Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File:                     F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier:          kNdFbR90VesA/l+NZYo3nBEpXRqbcbMuz4lF625Yepw=
Subject key identifier:   F1:96:AF:5A:47:DA:04:CA:81:4D:20:85:94:DF:53:4D:7B:FB:F8:94
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       07CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number:          07C0
Signing time:             Wed 04 Jun 2025 21:02:36 +0000
Manifest this update:     Wed 04 Jun 2025 21:02:35 +0000
Manifest next update:     Wed 11 Jun 2025 21:02:35 +0000
Files and hashes:         1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: FwA3a2zmihSZvOjBL3OwfDQhQGkl+haiSt7+djR5EwU=)
                          2: 8D38DE3C2FED11ECB35A414FC4F9AE02.roa (hash: 4nNxlXf6o0nnD5I2xWyRCuAKUzO3zgq8UO0w+zr/898=)
                          3: 8E7B872C2FED11ECB35A414FC4F9AE02.roa (hash: OlQKH7ACIVrHGtlUAnuv3tHbt5ORT3G0pc9ERA6ytzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 21:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: Jun  4 21:02:35 2025 GMT
            Not After : Jun 11 21:02:35 2025 GMT
        Subject: CN=6840b46b-7de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:c7:6f:89:ae:46:30:29:2c:d9:4b:22:a1:
                    cc:14:c8:b1:e1:ce:9d:d5:5c:f8:99:4e:79:e6:73:
                    4c:da:35:e8:b8:45:a0:5c:de:61:6f:1c:ea:6d:a9:
                    a8:6f:22:ba:93:aa:15:4e:27:09:6b:d9:8e:9d:9c:
                    25:99:e6:3e:d2:f7:f1:8f:9a:ea:8f:7b:ed:99:b7:
                    00:a8:3b:3e:f4:67:f5:7e:39:ac:3e:fb:23:19:cc:
                    3a:af:cf:a3:72:e0:42:b5:04:4f:bf:8f:2c:44:b0:
                    cb:99:b5:5b:bc:ba:d4:21:23:58:08:48:90:ee:2c:
                    dc:d3:8b:3c:52:c3:89:6a:a4:25:13:aa:12:ad:e7:
                    bb:04:33:cf:4b:74:9e:85:bf:ad:0f:da:6f:67:c1:
                    79:cf:4c:5d:73:48:3f:2c:7a:db:dd:2e:e4:15:92:
                    d4:99:2d:8a:ec:0b:7d:89:23:c9:84:65:2c:1f:db:
                    2e:8e:88:01:d0:0a:23:5f:e1:bb:df:04:cb:c1:3c:
                    85:bb:64:63:f5:63:7c:95:09:40:71:4e:0f:30:6e:
                    9d:bc:cc:9f:ef:34:03:24:87:68:94:38:1a:00:08:
                    7e:96:19:71:23:44:f5:27:ca:a3:f2:24:8a:f0:4e:
                    8a:5b:a1:df:c7:95:84:01:2f:95:3c:1f:fc:5f:51:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:AF:5A:47:DA:04:CA:81:4D:20:85:94:DF:53:4D:7B:FB:F8:94
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:d2:0d:b8:89:3b:be:a1:58:5d:bc:1e:ea:df:8d:6c:7d:
         e8:04:51:8c:45:46:fe:06:78:b9:b8:8a:bc:45:2f:de:1b:60:
         77:6a:b7:db:f8:bd:56:0f:a0:72:01:7f:a1:78:59:ad:2d:25:
         4e:99:09:48:60:a6:ee:ae:f1:01:c3:ed:d9:a8:2d:61:fe:0a:
         3c:c5:10:4a:7d:e5:41:4d:47:1b:c6:2e:e9:93:50:72:93:35:
         78:df:e1:9d:e8:ac:64:71:a5:95:c3:09:f2:9a:64:15:89:c8:
         d8:2a:9b:56:e2:6b:2c:6b:93:2e:87:60:e4:45:2d:95:32:3e:
         7e:41:d0:ac:3b:1c:97:6c:e1:b4:7e:a8:8e:b6:7b:52:91:f8:
         19:88:81:83:23:6c:ab:c2:3b:e2:88:4c:67:88:49:36:e9:1d:
         34:cb:42:43:d9:78:53:c2:90:57:0a:3b:1b:5c:66:28:fd:dc:
         d4:ff:52:60:9f:e5:da:59:a3:38:2e:ff:8c:7f:29:c4:89:61:
         ec:b6:db:38:e5:a4:7e:26:f3:e5:90:ac:65:ca:5e:8d:0d:3c:
         bf:25:a3:46:0a:e8:fe:8d:2d:fc:3f:44:96:4f:04:1e:3b:be:
         a9:ad:23:5b:93:b2:3d:31:77:7a:a5:c3:de:b8:7b:16:9d:97:
         77:72:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:11:08 2025 by rpki-client