Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          jJv6MpCN5z1ngMIrV5tJdw32IL4t7ERz/5O0Tzbn48c=
Subject key identifier:   59:97:A5:F3:24:C0:13:CB:D1:DF:FA:15:3D:8D:28:98:48:34:83:3A
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          0208
Signing time:             Mon 15 Sep 2025 02:40:08 +0000
Manifest this update:     Mon 15 Sep 2025 02:40:07 +0000
Manifest next update:     Mon 22 Sep 2025 02:40:07 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: vbvMk5xWeN4ViLKFG/8tUllql4Y1u0V1sW8RqtuloH8=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Sep 2025 02:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Sep 15 02:40:07 2025 GMT
            Not After : Sep 22 02:40:07 2025 GMT
        Subject: CN=68c77c87-a273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:42:fd:9f:59:64:18:fa:b0:7a:27:8d:c9:c6:
                    df:36:6f:1d:a4:45:ab:0c:d7:6a:d0:bc:d8:b4:0b:
                    e4:ea:3f:ec:6b:a5:25:4a:43:8c:81:b1:93:68:4c:
                    c6:15:9b:15:00:55:c1:15:da:d0:f6:cf:69:d0:79:
                    75:ed:6a:63:ee:a8:97:93:76:fb:8d:70:ce:f4:5c:
                    28:92:c0:ee:78:f6:30:b3:2a:88:28:4b:66:3d:2d:
                    e4:50:86:51:4b:bd:5b:0e:3f:9a:d5:92:a2:f8:7e:
                    0a:03:bc:d3:8b:ac:1f:e6:55:25:7d:06:ca:0c:07:
                    f8:2e:77:8c:34:d6:ab:9b:eb:79:01:67:0c:03:b7:
                    b8:cf:11:a6:68:9b:24:6f:b5:f2:4b:b6:41:14:de:
                    50:8c:9f:e0:0e:88:6c:d4:30:d9:aa:c7:54:21:73:
                    9e:b0:83:81:e2:69:78:38:eb:8d:f4:82:2a:ef:3f:
                    3c:0a:c0:56:f8:12:f9:9a:80:26:a2:02:2c:e6:fb:
                    9e:bf:62:54:7f:58:00:61:11:42:1d:0b:13:09:89:
                    fd:0f:b7:54:a3:72:88:39:43:ea:7c:31:ba:9b:d1:
                    a3:ca:b9:8c:63:c1:76:3e:da:6f:09:ab:4e:23:5c:
                    0c:a4:ed:23:1e:74:7f:c7:a9:62:df:35:3b:6a:35:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:A5:F3:24:C0:13:CB:D1:DF:FA:15:3D:8D:28:98:48:34:83:3A
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bf:ec:c0:26:bd:63:36:ae:6c:0c:12:4e:91:2e:85:61:9b:
         34:df:5e:f3:7b:ca:2a:c9:52:55:09:25:87:6e:d8:c4:61:2a:
         ac:93:cf:01:8d:4b:2a:9d:74:78:78:e5:5a:64:c8:76:24:75:
         54:46:a9:26:9d:83:0c:8f:70:5e:44:5d:46:0b:ad:a9:77:64:
         6f:6e:f5:4c:7e:ec:63:14:9d:11:e7:22:41:7f:03:f4:6b:2a:
         b8:ad:b2:9b:fa:2c:57:11:ca:b6:27:11:b1:2c:05:d9:88:34:
         95:7a:7b:ee:c2:b5:c7:2e:42:66:aa:c7:75:9f:c3:23:91:03:
         63:80:1f:c6:82:32:6b:0c:c4:91:da:f9:0f:e7:5c:92:9e:e9:
         0b:10:e1:bf:56:c3:91:f7:7a:fa:2d:18:75:4d:e0:49:be:dd:
         e3:51:c8:60:35:ab:5b:e4:fa:41:73:62:75:00:90:fc:43:8b:
         7c:8a:ec:1d:2a:aa:ad:2f:42:71:a1:d8:5a:b7:33:b1:1c:b6:
         dd:2a:60:61:aa:0f:be:3a:c8:89:70:1a:d0:b0:09:a3:a4:28:
         e9:0c:91:c7:b8:f4:0f:76:af:33:11:32:5e:bc:89:ff:4d:a1:
         56:6a:fd:07:94:81:69:48:06:db:f3:39:ac:83:87:a6:98:40:
         6a:5f:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 23:50:54 2025 by rpki-client