Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
File:                     XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json)
Hash identifier:          x7Bh2VJFuPlPD/cXgPZEqSKxXNKIE7hpylTLGibCPak=
Subject key identifier:   45:67:9B:9C:05:93:19:65:77:07:E8:15:46:1A:CC:62:19:B8:77:1C
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Certificate issuer:       /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial:       0809
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
Manifest number:          0803
Signing time:             Tue 22 Jul 2025 21:09:31 +0000
Manifest this update:     Tue 22 Jul 2025 21:09:30 +0000
Manifest next update:     Tue 29 Jul 2025 21:09:30 +0000
Files and hashes:         1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: O8GPZ1q4wxA42A8p7OhyKkEpadgcb2ypsX6U5xUMMyo=)
                          2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: 8MctpWGtN4TB9CaLOxK2lVRFp6WdGzpjql1y9Hz4Ctk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
                          rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 21:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
        Validity
            Not Before: Jul 22 21:09:30 2025 GMT
            Not After : Jul 29 21:09:30 2025 GMT
        Subject: CN=687ffe0b-882e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:a5:43:61:75:9a:8f:3e:f6:66:f0:f9:97:
                    bd:30:cd:bd:0f:20:d8:05:52:11:fd:8f:0d:7f:0b:
                    8d:af:dd:de:ab:5b:20:b5:df:20:1d:56:a6:6f:5a:
                    cc:02:e3:fe:f9:6d:78:01:4d:d2:a0:a0:ba:4a:22:
                    64:73:0e:b8:ad:20:b9:36:3a:94:58:70:a8:e2:a2:
                    f4:b9:3a:26:28:c8:af:66:d7:41:7f:64:e6:f6:bf:
                    59:bc:ae:20:87:cf:f5:b3:88:dc:f0:53:1f:cd:cf:
                    78:a3:45:48:24:a7:46:4a:f8:ef:c3:df:ad:d5:6c:
                    9e:e7:62:a3:2c:08:01:7f:1a:29:12:9a:26:ce:58:
                    26:8c:5e:94:81:e3:e2:5a:9a:01:f4:be:22:04:8a:
                    52:8e:71:01:03:a5:8c:c7:c7:f8:23:a4:79:34:2b:
                    93:c5:a5:06:f9:9f:2a:80:84:5b:57:1f:86:08:fc:
                    58:00:15:fb:4b:34:88:70:60:5e:b3:64:db:f2:58:
                    99:38:0d:24:92:7f:1b:4d:c2:13:61:fb:37:50:3c:
                    6e:76:30:70:1d:7f:2f:32:5f:75:ba:ed:ca:33:ef:
                    1b:72:be:e6:3b:0c:25:3d:4d:d4:0b:11:c7:6c:8f:
                    f3:fb:3f:80:08:4e:46:f5:4d:dd:d0:44:39:bc:e9:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:67:9B:9C:05:93:19:65:77:07:E8:15:46:1A:CC:62:19:B8:77:1C
            X509v3 Authority Key Identifier:
                keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:2a:1e:95:21:90:fa:58:ce:ef:83:27:c7:e7:74:dc:7a:4d:
         71:7a:3e:0f:bf:e7:05:73:45:8e:6e:10:7c:dd:2d:b3:15:75:
         6c:ee:44:47:ac:50:5a:00:17:20:3f:7c:3d:11:f1:55:8d:6e:
         b8:f3:4e:64:59:fb:4c:92:49:f7:3d:59:d1:90:2b:e7:2a:2e:
         50:d8:30:7f:c8:b7:6a:24:a4:1b:04:97:d4:3f:46:62:24:86:
         36:6d:3d:ac:3f:dc:53:30:f8:25:12:d1:d7:54:42:47:e1:1d:
         78:eb:e0:31:6f:62:14:47:b2:63:0d:48:99:d3:2d:52:ff:a2:
         4d:41:85:e7:a7:71:5d:85:d2:f8:a2:6f:3f:be:92:7e:f1:c2:
         5e:1f:a9:f5:bc:ac:5c:a5:06:31:26:9f:dd:69:da:cc:62:03:
         c8:84:8c:d3:e3:ea:24:d5:63:4a:28:7e:d1:91:4f:68:7b:b2:
         65:92:b3:e2:3f:e4:66:f7:51:12:69:d5:21:72:12:c7:3b:6a:
         80:d1:11:e6:fd:a8:4f:ed:6e:23:74:32:de:b5:02:c4:52:3a:
         b6:be:6e:4d:63:79:d0:e0:bc:54:f2:cd:0d:1e:80:c3:f1:36:
         9a:6c:15:56:c6:0a:6d:23:81:20:17:08:07:bc:45:e7:41:14:
         44:5a:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:38 2025 by rpki-client