Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
File:                     XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json)
Hash identifier:          7fN8ukuQCU6X3INBgtg0xbS/d6q9yXRmKxvL4odRCgk=
Subject key identifier:   50:DC:A0:64:E4:6E:B7:17:1F:BA:93:14:BB:B9:23:9B:9B:86:CB:9F
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Certificate issuer:       /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
Manifest number:          CB
Signing time:             Mon 21 Jul 2025 05:53:29 +0000
Manifest this update:     Mon 21 Jul 2025 05:53:28 +0000
Manifest next update:     Mon 28 Jul 2025 05:53:28 +0000
Files and hashes:         1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: B7+PFwuscJHqe+DfHcU3BFch+Dhe4BUAyeoLqAD6hP0=)
                          2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=)
                          3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
                          rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
        Validity
            Not Before: Jul 21 05:53:28 2025 GMT
            Not After : Jul 28 05:53:28 2025 GMT
        Subject: CN=687dd5d8-7a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:16:d6:80:76:52:55:ab:5d:11:da:57:a9:
                    27:21:56:92:0b:3b:88:ea:42:37:6c:15:c3:f8:f2:
                    c7:bb:b8:b8:db:42:39:a6:43:b5:94:88:b1:ec:f2:
                    58:2d:7c:50:ee:d6:a4:9d:35:9c:33:7a:4c:53:f9:
                    82:b5:ac:0b:ce:68:a3:97:88:e1:d6:33:29:1c:1a:
                    75:95:d9:f6:6b:22:41:3a:23:90:47:89:95:a5:9b:
                    46:30:a5:71:27:55:ef:93:1e:19:eb:9a:a9:bc:8a:
                    22:24:e4:dc:28:ec:ec:32:cb:47:5b:57:ff:f5:b8:
                    54:fa:b7:e6:ca:81:2d:d0:17:0a:e5:6b:ba:91:c4:
                    12:bb:1b:44:56:37:d1:2a:52:7a:7c:ad:01:50:52:
                    d3:99:45:4f:22:ce:9f:d1:09:62:68:58:4f:8d:c2:
                    73:c9:54:8c:2a:98:93:5f:0e:83:f4:b0:4c:f6:3c:
                    dc:be:e9:bc:f3:5f:3a:bc:12:d9:d1:32:46:16:b5:
                    36:da:16:94:7b:b1:06:e3:7e:89:28:52:5c:ff:1a:
                    51:48:8a:4f:da:7f:ff:c4:a2:7f:6b:cc:55:9f:66:
                    b5:39:92:c3:69:45:53:55:c0:83:f3:01:ef:c3:3d:
                    d7:ba:29:41:60:50:b6:3e:06:b9:29:d0:c7:c7:03:
                    a0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:A0:64:E4:6E:B7:17:1F:BA:93:14:BB:B9:23:9B:9B:86:CB:9F
            X509v3 Authority Key Identifier:
                keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:ff:e7:da:57:9b:77:ad:f6:22:0b:65:c5:2a:af:cc:05:
         d8:86:57:7b:ef:9d:f1:52:a9:e1:c1:66:72:26:eb:41:4b:c0:
         ca:45:7c:4d:8a:53:f1:a0:ee:a5:25:7e:4b:33:5f:c3:b0:48:
         01:dc:6f:91:a1:4a:a7:f1:e0:5d:27:b9:8d:cb:6c:90:f5:13:
         93:19:18:9d:26:05:61:9a:e6:4c:49:b2:cb:d2:67:6b:1b:64:
         ce:f7:d7:93:57:36:64:45:70:7a:1a:22:00:73:8e:38:cd:a6:
         76:4e:8b:82:d2:a7:94:9c:98:fe:8f:ec:9d:72:e1:e4:31:a0:
         96:8e:92:21:da:86:06:45:af:8d:f3:65:11:79:e1:bd:14:48:
         c4:89:a3:a8:5d:f7:3a:57:04:04:08:6b:5a:59:28:5d:57:10:
         5d:46:61:54:a4:d2:e8:ff:75:e7:0a:34:ff:6c:50:ec:a9:ea:
         52:c2:88:21:99:bc:c2:52:13:c8:92:8f:ac:dd:7c:b4:02:53:
         08:ba:dd:34:17:d2:11:2c:03:72:d0:1e:ec:03:d1:d8:df:11:
         76:c2:18:29:9b:29:68:d4:2f:bd:a6:3a:ce:20:bd:52:f1:ba:
         91:d5:93:d6:c1:e4:bc:5a:b8:f7:a7:40:79:f4:39:a7:e5:a2:
         1c:88:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:27:18 2025 by rpki-client