:91:22:a6:26:78:c3:3a:74:0f:28:e5:79:
                    2c:0c:d1:29:fb:c8:3c:4c:6f:fa:a3:61:32:7b:c2:
                    35:e6:67:75:6f:a2:1f:7c:2c:5f:eb:56:50:29:86:
                    7b:34:9b:1d:d3:28:26:84:df:c8:07:0f:d3:be:ad:
                    13:59:93:12:5e:42:bd:93:d7:59:0c:01:d4:a5:db:
                    bf:2d:60:bd:ca:3e:ce:c7:e7:08:6c:46:4f:1d:6d:
                    26:8e:34:5a:06:77:d7:4e:da:30:53:dc:c5:8e:1f:
                    36:46:df:41:1c:b4:44:07:fe:2e:ac:30:08:c4:38:
                    41:40:81:fc:f7:8e:65:95:30:f7:3b:cc:fe:4c:27:
                    f4:b9:1f:b4:42:71:58:dc:f7:18:f2:95:28:08:57:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A0:9A:83:BD:43:60:A2:39:57:79:0A:36:19:7E:56:DF:02:57:09
            X509v3 Authority Key Identifier:
                keyid:EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:01:3b:4b:51:27:1c:31:f7:9e:6e:9c:c2:67:69:a0:d3:7a:
         cd:53:09:b5:81:9c:d4:43:55:dc:ba:73:f6:ce:a5:1b:e1:0c:
         14:35:22:80:71:69:bf:24:67:c1:c3:c5:93:10:7b:00:66:b1:
         77:b4:a5:e1:1c:4f:11:ef:00:ae:19:75:43:8a:88:74:ef:d8:
         81:ff:35:b4:e6:ae:14:00:0a:91:fc:0d:3b:b8:a4:f7:0f:a8:
         35:39:12:1a:92:d1:66:07:4a:17:1d:f7:8a:3c:b7:40:fd:a5:
         bf:13:4e:e1:65:85:28:2d:3f:ff:c2:a2:bd:7e:28:08:5b:3d:
         96:11:e2:96:9b:78:df:95:32:5d:fd:30:36:1c:2c:ab:bc:72:
         06:4f:1b:9c:39:05:af:c3:c0:0d:4c:2c:65:5e:98:dc:d1:a6:
         4b:cb:f9:54:49:c8:94:29:fc:67:10:30:4a:da:e1:98:54:3f:
         e5:6f:7f:f0:bf:f6:62:7e:ba:15:ac:c9:76:59:6a:d0:d8:ce:
         b2:b8:23:1c:c3:11:3f:25:8d:53:2f:eb:35:5a:ea:89:c2:da:
         45:5c:e4:65:69:7f:62:27:5a:4a:2c:81:00:ca:ac:01:71:8e:
         32:e7:6c:3b:66:82:be:a3:5b:c2:0a:1c:6b:4f:c7:16:5f:91:
         0e:67:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:38:41 2025 by rpki-client