Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
File:                     XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json)
Hash identifier:          UH7Hq3xqySqqxa6YoFZiyc+0z7gwEmaAgUOXsP6+Upo=
Subject key identifier:   4A:8F:79:0C:89:B5:AF:0D:62:55:49:BD:AE:B4:9F:A1:2D:C0:DE:36
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Certificate issuer:       /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
Manifest number:          0804
Signing time:             Thu 24 Jul 2025 21:05:56 +0000
Manifest this update:     Thu 24 Jul 2025 21:05:55 +0000
Manifest next update:     Thu 31 Jul 2025 21:05:55 +0000
Files and hashes:         1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: SxfKaho81qHTpGxQpMNqydcXT/eXJ3LBudSPVmhNOKQ=)
                          2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: 8MctpWGtN4TB9CaLOxK2lVRFp6WdGzpjql1y9Hz4Ctk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
                          rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 21:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
        Validity
            Not Before: Jul 24 21:05:55 2025 GMT
            Not After : Jul 31 21:05:55 2025 GMT
        Subject: CN=6882a034-bb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:ba:57:21:43:cd:21:db:ea:13:8e:6b:69:
                    20:b7:3d:29:cd:a3:cb:a8:3d:6e:d9:55:bc:ba:4c:
                    a7:9e:c7:9c:00:d8:49:52:8c:26:e8:14:68:be:7b:
                    e9:7e:3c:a0:62:5d:12:0d:69:45:18:c7:e1:43:46:
                    ed:2c:db:eb:98:11:58:c1:0a:cb:c9:19:d4:3c:a2:
                    c0:86:36:ee:8a:35:90:1b:3b:8f:80:e1:ed:29:1a:
                    d9:61:af:8c:f5:9e:b3:63:e3:be:ce:7f:d2:2e:48:
                    ce:42:2e:21:32:80:fd:dc:fe:a3:aa:ec:b2:cf:44:
                    c9:75:94:51:fd:fa:b9:7b:20:46:bd:43:65:10:92:
                    3f:53:8a:cf:2e:e1:a2:7e:3a:7e:ff:fd:de:63:eb:
                    36:05:41:4b:dd:a5:9f:f3:bc:54:e0:6f:06:42:a5:
                    9d:a8:14:d7:1c:46:50:7a:50:de:76:c4:11:f3:30:
                    61:41:43:6d:34:fb:c5:76:d6:23:1a:06:43:95:ea:
                    e2:c9:69:a8:e1:fd:bc:25:69:55:63:80:c1:7a:55:
                    55:e8:42:5f:cb:fa:c9:98:35:c8:dc:b9:a5:a4:1e:
                    8e:df:74:8a:89:b3:cf:fd:1b:5a:07:3b:af:38:15:
                    62:3f:9f:90:57:7e:70:9b:f2:e3:c0:2c:f4:af:ea:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:79:0C:89:B5:AF:0D:62:55:49:BD:AE:B4:9F:A1:2D:C0:DE:36
            X509v3 Authority Key Identifier:
                keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:e2:b9:3d:79:00:f0:21:d5:b9:33:0f:b6:d0:b7:02:2a:
         b0:ac:e3:9e:cc:be:77:eb:a8:1f:1c:ae:be:a2:3f:72:f6:e7:
         bf:7e:03:61:00:56:a2:e8:97:36:56:59:42:65:74:ba:ee:1a:
         ce:5d:df:c0:91:43:b8:cf:a4:96:80:18:37:c2:3d:e3:de:e2:
         11:2b:f7:8e:3f:2b:eb:ca:57:01:1c:29:d8:2e:aa:13:5d:0c:
         76:4c:8e:16:83:77:a4:bf:55:0b:4a:5f:37:b3:51:15:52:a7:
         e5:8e:87:77:bd:09:90:77:b6:bd:df:26:9c:98:85:80:55:31:
         4f:b1:87:71:79:9f:7f:2b:c4:bf:79:e9:6b:eb:e7:db:ea:6f:
         08:18:56:5c:2e:70:28:f7:d2:c0:42:85:82:27:6a:57:b7:7e:
         39:17:72:c2:a8:e6:7e:c2:81:90:0c:bc:98:d0:34:71:36:a9:
         e9:dd:d4:39:b1:32:0a:8b:0c:4f:65:23:7e:f8:04:53:b4:74:
         e0:40:66:b3:b9:80:83:85:0f:c1:58:20:0e:e4:9f:08:f0:48:
         eb:2e:e3:75:57:1d:da:29:8a:ac:18:3a:a6:ae:2f:30:52:f6:
         7b:8a:ab:e4:ea:ca:35:8c:d9:cc:6e:08:83:1b:bf:27:ba:8f:
         ec:ba:95:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG
QjA3NEE1OEUwHhcNMjUwNzI0MjEwNTU1WhcNMjUwNzMxMjEwNTU1WjAYMRYwFAYD
VQQDEw02ODgyYTAzNC1iYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHW6VyFDzSHb6hOOa2kgtz0pzaPLqD1u2VW8ukynnsecANhJUowm6BRovnvp
fjygYl0SDWlFGMfhQ0btLNvrmBFYwQrLyRnUPKLAhjbuijWQGzuPgOHtKRrZYa+M
9Z6zY+O+zn/SLkjOQi4hMoD93P6jquyyz0TJdZRR/fq5eyBGvUNlEJI/U4rPLuGi
fjp+//3eY+s2BUFL3aWf87xU4G8GQqWdqBTXHEZQelDedsQR8zBhQUNtNPvFdtYj
GgZDleriyWmo4f28JWlVY4DBelVV6EJfy/rJmDXI3LmlpB6O33SKibPP/RtaBzuv
OBViP5+QV35wm/LjwCz0r+pSzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqPeQyJ
ta8NYlVJva60n6EtwN42MB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB
MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO
M2ZMei1iNkM0eF83QjBwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAL0OK5PXkA8CHVuTMPttC3AiqwrOOezL5366gfHK6+oj9y9ue/fgNh
AFai6Jc2VllCZXS67hrOXd/AkUO4z6SWgBg3wj3j3uIRK/eOPyvrylcBHCnYLqoT
XQx2TI4Wg3ekv1ULSl83s1EVUqfljod3vQmQd7a93yacmIWAVTFPsYdxeZ9/K8S/
eelr6+fb6m8IGFZcLnAo99LAQoWCJ2pXt345F3LCqOZ+woGQDLyY0DRxNqnp3dQ5
sTIKiwxPZSN++ARTtHTgQGazuYCDhQ/BWCAO5J8I8EjrLuN1Vx3aKYqsGDqmri8w
UvZ7iqvk6so1jNnMbgiDG78nuo/supXw
-----END CERTIFICATE-----
Generated at Sat Jul 26 02:01:23 2025 by rpki-client