Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
File:                     7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json)
Hash identifier:          6p8oED7Rb74W5AvQYknYffyeW62rztU9QtvNeYcZVG4=
Subject key identifier:   08:46:FC:EC:B4:E7:13:D6:FB:7D:C0:87:E1:0C:C3:1C:24:B2:BA:91
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Certificate issuer:       /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial:       078B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
Manifest number:          0782
Signing time:             Fri 30 May 2025 21:40:25 +0000
Manifest this update:     Fri 30 May 2025 21:40:24 +0000
Manifest next update:     Fri 06 Jun 2025 21:40:24 +0000
Files and hashes:         1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: Moibc95NfNICiU5AwEQB6r0Q5AwVUIkgvBq8NCDsIDo=)
                          2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: 9lbHf1cHckf8dUxoW20HZsn96REnlD7CWohZQ19csPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
                          rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
        Validity
            Not Before: May 30 21:40:24 2025 GMT
            Not After : Jun  6 21:40:24 2025 GMT
        Subject: CN=683a25c9-f384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:b7:7f:2f:9f:e5:3b:2c:e3:67:0d:04:86:
                    66:a3:08:bb:c1:64:2f:33:58:28:f5:b0:2a:0d:16:
                    de:29:96:b3:59:a8:b9:d2:b2:08:86:4c:25:ed:88:
                    21:59:b2:5a:7c:cd:f7:b6:b2:b1:6e:55:3a:e2:98:
                    a8:ba:83:c5:59:54:d2:4c:19:5b:d8:79:63:84:b9:
                    f9:29:d4:4f:53:03:4d:6b:d9:67:af:8c:3b:68:ba:
                    de:63:63:91:73:2d:2f:e7:44:3f:74:d6:96:d6:f6:
                    9a:7f:51:33:50:d6:ce:03:5a:cc:b0:cd:66:95:6d:
                    d4:a2:ec:32:ae:6d:e6:5c:70:61:dd:88:8d:db:d6:
                    e6:31:07:48:df:f7:47:93:72:7b:3c:b1:5c:7e:c7:
                    54:f1:50:3d:81:6c:f2:49:54:8a:9e:20:b4:4e:d4:
                    94:bd:42:9b:a6:89:7b:16:40:54:99:46:ee:a9:62:
                    d7:90:82:77:0d:65:12:28:d2:2a:75:01:e1:b3:91:
                    63:b0:0b:65:0a:a6:4d:70:3d:d8:79:14:e9:63:80:
                    ee:92:ee:db:a2:29:26:ba:ad:73:d0:9d:8c:d4:e6:
                    92:b4:6c:57:b1:ed:0f:1e:9b:2e:67:68:77:d7:cf:
                    23:80:78:b9:44:9d:aa:d7:c6:9e:94:7d:ad:d1:ff:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:46:FC:EC:B4:E7:13:D6:FB:7D:C0:87:E1:0C:C3:1C:24:B2:BA:91
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f9:10:96:f6:12:da:6f:b7:0e:51:ad:f8:f7:12:6c:a6:59:
         22:55:b6:4c:07:7a:b3:95:36:e8:e1:b6:13:4b:9d:bc:2b:37:
         32:52:f1:33:dd:4d:9a:cd:b3:94:30:56:ae:58:da:1e:e1:90:
         4b:ed:80:3e:f4:e0:a3:98:ba:d3:99:5f:fb:98:84:a8:ed:a9:
         22:2f:cb:f9:37:ab:be:53:46:e5:c9:98:c9:d4:85:86:33:c1:
         c9:ef:35:6b:c5:79:16:d0:f2:37:e9:d9:68:fa:76:9b:95:b1:
         91:3e:6c:db:6b:5b:d3:50:0e:3e:56:6d:73:bb:4d:63:5b:d6:
         c8:94:be:ea:c9:dd:10:17:99:39:04:4b:0b:30:a9:4e:4a:f1:
         36:9f:47:8f:0c:b1:48:87:5c:a8:e1:37:4c:c5:5e:6d:7e:cc:
         b8:70:79:88:c7:a8:98:e1:90:ca:70:7e:70:8a:e0:ef:e8:57:
         70:8f:ae:7b:42:b4:21:d6:58:b1:b5:1e:22:dd:e1:c0:51:26:
         6a:9f:98:91:53:bb:57:0d:0a:77:5c:85:4c:97:4b:5e:8f:5d:
         74:4d:ea:7d:77:e9:a3:c2:da:a6:49:d6:ee:46:fa:b1:21:64:
         85:f6:a9:f5:4c:34:bf:6a:21:5a:62:c8:61:bc:01:3b:f2:cf:
         43:d3:67:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 14:59:33 2025 by rpki-client