Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
File:                     SV79PNQ-P-7r0irR3ep5817UePU.mft (raw, json)
Hash identifier:          nEQiWSY7SIQ4uhraN5Xh+bWvShPDQeiijwc1G5TLjxk=
Subject key identifier:   0D:0B:1A:CB:6D:28:E5:90:30:D1:5B:86:DE:A7:15:9A:27:5C:48:1C
Authority key identifier: 49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5
Certificate issuer:       /CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
Certificate serial:       137B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
Manifest number:          1372
Signing time:             Wed 04 Jun 2025 17:00:09 +0000
Manifest this update:     Wed 04 Jun 2025 17:00:08 +0000
Manifest next update:     Wed 11 Jun 2025 17:00:08 +0000
Files and hashes:         1: SV79PNQ-P-7r0irR3ep5817UePU.crl (hash: fcNXkIxfgpNDXowzNlipfMYkMxC4CEPOnCHjkGNxB9E=)
                          2: C569659C02DF11EBB54FAE29C4F9AE02.roa (hash: ksZCQUpgjigR3J12hgj4ozKRCV6ZGeFDC2+Ja2MoW5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl
                          rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 17:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4987 (0x137b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A717, serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
        Validity
            Not Before: Jun  4 17:00:08 2025 GMT
            Not After : Jun 11 17:00:08 2025 GMT
        Subject: CN=68407b99-8da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:de:08:6b:b2:1c:9d:62:fd:09:80:ac:96:
                    da:7c:ff:a8:56:55:0e:9f:32:fd:4b:cd:18:f0:11:
                    89:80:d1:06:bd:f9:f1:75:71:59:62:62:19:2b:4f:
                    8e:8e:07:ab:b9:bb:6b:ab:60:2a:8c:75:f4:b4:ea:
                    1b:5a:fc:66:a1:f0:79:36:b9:10:52:7d:77:d6:0b:
                    92:59:23:a6:e5:bd:b4:32:c2:95:84:bc:63:c7:34:
                    54:d1:c1:04:dd:62:a8:df:38:ce:15:50:79:1e:fc:
                    f4:b7:0c:dd:2f:eb:60:45:fd:50:68:89:c8:1a:8d:
                    05:ec:d6:7f:25:8e:e3:52:fd:c3:cb:3f:43:3d:b4:
                    f8:08:ef:32:10:55:77:4d:f6:f6:4a:69:c8:bc:59:
                    d0:7f:95:5e:23:f2:18:79:43:74:77:c2:88:f6:01:
                    0c:97:43:26:01:55:56:26:b2:37:84:60:bf:8b:5d:
                    5a:0a:33:19:87:78:e7:01:71:ab:28:02:19:39:1b:
                    7b:db:77:ae:94:c3:e2:87:71:70:14:d5:8f:01:1b:
                    9d:76:14:ce:e4:2f:82:80:cd:28:0b:f3:f2:dc:e1:
                    2b:99:fc:85:24:57:37:b0:27:36:4b:04:2c:52:2a:
                    02:01:73:d4:ee:21:13:96:e8:f1:1a:e4:1e:a3:96:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0B:1A:CB:6D:28:E5:90:30:D1:5B:86:DE:A7:15:9A:27:5C:48:1C
            X509v3 Authority Key Identifier:
                keyid:49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:34:24:c6:b6:6c:b0:86:47:d6:f5:63:e2:fd:97:c8:a1:d7:
         dd:cd:ea:c6:4d:b9:c7:9e:2f:14:6e:33:3a:dc:2f:ff:ea:e6:
         2e:15:53:2b:b7:61:3e:fd:d9:fb:be:39:a8:e3:b9:a1:54:18:
         8d:bb:27:d0:6d:cb:c3:63:63:4d:43:02:96:6a:c7:a9:18:e7:
         50:67:c0:cb:f9:a7:7a:c0:e3:63:9b:7d:f8:46:45:99:98:f9:
         0e:cc:75:50:cb:c5:75:d4:35:48:ba:46:32:44:42:e6:b6:d7:
         63:1b:5c:df:73:91:5a:6d:26:7f:d2:78:03:0e:55:1c:ba:aa:
         17:b7:94:85:b2:cf:52:b3:42:00:6e:d5:c5:4c:63:c2:fd:96:
         41:9b:08:16:6e:b9:01:97:02:45:a3:2f:57:04:32:52:cd:d3:
         72:16:87:8a:ae:47:7b:fa:68:3c:fa:83:41:5c:6d:e7:f1:90:
         26:df:23:e9:6f:b0:84:20:64:b3:9d:ea:6d:1f:1c:ad:37:e6:
         58:33:25:46:3d:81:5d:af:f1:32:99:01:48:4d:45:cd:61:a5:
         92:b2:d7:61:69:e0:fa:e0:b2:6e:36:87:fa:a4:0f:a5:f2:fc:
         3b:3d:1a:3e:52:d1:d9:9a:3c:27:df:ce:fd:96:6a:02:30:36:
         6a:6e:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:10:46 2025 by rpki-client