Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
File:                     cXie4rLIt_u60_eFpd3s7xXMFaQ.mft (raw, json)
Hash identifier:          VKAJxUAB9fqcPfwSnwE/YIbwYVtICD6BTLrI61T8RjA=
Subject key identifier:   1D:F4:4F:00:A2:9C:1B:6F:29:04:59:38:7B:6D:5E:2F:08:5C:5F:32
Authority key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
Certificate issuer:       /CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
Certificate serial:       07AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
Manifest number:          079E
Signing time:             Wed 20 Aug 2025 21:28:17 +0000
Manifest this update:     Wed 20 Aug 2025 21:28:17 +0000
Manifest next update:     Wed 27 Aug 2025 21:28:17 +0000
Files and hashes:         1: cXie4rLIt_u60_eFpd3s7xXMFaQ.crl (hash: Fi+za/zqy1DZcoVdMqv468eDx4ZDVCw/wdvtII+o09A=)
                          2: 4848EB6E18BF11EBA5E2E946C4F9AE02.roa (hash: WcA0e7saPqIm2zyMau/4bmWlWFCaJQ2WBh7b1zXUWss=)
                          3: 47B8C6B018BF11EBA5E2E946C4F9AE02.roa (hash: saRxbZnY10CKxPD1pSytKLg8FuSkNaBBrOYD5Hz5qjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 21:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138171, serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
        Validity
            Not Before: Aug 20 21:28:17 2025 GMT
            Not After : Aug 27 21:28:17 2025 GMT
        Subject: CN=68a63df1-a96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:15:11:c7:a8:14:85:4c:87:8e:3a:23:57:
                    86:ec:dc:3c:7c:21:98:32:0d:18:0e:db:04:f8:f5:
                    32:05:23:d9:12:ec:26:c0:29:a7:04:ec:b4:6a:41:
                    62:f1:fc:66:8f:5f:8c:d1:9e:97:d8:9e:a4:c7:ef:
                    7b:52:44:b5:be:01:88:da:dc:d6:1b:af:28:87:4d:
                    03:f8:44:0d:25:35:fb:5b:1b:bd:43:f3:61:9f:0d:
                    97:0a:93:2b:80:e7:db:ab:43:39:3d:eb:32:b7:96:
                    70:78:79:8f:fb:e9:57:eb:27:61:88:fb:8f:30:a1:
                    06:38:2f:db:65:75:ad:92:b7:a4:54:39:8c:42:03:
                    63:fd:c5:eb:aa:c6:1f:8b:ec:4f:95:ac:33:d3:dc:
                    b1:0e:d0:6f:9e:d5:19:3a:cc:13:23:0e:9c:8b:06:
                    72:a2:60:c7:4e:4e:b7:20:43:35:12:8c:e9:f6:ad:
                    38:70:b9:61:e2:46:ba:92:a6:09:0f:15:68:a7:94:
                    27:f3:b1:b1:ef:0a:11:d6:33:3b:82:55:05:e1:f4:
                    d0:3a:a1:c1:4d:cb:1d:3f:fd:74:86:73:8b:93:48:
                    d6:2e:7e:d4:db:12:51:9d:b4:8e:0b:fe:d5:1e:f6:
                    cb:7c:cf:57:ed:90:f8:8b:b2:e2:42:01:cc:2b:4c:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F4:4F:00:A2:9C:1B:6F:29:04:59:38:7B:6D:5E:2F:08:5C:5F:32
            X509v3 Authority Key Identifier:
                keyid:71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0d:db:82:7c:ca:1b:9b:6e:82:bd:0c:54:b5:f3:5f:58:23:
         28:85:fc:a4:e4:05:11:e9:d2:3d:c3:a2:ae:ac:9c:d8:55:cc:
         2b:e2:ed:0e:eb:fb:6b:0f:e2:f0:d6:3f:5e:81:f4:f3:ff:cc:
         90:e4:73:c6:89:19:4e:59:c3:9e:00:00:25:20:a0:2c:55:5f:
         44:da:3f:60:c5:f0:f9:cc:38:9f:d3:ea:7a:60:2c:94:46:dd:
         88:b0:d8:2a:c7:8d:ef:d7:40:80:00:ac:af:ed:cc:bb:9f:11:
         01:24:14:13:9c:47:70:7e:e2:db:aa:70:c9:67:5f:5d:5e:7b:
         39:a7:6d:da:08:d6:fb:54:ec:e7:8b:aa:f0:e4:be:c5:6f:9e:
         a9:3a:c5:40:ba:17:9b:5c:78:a1:71:3f:6d:7b:a2:4d:fa:1f:
         1e:c5:b5:1f:b9:73:d7:32:59:e3:3b:bc:36:06:10:1d:3b:a0:
         c9:b6:cb:25:9f:14:5e:c8:bc:ec:20:5e:2c:1e:e9:12:03:1c:
         c6:a6:2b:e3:17:6f:0b:e7:f2:76:47:b1:fc:b8:0c:66:28:7f:
         37:ef:51:98:72:69:fb:f3:a2:3b:e0:8a:4c:b9:38:53:78:18:
         6e:7a:3f:c0:bd:13:b9:2e:14:db:78:c6:12:78:98:4e:70:39:
         06:8c:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:30:39 2025 by rpki-client