Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
File:                     rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json)
Hash identifier:          TKrS+siG83IqaGi7Md4BYm3SnmLZ+Apk81QZeMmbXAE=
Subject key identifier:   02:EE:2B:B5:26:4E:58:07:AD:C4:AF:05:97:29:40:E8:8F:66:FF:19
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Certificate issuer:       /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
Manifest number:          0155
Signing time:             Fri 05 Sep 2025 04:30:23 +0000
Manifest this update:     Fri 05 Sep 2025 04:30:22 +0000
Manifest next update:     Fri 12 Sep 2025 04:30:22 +0000
Files and hashes:         1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: T5FngHdwk8fzL4zQXdN0KwW9gULcdGoeHyd6RmXciso=)
                          2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=)
                          3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
                          rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 04:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
        Validity
            Not Before: Sep  5 04:30:22 2025 GMT
            Not After : Sep 12 04:30:22 2025 GMT
        Subject: CN=68ba675f-c445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:d0:66:ae:6d:9b:77:58:c4:bf:d4:0b:67:
                    3d:80:d2:4a:18:0d:9a:66:1e:e2:71:80:b5:63:b7:
                    d7:5d:91:64:74:9c:72:11:a8:ed:06:2a:29:88:b0:
                    2b:b3:64:de:db:26:c5:8c:74:f5:57:00:03:83:36:
                    53:59:f7:7c:9e:f1:b8:c5:55:70:4f:a0:7f:42:25:
                    65:39:cb:3f:db:cf:f1:d7:84:7d:01:2f:11:cb:a3:
                    d9:18:3e:98:c2:97:a7:8c:0b:e2:61:76:8b:fb:17:
                    43:a8:4e:fc:40:78:36:09:21:e4:a1:91:c3:7f:c8:
                    8f:ce:f5:10:63:5d:04:1b:a1:19:b1:9e:4a:0d:b5:
                    52:84:5e:01:03:a7:0e:64:ca:d1:68:92:05:28:ff:
                    ab:e2:ce:43:41:36:d7:99:4c:4f:72:35:7e:49:d5:
                    b7:90:14:7a:5a:6a:95:46:02:53:51:da:3b:81:0f:
                    ee:3f:58:2c:5f:cb:23:96:2a:70:28:37:e7:0d:cd:
                    c9:a3:f1:b7:7a:b7:4f:09:71:67:eb:7f:88:ec:46:
                    84:77:55:2d:56:96:90:54:63:21:51:86:43:c6:51:
                    8f:66:23:9e:41:72:7e:b6:cc:bd:78:e1:3d:28:55:
                    37:e2:20:ae:ef:5e:b1:9b:34:34:0f:38:cc:4b:50:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:2B:B5:26:4E:58:07:AD:C4:AF:05:97:29:40:E8:8F:66:FF:19
            X509v3 Authority Key Identifier:
                keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:aa:51:6d:e4:65:f2:5f:58:d3:32:9c:5e:ca:fe:8a:37:7a:
         02:30:f1:c6:9c:42:e7:70:cd:8e:74:f6:03:81:64:f9:16:34:
         3a:0d:18:24:70:b0:3d:82:fa:06:51:c4:9d:bc:39:4a:29:07:
         9b:7c:9a:31:1a:3c:ee:9c:90:ff:0b:f2:3d:c1:89:8e:d9:11:
         60:65:b5:a6:c4:f7:ba:05:eb:47:15:f4:33:b3:ba:2f:77:97:
         35:17:c5:1c:f7:1f:f0:7e:47:d2:c9:ed:ce:e5:ec:b0:09:1e:
         a5:92:b4:f3:40:94:11:33:4a:a5:c0:0e:41:08:3b:de:bb:61:
         42:38:b1:a1:b1:03:d5:2d:51:c6:93:61:24:c5:38:60:53:bb:
         f8:21:6a:dc:b8:a3:bd:a3:e7:5f:fb:0a:4c:87:7f:bf:62:7a:
         21:d1:43:7b:83:c4:8b:2b:69:2d:d8:48:0f:7a:d9:c8:6b:51:
         61:f1:e6:bc:72:ba:8d:5f:de:be:2d:ab:0b:78:cd:22:e3:56:
         03:7c:91:bf:e5:6e:c6:83:4b:cb:4d:2d:22:00:ba:21:b0:dc:
         2d:b3:72:3a:fa:9e:63:63:a3:6f:a6:78:4d:b9:3a:5c:c8:47:
         de:8a:b9:94:0b:56:fd:59:ce:c8:4c:7a:42:c8:43:e6:a8:9e:
         a2:fd:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:33:08 2025 by rpki-client