Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
File:                     7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json)
Hash identifier:          mt/tCE+edh6XMJzgQTQMwRcIDJo1Xczump0GuspYi4w=
Subject key identifier:   10:5D:DE:A7:93:5A:94:17:48:0E:37:DA:40:E8:F6:C0:3F:C2:7E:E1
Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
Certificate issuer:       /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
Manifest number:          010C
Signing time:             Sat 19 Jul 2025 05:11:21 +0000
Manifest this update:     Sat 19 Jul 2025 05:11:20 +0000
Manifest next update:     Sat 26 Jul 2025 05:11:20 +0000
Files and hashes:         1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: fuO4dCDL8uIuPSd3lx0lm/+FSvo0HN3IZTy9TYsnnt0=)
                          2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=)
                          3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
                          rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
        Validity
            Not Before: Jul 19 05:11:20 2025 GMT
            Not After : Jul 26 05:11:20 2025 GMT
        Subject: CN=687b28f9-e2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:56:cd:58:d8:f4:fb:3f:3d:ae:68:a7:e7:
                    70:49:cd:1d:82:67:34:de:a0:e7:07:99:9e:c5:de:
                    04:41:32:6c:9b:3f:44:b5:25:7c:d9:72:3e:fa:49:
                    b3:3c:dc:69:b3:6a:8c:1a:b8:48:c0:56:d5:8e:76:
                    58:06:c5:6e:57:bc:47:ba:5b:6f:42:14:87:0d:de:
                    3d:3b:8a:2d:12:16:60:24:83:ca:ad:b6:a5:fe:5b:
                    9a:27:1b:96:23:db:74:3c:d4:46:f7:73:96:24:13:
                    72:1a:67:c2:cc:83:e4:2f:bb:f7:30:fb:97:23:71:
                    2f:e0:7b:da:66:e3:01:9d:f0:19:73:03:5d:30:ab:
                    86:e1:91:6c:91:02:ed:12:59:01:f9:a8:81:df:86:
                    f0:49:ff:71:18:65:eb:ac:80:3a:7d:74:41:17:ed:
                    75:3d:26:a2:e9:17:46:ea:9a:f5:41:6d:b2:ad:0f:
                    58:d4:1a:40:2a:8f:f8:bf:27:db:00:56:d7:c3:ba:
                    96:30:90:55:26:f1:90:5c:c1:22:77:56:43:cd:e6:
                    11:93:e2:7f:f7:5e:2b:8d:6e:eb:30:e6:69:d8:66:
                    3d:08:69:c0:d4:1f:d3:b3:40:3f:40:f2:99:9d:d3:
                    1c:16:9e:a1:e1:1f:ff:fe:c6:f4:80:c9:97:9a:35:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:DE:A7:93:5A:94:17:48:0E:37:DA:40:E8:F6:C0:3F:C2:7E:E1
            X509v3 Authority Key Identifier:
                keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:d8:95:47:90:e8:6c:ac:c9:69:ed:03:5f:51:86:31:ab:
         fe:7c:0e:87:2e:1b:b8:bf:f3:a7:05:99:52:a5:65:9c:a8:75:
         91:72:88:6a:12:da:be:45:64:de:f4:c2:c3:d3:3f:2b:4d:41:
         9c:58:46:bc:a6:14:e3:87:d2:ff:b2:2b:05:4c:d7:cf:0a:65:
         cb:4b:e3:49:93:39:99:57:57:53:cb:41:f9:47:64:4a:7b:b1:
         16:1e:92:b3:17:da:f7:c5:69:fd:9a:5a:dd:ca:59:b6:42:08:
         e2:c7:f0:04:12:e8:7b:fe:6f:09:40:a9:59:df:e1:76:02:6f:
         bf:4f:df:09:95:67:3f:c2:d7:c6:a5:89:58:d0:bf:91:e0:1c:
         66:d2:8d:d7:ed:bd:5c:fa:d6:a3:23:1c:a3:9e:2e:2a:48:d5:
         3f:8a:5c:80:cb:cf:57:9f:b8:8d:25:2e:47:f4:3d:f8:a8:f2:
         39:08:48:80:eb:88:4b:f2:e0:65:9e:16:6d:45:4b:11:df:69:
         1f:a3:ee:e2:ac:7e:2d:64:54:89:32:cb:df:7f:0f:2e:df:35:
         fa:cb:2e:d5:f1:9c:e2:97:58:ed:a3:f5:46:2d:83:47:6c:b8:
         d6:d2:e9:4c:9d:c1:32:c1:41:5c:a5:c7:94:f5:8b:5d:94:d6:
         68:9b:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:39 2025 by rpki-client