Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft
File:                     m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json)
Hash identifier:          zq+HRa6CLdWYqQ7fSg8UhJdSI43R1y31ffHXl76At9s=
Subject key identifier:   A2:13:1E:67:FC:27:6F:D6:7E:24:46:47:93:75:5B:4F:88:7B:BD:16
Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19
Certificate issuer:       /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft
Manifest number:          07
Signing time:             Sat 05 Jul 2025 08:30:09 +0000
Manifest this update:     Sat 05 Jul 2025 08:30:09 +0000
Manifest next update:     Sat 12 Jul 2025 08:30:09 +0000
Files and hashes:         1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: sD5NQFh1hrTUHcrMYb7X6ChvO2AAM7nvXo6NhpbuvQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl
                          rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Jul 2025 08:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19
        Validity
            Not Before: Jul  5 08:30:09 2025 GMT
            Not After : Jul 12 08:30:09 2025 GMT
        Subject: CN=6868e291-7605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:2d:79:68:5b:0e:59:44:4b:bd:95:d5:dc:
                    61:b3:84:12:2b:38:08:3d:26:96:f5:18:a0:25:0a:
                    23:97:83:cd:12:ea:bf:42:87:f2:c3:41:6d:61:8c:
                    43:9b:9a:57:95:3f:64:dc:2b:7d:db:ff:31:4d:dd:
                    dd:59:8b:d9:2e:4e:fe:a7:f0:21:31:b9:10:71:9d:
                    c4:90:69:36:f8:38:91:22:96:4f:9f:14:e9:9b:d6:
                    68:39:68:1d:d3:78:1a:ab:56:35:04:94:dc:04:f7:
                    5f:78:e7:af:ee:50:cc:b7:f4:20:fe:89:df:b8:5c:
                    a8:00:f2:bf:c1:95:93:3d:b2:fd:13:27:46:c3:27:
                    98:ab:87:99:34:7e:71:8f:ae:d8:6c:e4:28:1c:77:
                    76:5d:16:ea:33:1f:7d:8f:fc:5e:89:b2:8a:d7:eb:
                    47:67:3e:11:f3:d7:ad:a1:99:52:d3:b3:82:36:4e:
                    a8:69:2a:62:42:1f:87:a8:3c:56:11:c2:70:72:57:
                    aa:61:9f:5f:5b:dc:37:d1:e0:a2:65:e0:c6:45:49:
                    f5:5d:79:56:0b:0d:7f:09:84:ca:9f:ae:af:f9:82:
                    50:93:e8:5d:49:e2:c0:73:9e:c9:8d:10:06:f0:ec:
                    b8:41:6b:bd:ab:80:41:f6:72:75:1a:88:7e:ca:27:
                    15:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:13:1E:67:FC:27:6F:D6:7E:24:46:47:93:75:5B:4F:88:7B:BD:16
            X509v3 Authority Key Identifier:
                keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ad:ab:54:e9:fc:1f:b8:3b:37:cf:64:ba:5c:7d:11:fc:f9:
         5f:c7:ea:e9:d8:f4:b4:ac:52:c1:f4:80:d3:ec:75:74:f1:f6:
         c7:aa:19:f8:0b:4f:cd:f7:be:2f:f0:ff:bb:bf:c6:8e:20:32:
         39:8f:97:5d:3e:68:b2:59:a4:de:2d:00:45:f3:4a:00:e6:f1:
         14:e4:e3:47:f1:b5:51:da:46:04:f8:f0:12:d2:ba:82:66:28:
         10:b9:50:ca:a1:e5:25:fd:b8:c9:ad:8e:5c:4e:e6:29:40:a1:
         dd:96:6d:19:f0:d5:2f:07:25:5c:69:81:83:81:d3:5d:d0:13:
         64:90:0a:da:e0:4d:fc:55:90:54:c8:77:9e:61:15:12:bb:cf:
         27:21:c4:27:9e:e5:b3:31:07:a9:de:6c:78:20:dd:4e:ea:b3:
         68:13:90:0f:51:42:01:03:08:0c:75:0b:d8:21:51:7d:fb:21:
         e4:60:55:fc:4c:92:87:0a:3b:d1:a7:f7:cb:10:c0:53:5f:8a:
         a2:c4:90:83:df:34:7f:a6:49:5e:d7:50:b4:30:a1:2a:58:51:
         f2:63:65:dd:14:f7:fd:71:96:e6:ae:04:82:34:40:45:88:a2:
         cc:18:e8:5e:7e:5c:81:45:ce:16:cd:3c:61:36:b3:ce:d9:fa:
         05:29:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 09:33:20 2025 by rpki-client