Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
File:                     XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json)
Hash identifier:          iUSlDai04eeAOGmHbF2pmnCSsK/Xsvrj3ov4bHmYnbM=
Subject key identifier:   07:1F:2A:B6:18:3C:F4:8D:05:15:63:CF:A5:3A:96:06:63:A8:7B:5D
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Certificate issuer:       /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
Manifest number:          0203
Signing time:             Mon 21 Jul 2025 02:31:39 +0000
Manifest this update:     Mon 21 Jul 2025 02:31:38 +0000
Manifest next update:     Mon 28 Jul 2025 02:31:38 +0000
Files and hashes:         1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: g9kIYcmr9arp62IiJRq+HGgA777+HhKxnRuQk8x5FBY=)
                          2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: bPBsCe6a2VFWcNMWeHmOx+7VTXSQy1aeyYkZxcsxaxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
                          rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 02:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
        Validity
            Not Before: Jul 21 02:31:38 2025 GMT
            Not After : Jul 28 02:31:38 2025 GMT
        Subject: CN=687da68b-19cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dd:b0:8f:ad:5a:65:de:5a:18:a3:13:c6:3a:
                    71:aa:2b:83:d0:7e:73:7e:94:3d:a2:3f:38:07:78:
                    51:a4:e5:a4:ed:8f:93:ec:4c:63:4d:09:05:49:9f:
                    c9:02:11:4b:0a:23:6d:a6:c6:42:08:13:60:09:52:
                    ca:e3:79:74:b2:68:cc:ad:9a:f2:b5:2e:fa:2a:dd:
                    7a:32:96:31:93:2a:7a:ae:ec:d0:8e:04:0f:c5:ab:
                    1d:25:f5:b0:ea:ff:8c:8f:59:f6:f8:3e:b9:b4:7c:
                    a4:21:7b:c3:2a:69:34:e9:b2:d9:41:eb:09:c9:1d:
                    0d:e8:fc:bd:47:26:0e:b4:93:ae:30:f4:e2:45:f2:
                    72:62:82:e0:b4:7f:76:b3:4f:80:f6:1d:2b:8a:31:
                    e1:12:74:99:7e:b1:5b:3e:35:59:dc:99:af:73:f3:
                    02:70:14:a3:8c:7e:72:74:50:53:51:99:c5:46:30:
                    79:70:52:00:1a:4d:0c:70:8c:ff:70:ae:56:2c:eb:
                    f4:ae:ea:13:a9:f8:e7:81:61:2c:5d:14:6f:57:96:
                    eb:ac:ed:f6:7d:4c:3f:6b:c1:4a:22:95:22:da:f5:
                    bf:c6:5f:6b:37:6b:cb:c2:9c:0b:20:9e:b3:0a:52:
                    bf:00:55:2f:06:f6:fc:a3:7a:ec:51:fc:f4:ca:c5:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1F:2A:B6:18:3C:F4:8D:05:15:63:CF:A5:3A:96:06:63:A8:7B:5D
            X509v3 Authority Key Identifier:
                keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:34:2f:45:2e:37:4c:63:a4:cd:7b:08:4a:a3:66:76:c2:9a:
         5c:a2:25:9a:0b:56:e7:23:2e:e9:f6:4d:9b:fb:63:47:1a:30:
         e8:6b:31:08:e0:b1:a7:08:cc:e9:32:bb:4f:be:20:5a:ca:6d:
         50:5c:25:77:7f:62:26:85:3f:34:6c:45:0b:de:5d:31:94:10:
         e6:0b:d9:4a:36:33:be:ea:52:df:44:6d:8c:10:b1:27:2c:bf:
         52:be:28:29:e9:f4:c8:b1:d4:30:1a:98:ed:75:06:fb:1e:21:
         e0:5c:e2:9c:09:80:25:cb:75:98:ce:81:ba:86:e0:24:25:3d:
         67:3c:b5:ef:b0:0e:61:fa:84:15:f0:05:83:0a:f4:4e:5b:a2:
         34:1e:35:e7:69:76:60:6c:d4:b5:ae:fe:78:84:42:2b:10:a3:
         b1:3d:be:29:29:d5:2e:70:ee:65:e5:cb:c8:e0:7e:35:85:a3:
         c1:97:d0:25:0e:6e:e2:54:9b:50:2d:13:cb:f6:c0:b8:0c:18:
         85:83:30:a6:c9:dc:c2:08:27:a2:c3:e9:07:4f:ec:bd:0b:34:
         c4:be:10:d3:aa:da:02:a9:49:4a:b3:03:2f:07:9b:11:95:82:
         2c:0e:cc:b2:e7:8f:44:b1:31:1e:9c:27:15:fa:ff:6f:31:c4:
         cb:d8:4f:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0
RTIyRTk0NDUwHhcNMjUwNzIxMDIzMTM4WhcNMjUwNzI4MDIzMTM4WjAYMRYwFAYD
VQQDEw02ODdkYTY4Yi0xOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2d2wj61aZd5aGKMTxjpxqiuD0H5zfpQ9oj84B3hRpOWk7Y+T7ExjTQkFSZ/J
AhFLCiNtpsZCCBNgCVLK43l0smjMrZrytS76Kt16MpYxkyp6ruzQjgQPxasdJfWw
6v+Mj1n2+D65tHykIXvDKmk06bLZQesJyR0N6Py9RyYOtJOuMPTiRfJyYoLgtH92
s0+A9h0rijHhEnSZfrFbPjVZ3Jmvc/MCcBSjjH5ydFBTUZnFRjB5cFIAGk0McIz/
cK5WLOv0ruoTqfjngWEsXRRvV5brrO32fUw/a8FKIpUi2vW/xl9rN2vLwpwLIJ6z
ClK/AFUvBvb8o3rsUfz0ysWUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcfKrYY
PPSNBRVjz6U6lgZjqHtdMB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2
RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX
RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5NC9FLjdMY6TNewhKo2Z2wppcoiWaC1bnIy7p9k2b+2NHGjDoazEI
4LGnCMzpMrtPviBaym1QXCV3f2ImhT80bEUL3l0xlBDmC9lKNjO+6lLfRG2MELEn
LL9Svigp6fTIsdQwGpjtdQb7HiHgXOKcCYAly3WYzoG6huAkJT1nPLXvsA5h+oQV
8AWDCvROW6I0HjXnaXZgbNS1rv54hEIrEKOxPb4pKdUucO5l5cvI4H41haPBl9Al
Dm7iVJtQLRPL9sC4DBiFgzCmydzCCCeiw+kHT+y9CzTEvhDTqtoCqUlKswMvB5sR
lYIsDsyy549EsTEenCcV+v9vMcTL2E/U
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:22:56 2025 by rpki-client