Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
File:                     r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json)
Hash identifier:          YOxgBWzA4qSUd01m7ZSROiejm9iLWxcpza/eXLr77Gs=
Subject key identifier:   04:1F:1B:92:B6:C8:5E:7D:A1:E4:0D:3C:80:35:DB:62:E7:2A:05:62
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Certificate issuer:       /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial:       14B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
Manifest number:          1496
Signing time:             Mon 08 Sep 2025 16:54:49 +0000
Manifest this update:     Mon 08 Sep 2025 16:54:48 +0000
Manifest next update:     Mon 15 Sep 2025 16:54:48 +0000
Files and hashes:         1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: TW+7lw+ycy4EUwtMmVTpUJBKTWXMvAdUdSSVROsl4Ek=)
                          2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=)
                          3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=)
                          4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 16:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5300 (0x14b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
        Validity
            Not Before: Sep  8 16:54:48 2025 GMT
            Not After : Sep 15 16:54:48 2025 GMT
        Subject: CN=68bf0a59-fc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:1e:1e:26:16:36:f3:61:07:7d:83:07:c5:
                    2e:70:57:6f:59:d6:2e:53:49:5d:1d:1f:ea:0a:8c:
                    d2:2e:22:05:37:57:78:fd:aa:e5:a1:47:6a:ea:f5:
                    40:3e:67:72:44:71:4a:4d:c7:e2:e2:cf:1c:94:ff:
                    f1:46:5e:91:b6:8b:84:67:11:59:af:a7:8b:b0:d9:
                    5e:4c:4e:33:af:ba:b4:e8:9c:d2:c9:c8:fd:da:52:
                    d9:74:fd:82:56:70:a9:8a:c0:6b:ed:fd:8f:5e:c1:
                    37:1d:89:b4:b4:8a:fa:65:1d:ee:1d:28:2f:f3:15:
                    85:4b:b7:7e:a5:c9:e1:89:96:e9:da:e1:4f:6c:92:
                    64:ab:3f:4d:ab:8c:f3:38:0f:23:18:a4:c8:55:32:
                    38:a6:66:7e:6f:45:db:fc:f6:d0:89:03:a5:8c:da:
                    15:fb:8f:db:02:e0:0f:11:26:5a:bd:44:0f:e7:2c:
                    9a:3f:a3:d5:26:c5:d6:ab:19:51:fb:9a:c0:66:14:
                    a1:82:57:ff:65:4b:37:72:1a:dd:68:8f:d1:70:5e:
                    16:a5:69:78:de:2b:9d:0c:b4:99:7c:87:a1:8a:e9:
                    6b:6c:ed:7b:9a:7d:fe:00:c1:10:82:c8:60:4f:ee:
                    37:69:a0:51:07:90:f0:43:24:4f:c2:05:06:08:d2:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1F:1B:92:B6:C8:5E:7D:A1:E4:0D:3C:80:35:DB:62:E7:2A:05:62
            X509v3 Authority Key Identifier:
                keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:2d:a9:e9:ec:69:fd:28:c7:95:08:0d:8c:34:63:e9:36:
         6f:69:f2:83:5a:d0:34:1d:78:a0:a3:6a:9c:55:64:4e:84:4c:
         70:6c:0a:7b:cc:b9:db:98:61:2e:31:41:b6:bb:6d:b0:41:c3:
         05:35:a0:2b:a9:32:13:01:f5:bc:a8:94:30:3e:3b:34:4d:e2:
         bf:7e:06:d3:80:b9:aa:05:a8:e9:79:ce:c9:a1:a4:12:12:c2:
         d4:e8:64:a2:ec:39:1b:b0:33:cc:90:fd:29:a8:e6:4c:af:cb:
         0d:f9:c4:c6:8a:e4:f4:01:e6:7f:7c:0f:3b:63:17:80:77:7a:
         25:b7:e4:10:d7:4a:02:be:92:f6:03:fb:d5:8b:d9:ee:63:69:
         1f:d6:ab:39:67:97:67:31:4c:d3:3f:fb:cb:05:57:32:ad:e4:
         9f:18:ea:b8:e6:55:a9:08:27:a8:f0:4a:9b:17:66:3d:47:6e:
         25:69:80:b3:e5:37:dc:b2:94:78:93:d9:e7:25:af:7b:cc:f0:
         a2:c1:45:29:9c:e6:86:13:e5:76:1e:25:47:3c:80:d0:44:46:
         58:96:c3:d8:04:2e:66:35:cc:55:b6:8f:d6:a5:2c:dd:cc:ea:
         10:8b:d0:b5:dd:36:d3:6f:7b:71:93:29:d9:e6:af:e0:1f:f8:
         53:5e:6b:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC
MUQwNkUyRTMwHhcNMjUwOTA4MTY1NDQ4WhcNMjUwOTE1MTY1NDQ4WjAYMRYwFAYD
VQQDEw02OGJmMGE1OS1mYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmFMeHiYWNvNhB32DB8UucFdvWdYuU0ldHR/qCozSLiIFN1d4/arloUdq6vVA
PmdyRHFKTcfi4s8clP/xRl6RtouEZxFZr6eLsNleTE4zr7q06JzSycj92lLZdP2C
VnCpisBr7f2PXsE3HYm0tIr6ZR3uHSgv8xWFS7d+pcnhiZbp2uFPbJJkqz9Nq4zz
OA8jGKTIVTI4pmZ+b0Xb/PbQiQOljNoV+4/bAuAPESZavUQP5yyaP6PVJsXWqxlR
+5rAZhShglf/ZUs3chrdaI/RcF4WpWl43iudDLSZfIehiulrbO17mn3+AMEQgshg
T+43aaBRB5DwQyRPwgUGCNIKmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQfG5K2
yF59oeQNPIA122LnKgViMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx
RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG
dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMoi2p6exp/SjHlQgNjDRj6TZvafKDWtA0HXigo2qcVWROhExwbAp7
zLnbmGEuMUG2u22wQcMFNaArqTITAfW8qJQwPjs0TeK/fgbTgLmqBajpec7JoaQS
EsLU6GSi7DkbsDPMkP0pqOZMr8sN+cTGiuT0AeZ/fA87YxeAd3olt+QQ10oCvpL2
A/vVi9nuY2kf1qs5Z5dnMUzTP/vLBVcyreSfGOq45lWpCCeo8EqbF2Y9R24laYCz
5TfcspR4k9nnJa97zPCiwUUpnOaGE+V2HiVHPIDQREZYlsPYBC5mNcxVto/WpSzd
zOoQi9C13TbTb3txkynZ5q/gH/hTXmtH
-----END CERTIFICATE-----
Generated at Mon Sep 8 19:11:05 2025 by rpki-client