Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          teG+3EnRnJhdTaift6Zs0G+ISxuMfxAuc5O+f2ymTH4=
Subject key identifier:   37:75:C6:AD:E7:C2:AE:08:72:AD:F1:59:A1:AD:EC:20:E8:00:BB:C9
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          8E
Signing time:             Fri 25 Jul 2025 06:53:14 +0000
Manifest this update:     Fri 25 Jul 2025 06:53:13 +0000
Manifest next update:     Fri 01 Aug 2025 06:53:13 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: H7q7HKAZeLl+wKphYhUA68uS1633ZD7t5pm4i92cr+w=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Jul 25 06:53:13 2025 GMT
            Not After : Aug  1 06:53:13 2025 GMT
        Subject: CN=688329da-7d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:69:26:d7:af:63:2c:2e:71:75:55:39:93:
                    b5:17:8c:8e:df:12:ee:5f:51:75:82:b5:02:a9:64:
                    40:5c:59:4c:67:16:45:93:03:af:f6:16:75:58:3b:
                    64:81:8c:c4:5b:0e:f8:ca:c5:0e:7b:c6:d9:52:76:
                    b6:91:df:a9:66:52:07:f5:a7:e3:8a:4a:f0:02:25:
                    5a:61:ff:2f:d1:f1:6b:04:00:e0:07:24:b8:6d:72:
                    80:98:6b:9b:2f:91:01:95:5a:53:08:10:1c:c0:6b:
                    e3:41:4e:f7:0e:3a:dc:64:bb:8b:41:86:26:ee:21:
                    30:43:47:7d:05:06:fa:01:1d:d4:a3:bd:b5:a5:9d:
                    3f:cb:c9:d3:c7:fe:63:fa:9e:8b:bd:61:91:1f:06:
                    0b:6f:86:08:46:16:ac:90:ee:e5:1a:2d:53:38:1b:
                    52:b0:c2:36:69:49:ec:a7:36:69:cf:33:c7:d4:08:
                    0b:c9:58:e6:b2:91:de:63:a2:5e:b7:c1:bf:fd:77:
                    07:a4:d4:e8:70:6f:d1:88:23:2c:cd:6e:7d:26:10:
                    f4:34:a9:24:34:c4:4e:ff:ed:d1:b5:6c:ad:89:e0:
                    4c:1b:4f:cc:c2:c4:ce:c8:f4:7f:87:57:c7:eb:82:
                    bb:5a:9e:9c:bb:fe:2e:c6:9d:d2:aa:c6:f3:5d:98:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:75:C6:AD:E7:C2:AE:08:72:AD:F1:59:A1:AD:EC:20:E8:00:BB:C9
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:94:c3:c2:86:76:07:a6:86:57:7a:56:31:15:51:7d:7d:2c:
         a5:92:13:bc:48:57:dc:2d:be:91:3a:14:f9:89:8d:c1:d8:6d:
         69:42:b6:83:a9:39:8a:73:1e:36:fb:72:4d:06:13:f9:4a:19:
         86:38:7b:06:9a:18:e6:dd:5b:75:4e:0e:e2:79:b7:de:0f:19:
         2f:17:d3:d7:b5:3b:28:2d:21:ee:c0:6d:54:dc:53:33:62:5d:
         0d:c3:63:b0:2e:1f:13:01:ab:04:16:ba:ce:0f:8b:0f:b4:f6:
         72:8c:41:4c:6b:33:b3:e5:fd:3f:c4:9f:32:dc:b2:55:cb:44:
         1d:b5:ba:9b:3e:ff:ff:60:79:42:31:5c:ad:c5:5d:84:f5:b3:
         69:b4:4f:ef:71:db:f0:4d:a7:56:bb:75:bf:a6:44:40:a7:ad:
         8c:d8:22:ea:99:1b:4e:1d:79:ac:1e:e6:0b:a7:4c:01:66:e6:
         31:b7:34:2c:cd:e3:9c:ae:ce:3f:25:2d:11:1d:a7:55:fb:59:
         48:21:31:a3:37:42:41:ab:f7:65:58:ea:5f:e3:3c:10:67:8e:
         56:cf:e1:02:97:20:bd:72:11:55:34:d9:75:1c:d4:22:c2:f1:
         4c:66:95:ba:fe:66:9a:ac:16:91:7d:86:5f:1a:91:d3:22:29:
         f8:28:41:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:59:05 2025 by rpki-client