Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
File:                     XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json)
Hash identifier:          gYmtcJjaed7alJAvGoHtFip5q/3WrDsR5PgVTga6uGg=
Subject key identifier:   F9:FE:2D:4E:34:7B:23:C1:3A:9E:ED:F5:56:96:A3:66:E7:DC:0E:61
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
Manifest number:          020D
Signing time:             Sat 19 Jul 2025 02:46:39 +0000
Manifest this update:     Sat 19 Jul 2025 02:46:38 +0000
Manifest next update:     Sat 26 Jul 2025 02:46:38 +0000
Files and hashes:         1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: BHbE101aJ6LYuqynM1ZRu5n8fRP6r0ZySfcCnPp8aaQ=)
                          2: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: pPi15z/Whv1VOzdwch9x1UduIv6zmo0v/XxtgZH7i/0=)
                          3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: 5lEL9eS9yJhHrkaY87CyfNgKHrW5Wh6Msg6SUfVkO2Q=)
                          4: 6121C23230AC11F08C150767C4F9AE02.roa (hash: qk9SRvFWTxqsmsPfswd/7B1ZhpozisrjOm8xQ91ish0=)
                          5: CD152404495B11EF93EA3757C4F9AE02.roa (hash: 4cq9yG51A0O6Vq8JFh6wKZKMWZPp3grbIJj2LCtHk+0=)
                          6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: qM0AwU6iF9zfpDGKy2SZ3RCibpnSgHxUctYX3hAWago=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Jul 19 02:46:38 2025 GMT
            Not After : Jul 26 02:46:38 2025 GMT
        Subject: CN=687b070e-9245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:eb:b7:9e:e1:c8:1a:37:ff:69:fb:7b:e0:
                    d7:8a:83:50:f8:aa:77:cb:4a:90:7c:94:b4:b5:08:
                    12:18:ab:ba:ca:6e:96:1e:77:94:07:0d:03:f1:69:
                    ee:62:b0:2c:61:13:20:a0:78:40:cf:fb:5a:30:88:
                    d4:06:25:ce:e7:fa:03:52:9e:3e:40:a3:7a:9c:c4:
                    d2:e4:0b:1e:4b:27:b0:92:72:c4:e6:97:c1:1a:42:
                    ef:f4:35:6b:a4:60:f6:78:2e:53:70:a2:6f:57:75:
                    12:0e:21:93:5e:f7:11:4c:46:2c:ed:4b:af:5c:ee:
                    05:58:e8:4e:10:15:4e:41:5a:6c:de:1d:0b:8d:6d:
                    18:03:bb:65:d9:e6:72:dd:ac:7d:d5:87:b3:0a:df:
                    dc:6a:a0:80:c4:21:ba:2f:68:38:33:87:e8:bb:08:
                    b4:67:14:7d:ec:ee:a4:10:48:72:81:a2:84:eb:d9:
                    30:b3:85:22:09:9b:a7:bc:b8:09:3f:5c:d9:33:d6:
                    1d:36:6d:67:a6:7b:88:bb:c1:94:41:8d:43:f3:c4:
                    58:89:3b:ce:64:63:dc:b7:35:1a:15:eb:3c:41:6a:
                    14:fe:07:fd:14:6f:c3:be:11:4e:15:e4:ce:a6:10:
                    06:34:d3:b2:7d:00:6c:13:df:8d:6c:03:49:81:30:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FE:2D:4E:34:7B:23:C1:3A:9E:ED:F5:56:96:A3:66:E7:DC:0E:61
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a0:1b:dc:90:4d:4f:ee:65:ba:a1:29:d0:56:43:75:5c:85:
         82:c6:b3:c1:6f:7d:f6:f3:02:64:80:a9:be:5b:3c:4b:74:59:
         5a:6e:18:b2:66:a2:a2:2a:d8:84:9b:00:d1:6a:48:25:bd:ae:
         64:e8:e8:c2:22:c5:82:54:b1:3d:f6:15:d2:50:01:20:0d:02:
         77:35:4b:d6:f1:89:7c:bb:7c:94:0c:af:dd:94:95:01:2e:a6:
         6f:44:96:ef:dc:5b:7d:2f:43:2f:a1:9a:01:2e:4c:94:23:d8:
         bf:ec:ec:20:40:ce:f0:f6:1e:2a:7d:af:ea:d4:b4:17:6a:88:
         74:ad:ef:87:7e:68:d0:ce:11:81:df:d6:74:23:9c:cc:cc:92:
         77:b7:43:b2:59:f7:f7:a5:c1:fe:a9:9c:8c:98:72:9c:b9:85:
         ed:ed:02:a2:d4:07:d6:f3:50:9c:c5:f2:34:80:13:4e:7c:77:
         32:e2:40:86:8d:c4:9d:b0:69:a8:d4:0f:fc:53:4a:5a:03:c7:
         20:b5:f2:f6:36:89:4f:1e:f3:08:59:23:d4:44:61:d0:0b:15:
         3f:3f:b9:bf:15:b7:f8:48:b7:a3:dd:7d:55:50:84:91:75:c7:
         77:49:2c:6a:f1:25:0a:d8:7c:22:a5:42:33:01:87:d5:fc:c7:
         f6:e8:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:21:00 2025 by rpki-client