Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
File:                     XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json)
Hash identifier:          CJZbLZbTILc+r5XSmb8/fgOBg5dZtB/lgJD99K+jaDw=
Subject key identifier:   F9:1A:AF:B4:51:C9:27:99:5D:AA:72:62:51:AA:68:93:84:0E:EE:62
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Certificate issuer:       /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
Manifest number:          0204
Signing time:             Wed 23 Jul 2025 02:41:55 +0000
Manifest this update:     Wed 23 Jul 2025 02:41:54 +0000
Manifest next update:     Wed 30 Jul 2025 02:41:54 +0000
Files and hashes:         1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: DgVJtKoo3ShSZiG2kdRrB81wHEPTvPMsRxrAxq3fdDQ=)
                          2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: bPBsCe6a2VFWcNMWeHmOx+7VTXSQy1aeyYkZxcsxaxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
                          rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 02:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
        Validity
            Not Before: Jul 23 02:41:54 2025 GMT
            Not After : Jul 30 02:41:54 2025 GMT
        Subject: CN=68804bf3-0b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:50:d1:21:4c:f7:8c:9e:4d:e3:1f:ff:09:
                    19:63:29:b8:4f:e1:5f:d9:99:77:7c:04:8b:40:d6:
                    52:0c:96:8c:4a:59:10:be:db:d0:e7:97:72:29:e8:
                    7d:e0:15:c6:f2:3e:67:c2:df:6a:12:6b:e8:3d:55:
                    5b:84:30:14:ae:99:24:b1:76:a0:81:06:d0:8d:9d:
                    3f:41:77:2a:bc:94:d5:79:ff:eb:36:72:52:2a:91:
                    b9:d2:d4:a1:cd:70:f2:e6:3c:37:e2:7a:b8:3b:9b:
                    e8:e5:dd:35:0e:52:f7:5f:0c:8f:91:31:38:c5:a8:
                    11:2e:01:7d:30:1d:5e:1d:0d:b7:0a:78:70:1f:64:
                    e7:cf:27:b5:91:2c:25:23:ee:e8:52:c6:20:fe:1f:
                    0d:a9:46:0e:c1:16:79:d4:7c:65:13:6c:75:e0:60:
                    06:2a:eb:f4:d0:71:92:4b:10:7c:34:fc:2e:35:25:
                    98:db:54:3f:48:95:ee:17:b8:bd:0a:e9:30:1a:73:
                    47:fc:48:d1:55:5a:0c:fa:18:42:05:fb:49:7c:d1:
                    a9:89:da:59:c7:8b:49:90:3d:9a:81:2c:54:d3:fc:
                    40:cd:d6:08:e7:34:59:48:b4:6b:04:92:0b:35:fa:
                    c3:f8:40:fb:31:f3:91:a2:c4:1d:36:3c:f8:1e:83:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:AF:B4:51:C9:27:99:5D:AA:72:62:51:AA:68:93:84:0E:EE:62
            X509v3 Authority Key Identifier:
                keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:30:80:dc:5d:6b:11:0e:f9:dc:27:c3:94:95:2f:3c:5e:c7:
         7c:97:36:d0:e4:a1:d1:c7:ed:d9:67:1c:40:fa:68:c8:87:f0:
         39:fa:89:41:0e:ee:1a:3c:a6:b6:9a:14:8c:6c:25:23:32:48:
         94:b2:8a:29:7b:ed:ac:bb:97:d9:2a:ed:c1:7b:04:92:27:be:
         b1:e7:60:09:2d:cb:1a:eb:56:8a:8c:f6:6d:da:4e:37:29:82:
         4f:43:28:ee:ec:b1:d3:ed:f2:6b:6a:d1:e2:c8:ad:4b:7c:37:
         c1:3d:8a:c1:b7:fb:ad:ed:20:d8:df:01:a3:97:59:8b:0c:cd:
         4e:e6:b4:a1:32:ed:4e:a3:98:fa:63:b4:99:af:47:fe:c9:08:
         55:ae:69:a4:d5:3a:e2:f4:a3:af:d9:6b:e7:f6:a8:a9:02:5b:
         74:22:1f:29:24:28:d9:cd:ff:38:1b:d0:40:9e:ee:83:4b:59:
         93:51:da:c4:45:f1:8f:63:3f:a0:ac:cc:a3:2e:f9:e4:31:c8:
         89:bf:be:b2:d6:40:07:ff:cf:56:d3:19:bd:23:48:0b:57:88:
         9a:1c:e9:90:a3:30:68:88:e5:ed:14:dd:ba:05:3f:a1:66:c4:
         22:54:01:bf:68:86:ec:fc:b8:e2:82:c4:0d:c9:08:1b:b1:6c:
         47:41:15:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:15:28 2025 by rpki-client