Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File:                     6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier:          sVcehx7C5rQ09ABRteaD5y2RIilYD+cym9fVICzbn4c=
Subject key identifier:   90:FA:01:82:B6:53:8B:D9:9A:C3:41:E7:0F:8C:5A:22:35:CE:D4:F5
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer:       /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number:          B7
Signing time:             Mon 21 Jul 2025 06:14:56 +0000
Manifest this update:     Mon 21 Jul 2025 06:14:55 +0000
Manifest next update:     Mon 28 Jul 2025 06:14:55 +0000
Files and hashes:         1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: KjL9u6NHyTpWGEr407pOKT/rXr/Bmg4UM1jP7X8Mx6Q=)
                          2: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: msL/KENDVWQUMvYyaW7j5WzxEJ6sxahQk+kZqFtRzK0=)
                          3: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: 47ro9pNe8tomss9aZ4VtGmmUiA4dH1RHfELIkfLkMBU=)
                          4: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: jdwllMTCFqVjmHB+vWxuk6uDQD76msFkVq9++d9B8Cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
        Validity
            Not Before: Jul 21 06:14:55 2025 GMT
            Not After : Jul 28 06:14:55 2025 GMT
        Subject: CN=687ddae0-2a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:0e:19:72:7e:77:52:b7:31:ca:92:bf:8d:
                    26:1d:1c:ea:5d:bf:3e:47:4a:50:b0:d6:e4:58:fa:
                    78:82:1d:40:f2:5a:35:b0:61:b5:ae:14:54:5e:d0:
                    57:75:e9:c2:8f:ed:6a:99:90:a0:8e:04:d9:3f:0e:
                    20:d3:f4:35:26:1d:0b:36:02:99:a9:d2:0d:ff:ed:
                    d8:ab:94:87:cb:fc:90:59:69:90:5b:8e:ec:3d:01:
                    62:4c:86:41:2c:41:62:9b:35:23:b0:6e:a5:9b:fc:
                    a6:ea:91:39:c3:57:e2:e5:c5:d5:eb:95:d0:a6:d6:
                    68:cd:b1:43:e0:d3:31:11:74:f3:b8:16:3e:f0:a1:
                    60:6e:c2:3d:38:85:53:ca:a4:9b:62:e2:99:af:e2:
                    37:27:ff:9e:53:36:26:20:28:68:41:65:5b:24:d9:
                    ba:7d:42:6d:c7:6d:64:38:2d:7a:c7:59:7a:0b:75:
                    3b:b4:e6:7e:55:df:a0:dd:0d:d5:0b:89:df:26:da:
                    97:ab:dd:3a:aa:0a:71:e2:3c:ff:9e:25:b0:00:dc:
                    c9:60:cd:60:b4:e3:eb:a7:64:88:37:8f:03:51:52:
                    0d:a0:bc:43:04:ae:b8:17:d1:4a:48:b5:2d:c8:76:
                    e8:f4:dd:42:da:ab:5c:b2:75:00:60:cc:9d:83:86:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FA:01:82:B6:53:8B:D9:9A:C3:41:E7:0F:8C:5A:22:35:CE:D4:F5
            X509v3 Authority Key Identifier:
                keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:27:da:b2:32:7e:77:f9:4b:63:54:38:a1:f6:d5:f3:1b:
         0e:8c:28:8f:13:e6:7e:8d:cb:8b:41:18:b6:3a:f6:fa:72:f9:
         8f:82:f2:ed:90:da:06:cd:ba:3c:b9:30:be:32:7b:f1:c6:bb:
         11:fd:52:47:df:3f:e4:d0:9c:bd:4b:54:0a:e5:90:02:86:79:
         86:22:1d:14:c3:41:ba:07:81:4e:6f:d7:26:b8:e4:5e:2a:38:
         19:ea:38:e9:ed:dc:83:d3:34:e7:53:eb:76:52:d5:00:31:c7:
         26:73:5a:9c:3d:cb:3c:ce:6e:26:a3:70:1e:5e:66:37:9f:ef:
         45:5a:55:d7:71:77:05:f6:3c:18:94:31:5c:d0:c5:c1:41:40:
         e5:0d:a5:1a:de:63:fc:ab:32:b1:48:81:ca:ce:ec:71:a9:40:
         f5:38:b5:7f:e6:b4:51:e1:5b:54:8c:fa:10:8c:28:1e:96:14:
         a1:95:b4:e1:e0:b0:ff:24:70:81:f9:97:88:cb:20:c9:29:6b:
         1f:e7:b9:51:9c:fd:c3:01:fc:fb:ce:38:f5:2c:53:b7:d9:2a:
         14:22:98:cd:32:32:96:93:b3:6d:91:6d:52:8f:fd:ab:48:14:
         a5:61:79:13:d8:5a:f7:00:ef:c9:05:3a:41:f2:f1:88:c1:52:
         b3:db:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:18:31 2025 by rpki-client