Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          Xxs4w7ufffg3voPPi7oUCe+JFDTO2UM+7d7hkUTz47s=
Subject key identifier:   71:68:68:93:C2:63:F2:74:48:CA:0C:1B:E3:BD:A6:34:7F:C3:8C:00
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       0768
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          0762
Signing time:             Fri 18 Jul 2025 21:52:07 +0000
Manifest this update:     Fri 18 Jul 2025 21:52:07 +0000
Manifest next update:     Fri 25 Jul 2025 21:52:07 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: VX78UuAfMuMrLV3UBbNekYdQ3WViJ5sQa0ufF1Npib0=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: Jul 18 21:52:07 2025 GMT
            Not After : Jul 25 21:52:07 2025 GMT
        Subject: CN=687ac207-3ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:68:f6:64:7e:71:36:6e:09:c4:55:85:55:
                    7d:09:28:58:6b:a0:a1:75:a0:43:ba:58:26:7a:06:
                    b9:b2:76:fb:ce:1a:4b:d5:1b:63:55:a1:f7:0c:49:
                    6e:c5:fa:71:12:8c:38:32:bf:67:08:8f:8d:bd:a1:
                    33:c2:3a:db:02:da:be:81:ff:35:7e:de:8c:6f:75:
                    b4:c2:3c:df:d1:f6:03:06:2f:c4:a9:de:67:48:5c:
                    05:bf:be:28:3d:60:72:41:a8:7a:18:68:b1:36:5b:
                    3b:62:ed:35:8f:4c:27:81:4d:65:8a:b1:e7:45:77:
                    6e:07:c2:4f:a1:29:3b:86:5c:54:95:e1:fc:40:3a:
                    6c:ca:c7:2a:03:2b:c9:14:c5:18:6c:4c:71:2c:ed:
                    ef:0f:a6:9c:e7:10:0a:a8:90:5c:fa:46:bc:64:6e:
                    9b:bf:12:22:d8:9c:fb:e9:51:48:5d:24:2b:be:2e:
                    ed:33:36:2b:1a:cd:05:de:b8:fb:d3:f2:24:ce:77:
                    47:16:a7:21:69:9b:6e:67:41:ea:ea:ac:94:df:8a:
                    91:fa:44:f2:5d:7c:c8:1c:b6:9b:06:d7:5b:b8:f3:
                    03:f8:fd:02:41:c7:b6:df:2b:b6:7f:ae:de:68:3e:
                    7a:76:63:fb:3e:d6:c6:8d:bb:d4:9e:28:d1:2f:59:
                    8e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:68:68:93:C2:63:F2:74:48:CA:0C:1B:E3:BD:A6:34:7F:C3:8C:00
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:09:63:a5:b2:01:8f:c4:2f:11:9b:70:ae:ec:73:87:f8:
         b8:88:4b:f6:4e:d7:da:3f:17:5d:62:4d:bc:3d:d1:4f:aa:99:
         6a:de:7c:dd:37:b6:eb:13:a2:e7:cb:61:e3:58:f0:e7:dc:b8:
         6d:a9:c0:7c:c2:4e:01:de:d3:fa:3e:95:0e:8b:84:a4:d0:3b:
         22:a4:1f:99:98:53:3d:8a:59:35:49:aa:b2:56:1e:c8:ff:c2:
         21:ec:b4:e4:c3:36:16:53:30:42:25:e5:62:5b:63:a9:17:e0:
         5b:06:88:70:84:ee:fb:1a:ab:80:77:28:12:11:d4:fc:ee:8f:
         a3:94:60:d0:53:54:32:55:15:0d:d0:10:a0:96:73:63:53:87:
         e4:01:b0:f1:e8:8f:7d:07:7d:61:aa:a2:b3:46:68:d6:70:b9:
         d3:b1:f7:fb:dc:a7:0f:13:52:ec:9f:3a:8b:45:f1:03:82:57:
         37:95:f6:67:59:af:37:14:21:aa:dd:65:86:d7:7e:7a:b5:bd:
         d9:24:10:89:48:e3:23:a7:87:57:3e:9b:56:1a:4d:04:1c:1c:
         fc:01:5f:17:05:87:c5:60:b7:b3:6f:28:1b:04:bc:c8:3a:e2:
         ad:61:75:73:80:44:d4:81:4e:a0:af:2e:34:58:c4:a3:7b:dd:
         59:dc:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:32:31 2025 by rpki-client