Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
File:                     0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json)
Hash identifier:          v0znVMvGZBkkF4KpGEoR1lM2yoY3zTmT42BzP/QQBJY=
Subject key identifier:   E3:03:2F:04:72:EF:B2:46:D8:FA:7D:D9:2A:D2:74:0D:90:34:70:ED
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Certificate issuer:       /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
Manifest number:          01A7
Signing time:             Wed 23 Jul 2025 03:31:39 +0000
Manifest this update:     Wed 23 Jul 2025 03:31:38 +0000
Manifest next update:     Wed 30 Jul 2025 03:31:38 +0000
Files and hashes:         1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: JDMAkj7lvwoM7pQ3IJ8Dq3vqQjMT+ug6vO7LCLow2Rg=)
                          2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: M1Z0vPN0xRUeI7aXSO+zgJ15zwwVDL1Npd3KMXS/ZDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 03:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
        Validity
            Not Before: Jul 23 03:31:38 2025 GMT
            Not After : Jul 30 03:31:38 2025 GMT
        Subject: CN=6880579b-9664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:2c:b4:01:55:36:b2:59:4e:18:91:d1:ae:
                    8b:a1:40:7d:39:10:96:34:3c:93:08:89:23:4f:4e:
                    5f:10:e2:30:3e:f7:99:bd:3d:2c:25:32:93:0c:cb:
                    97:f2:48:c5:94:0f:97:ca:25:d2:0c:bc:31:ab:47:
                    9e:60:12:6d:38:83:aa:4c:4f:20:7a:e6:b0:28:52:
                    68:0a:af:45:0d:ff:d2:18:43:ac:84:20:eb:7c:51:
                    0c:e0:c4:be:8d:87:86:eb:86:8d:bc:da:77:46:84:
                    f9:0f:16:81:bc:3c:c9:6b:70:61:ee:de:fb:dc:90:
                    da:cb:45:53:52:60:64:0e:3d:21:26:bd:2e:a3:01:
                    70:77:5c:89:8f:ac:ed:fd:92:7f:db:07:56:d9:de:
                    a1:86:3f:6b:15:71:f2:ab:8e:d6:65:ba:2e:a0:8f:
                    f5:1d:27:5e:a2:5f:0c:68:27:d3:ca:24:ae:a5:f7:
                    28:0a:9c:7c:39:8b:6d:74:3f:39:05:74:44:6a:e1:
                    52:46:b1:b4:46:f7:65:61:26:b7:f9:6f:4e:42:f1:
                    07:02:f3:af:e1:4c:04:f7:aa:ef:d6:91:97:65:29:
                    2f:79:95:05:2d:68:55:72:f2:45:45:a0:5a:2d:54:
                    a4:fd:f0:24:10:15:8d:5b:da:8b:37:77:52:b6:30:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:03:2F:04:72:EF:B2:46:D8:FA:7D:D9:2A:D2:74:0D:90:34:70:ED
            X509v3 Authority Key Identifier:
                keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:dd:ad:cb:3f:48:c8:76:4e:96:92:83:41:b1:e5:f5:fe:
         01:00:9f:25:93:80:0b:8e:87:91:e8:77:7d:de:7d:2e:95:8f:
         d7:e7:e6:2f:ce:68:b3:29:dd:cb:b2:06:35:d1:14:10:80:aa:
         5f:bb:95:79:36:d6:79:91:2b:76:04:f8:7e:d5:25:e7:ea:e3:
         89:25:1b:1d:cf:d0:cd:af:ed:68:9f:7b:bb:55:c8:88:b6:22:
         c7:78:82:01:43:84:c9:09:9c:cb:34:a8:ec:ba:46:e7:e9:42:
         c5:d7:82:57:12:cb:d0:d5:f2:b3:23:8f:e7:e0:ab:c6:04:71:
         30:72:10:10:2f:47:c1:02:8f:0c:d3:31:94:46:58:cc:ba:dd:
         28:57:7d:84:62:31:9f:b7:08:6e:f0:b9:6a:e6:0c:45:a9:a4:
         c4:31:6f:d5:95:c4:b5:d4:b3:bf:6d:08:0d:f9:30:96:e7:55:
         ab:16:88:be:75:47:1c:95:18:f8:3d:92:1b:60:32:6d:b9:9e:
         48:32:90:45:d0:2c:17:fd:fe:c0:11:f0:71:cb:d4:13:5e:72:
         c8:5a:07:94:37:55:d5:f7:8d:dc:63:52:8e:34:69:ea:68:36:
         04:10:08:e9:4e:57:71:17:59:c7:df:d7:39:0d:0e:20:df:fa:
         cd:5a:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:27:45 2025 by rpki-client