Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          BBx1ttZO6OA3n4wPaKH3oglMVqkrAKsOJiPYUKujMFo=
Subject key identifier:   87:CD:E9:4D:D6:45:08:B8:00:7F:60:92:21:7F:6B:9C:B3:BF:9C:73
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          8D
Signing time:             Wed 23 Jul 2025 06:53:46 +0000
Manifest this update:     Wed 23 Jul 2025 06:53:46 +0000
Manifest next update:     Wed 30 Jul 2025 06:53:46 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: xOngUVeGlUq2diDe/9PGOw22ov/xmqRsOgeVRUbL14A=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 06:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Jul 23 06:53:46 2025 GMT
            Not After : Jul 30 06:53:46 2025 GMT
        Subject: CN=688086fa-5777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:6d:87:2b:e8:7e:32:d6:99:73:ff:7c:e4:
                    96:8a:32:2f:23:8f:63:c7:91:75:ee:b2:e3:00:69:
                    4c:93:56:34:f3:03:4c:06:95:77:af:4c:22:0c:36:
                    07:5e:ca:2c:56:89:60:86:28:2b:66:34:53:c6:ca:
                    10:16:60:22:e7:af:f4:10:8b:ea:04:84:58:bc:63:
                    ae:e1:bb:1a:3c:de:a6:57:69:84:53:a0:22:23:74:
                    f7:e4:cf:ea:1f:44:32:32:a5:c5:0b:1c:f5:61:d0:
                    a5:58:0e:39:41:b0:60:9d:69:d4:27:63:cb:9e:d4:
                    c7:1c:6d:fc:2e:1a:06:c7:a6:18:02:62:12:d1:00:
                    b5:ce:04:08:00:33:48:00:91:69:35:91:9e:55:9b:
                    c6:04:38:d8:7e:54:4e:aa:ee:a8:9b:73:97:bb:5f:
                    85:aa:15:ac:f3:a5:7c:38:5a:62:67:a7:d3:ec:3c:
                    b7:bb:a4:1b:3a:1a:d2:d4:8c:2c:da:6d:b6:1b:74:
                    a9:94:57:9f:5f:79:53:14:d7:a5:39:e5:82:01:50:
                    09:96:9d:5d:8c:c5:aa:57:8a:93:2e:32:5a:b9:f9:
                    06:d9:64:fe:48:7d:52:d7:0b:78:ac:fb:3a:88:a2:
                    ad:79:01:e7:fd:de:96:f7:d2:b2:60:06:64:2a:09:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CD:E9:4D:D6:45:08:B8:00:7F:60:92:21:7F:6B:9C:B3:BF:9C:73
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:2a:34:d9:b3:a4:6d:a8:d6:b7:96:a6:c0:6c:d3:fd:0c:
         5e:d9:f7:af:19:d5:c0:70:4d:d4:9e:e7:c9:1a:89:7c:8f:00:
         fb:ae:31:14:f1:6b:b7:4f:2c:dc:bc:79:4b:df:b8:65:fa:85:
         b6:f0:9d:d5:98:22:2e:5f:47:0c:e6:40:1f:6e:18:42:7d:d0:
         a2:1c:8c:5e:5e:7e:94:40:dd:37:be:0c:7c:91:a3:0d:5c:65:
         0b:e5:91:bf:67:f9:af:9e:b4:f3:9f:62:d3:8c:fb:3c:a6:70:
         ff:e4:06:f7:cb:be:52:7f:c1:64:75:39:0f:31:17:5a:f0:47:
         d6:91:c0:aa:a9:2f:69:c2:6e:c4:c9:4d:95:ed:74:92:59:31:
         5f:4e:5d:f6:9c:3f:d8:43:6b:df:58:43:61:c9:f7:79:ed:c4:
         2a:f1:43:5c:c5:05:a3:f4:13:14:2c:29:ee:d9:d7:d0:de:fd:
         16:08:93:ea:6e:98:72:6a:de:78:60:6e:63:cb:15:93:f4:0a:
         6a:3b:00:aa:20:16:f4:f9:49:fa:f5:6b:6a:3b:3e:5a:12:b9:
         40:20:51:1f:f2:07:19:34:00:11:58:4d:97:5b:02:c7:94:38:
         af:3c:93:24:51:b9:32:5f:5a:a4:9b:41:e1:ae:67:e0:d3:e4:
         58:61:3e:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYzOEExMTAvBgNVBAUTKEM0NkM0M0JBMjc3RDJDMTBFRTdEMUVGRjNERjBFMkVG
Qzg4NTFBMUQwHhcNMjUwNzIzMDY1MzQ2WhcNMjUwNzMwMDY1MzQ2WjAYMRYwFAYD
VQQDEw02ODgwODZmYS01Nzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1jJthyvofjLWmXP/fOSWijIvI49jx5F17rLjAGlMk1Y08wNMBpV3r0wiDDYH
XsosVolghigrZjRTxsoQFmAi56/0EIvqBIRYvGOu4bsaPN6mV2mEU6AiI3T35M/q
H0QyMqXFCxz1YdClWA45QbBgnWnUJ2PLntTHHG38LhoGx6YYAmIS0QC1zgQIADNI
AJFpNZGeVZvGBDjYflROqu6om3OXu1+FqhWs86V8OFpiZ6fT7Dy3u6QbOhrS1Iws
2m22G3SplFefX3lTFNelOeWCAVAJlp1djMWqV4qTLjJaufkG2WT+SH1S1wt4rPs6
iKKteQHn/d6W99KyYAZkKgnNEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfN6U3W
RQi4AH9gkiF/a5yzv5xzMB8GA1UdIwQYMBaAFMRsQ7onfSwQ7n0e/z3w4u/IhRod
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4QS81QkREMkNBRTk1
NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxCRHVmUjdfUGZEaTc4aUZH
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjM4QS81QkREMkNBRTk1NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxC
RHVmUjdfUGZEaTc4aUZHaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuKSo02bOkbajWt5amwGzT/Qxe2fevGdXAcE3UnufJGol8jwD7rjEU
8Wu3TyzcvHlL37hl+oW28J3VmCIuX0cM5kAfbhhCfdCiHIxeXn6UQN03vgx8kaMN
XGUL5ZG/Z/mvnrTzn2LTjPs8pnD/5Ab3y75Sf8FkdTkPMRda8EfWkcCqqS9pwm7E
yU2V7XSSWTFfTl32nD/YQ2vfWENhyfd57cQq8UNcxQWj9BMULCnu2dfQ3v0WCJPq
bphyat54YG5jyxWT9ApqOwCqIBb0+Un69WtqOz5aErlAIFEf8gcZNAARWE2XWwLH
lDivPJMkUbkyX1qkm0Hhrmfg0+RYYT7o
-----END CERTIFICATE-----
Generated at Thu Jul 24 05:01:02 2025 by rpki-client