Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier:          V37Ez0zhV2D27oVSVcqw9DqiB2lb8qJkmDpKTaKBZdw=
Subject key identifier:   CD:B7:2D:A6:00:0D:32:D3:7F:B8:EB:F1:3C:B2:D7:0C:A4:59:C2:B2
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       07E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number:          07DB
Signing time:             Fri 06 Jun 2025 21:07:46 +0000
Manifest this update:     Fri 06 Jun 2025 21:07:45 +0000
Manifest next update:     Fri 13 Jun 2025 21:07:45 +0000
Files and hashes:         1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: ecEAZC99Jg8Jz2E4dGh8F9RN1LvU10AhCmj7+pdoTn8=)
                          2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=)
                          3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Tzogk+KlaMGiRbq9BoG9FBqCIAU/Ao8ia39qrUgrDpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 21:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Jun  6 21:07:45 2025 GMT
            Not After : Jun 13 21:07:45 2025 GMT
        Subject: CN=684358a1-74e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:4b:47:f6:05:d7:54:f2:86:37:99:8a:7c:
                    b4:55:ae:19:59:59:fd:37:db:87:0a:d2:d6:eb:05:
                    92:10:e0:6b:4f:86:bc:0f:a7:ad:a0:79:6d:93:b9:
                    a4:4c:f8:cd:33:61:23:64:e4:b3:f7:47:08:2d:08:
                    8a:18:9a:d6:21:74:45:c2:6d:a9:bc:e4:82:bc:ff:
                    e9:7a:9a:15:73:2a:c6:d3:6e:3e:0b:49:bb:6d:c8:
                    60:ef:e4:9f:9f:e2:38:40:33:33:56:cd:ff:14:5a:
                    5d:e6:59:74:23:78:ea:c3:81:7d:40:af:a9:e0:c8:
                    4e:92:3b:a6:a6:21:ea:b4:ce:ae:89:84:dc:bc:1d:
                    05:fc:79:ab:10:c9:bb:86:d2:5f:1f:86:8e:6d:3b:
                    86:2c:be:cc:c4:c7:b5:92:63:93:35:f5:c4:0b:1c:
                    54:6d:78:ad:66:80:80:4f:89:e6:fe:90:60:ed:ad:
                    c3:89:4d:b6:8c:e5:ca:f7:b0:30:06:31:be:3e:02:
                    bd:8e:28:32:4b:09:0b:27:0a:eb:7d:30:36:16:a6:
                    a0:e6:46:05:bd:70:ae:ac:ba:3b:67:27:08:49:27:
                    1b:35:25:9e:df:72:10:59:bc:bf:48:a5:3a:48:67:
                    36:6e:4a:65:c8:dc:ac:5d:9c:47:74:e4:28:04:ed:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:2D:A6:00:0D:32:D3:7F:B8:EB:F1:3C:B2:D7:0C:A4:59:C2:B2
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:26:44:e7:a5:6e:a5:94:91:21:35:e0:46:cb:01:b8:42:89:
         fd:ce:b4:18:82:44:bc:f5:0b:c8:43:d3:e3:94:77:c7:1e:ee:
         30:fc:f7:b0:41:49:d5:8a:f7:58:09:30:f6:0a:d5:32:04:16:
         95:d3:02:fb:ba:be:70:4d:c3:38:a5:46:5a:86:94:a0:01:70:
         af:55:86:ce:f5:ac:61:0f:27:be:ee:cf:f4:1b:1c:1f:ee:73:
         fe:6c:25:54:3f:73:46:15:06:fd:e9:db:46:5f:a4:ec:04:a7:
         d5:0c:81:1e:4e:3d:10:f2:8f:0b:c3:a4:34:78:80:36:3e:72:
         4e:29:5c:02:18:3b:2b:c6:08:03:5e:22:1f:44:d8:36:21:54:
         d2:5b:86:4b:5a:f0:3e:87:e0:1d:c5:73:71:f5:55:06:d5:98:
         a7:7b:68:9b:02:80:2f:6d:43:d4:aa:bc:d1:36:64:04:68:30:
         ad:c0:e3:b6:17:fc:b1:df:ad:86:53:82:15:12:d1:61:ea:6d:
         4b:ee:5d:70:85:dc:23:98:d0:d3:44:c7:8a:3d:10:2d:a5:81:
         f6:09:88:29:71:e1:b6:33:55:6b:0a:5d:4e:cf:17:91:d1:dc:
         55:da:6f:63:8c:61:9b:1c:b7:db:47:81:ea:c6:79:1e:58:ef:
         ed:9d:9d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:12:10 2025 by rpki-client