Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
File:                     xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json)
Hash identifier:          fyzpRU35PRUEew2gBZTEnDiJDDXaO7ocgVl6zs/xuRI=
Subject key identifier:   75:92:5F:B3:41:FC:46:F1:FE:EB:20:86:B5:A1:4C:3D:0B:13:4A:E2
Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
Certificate issuer:       /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
Manifest number:          70
Signing time:             Thu 21 Aug 2025 07:05:41 +0000
Manifest this update:     Thu 21 Aug 2025 07:05:40 +0000
Manifest next update:     Thu 28 Aug 2025 07:05:40 +0000
Files and hashes:         1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: ySCTbEFKPBprtworXHW14VSDyjduIKthSdRcA6cnrfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl
                          rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 07:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
        Validity
            Not Before: Aug 21 07:05:40 2025 GMT
            Not After : Aug 28 07:05:40 2025 GMT
        Subject: CN=68a6c545-f97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:55:4e:49:2c:2a:94:9e:38:b4:97:1a:cd:
                    43:79:7d:48:79:57:a2:d0:28:71:dd:49:99:8a:2e:
                    f0:5b:20:fa:c9:a0:64:ad:e5:74:f1:f1:41:74:16:
                    6b:ba:f3:ef:15:a5:1c:4d:7f:6f:64:ec:80:b7:a2:
                    af:fb:2c:6d:20:03:3d:54:99:13:c3:72:8d:a8:2a:
                    39:0b:f9:3a:a2:74:69:a9:31:0f:96:a4:b5:b9:45:
                    92:07:ff:02:38:9e:08:0c:35:5c:09:21:7b:86:00:
                    38:ef:1e:a2:1d:60:a1:53:4a:0b:f9:52:6b:52:69:
                    4e:cc:f4:79:9c:3b:87:ae:76:0e:b3:ee:06:03:8d:
                    a2:4f:21:9f:8c:f7:ac:40:bb:8f:14:ca:76:46:65:
                    63:77:f9:e6:16:2f:92:6f:be:b1:c7:9f:be:dd:1e:
                    17:2a:30:76:2b:d0:03:bf:da:e6:48:ac:7b:07:76:
                    e4:f5:12:e4:8c:b7:00:e1:a2:ec:13:55:50:a2:56:
                    4b:37:7f:dd:71:e4:70:11:28:1c:22:db:af:f2:ac:
                    01:7d:c4:76:e4:95:d3:ce:8d:1f:f4:e4:47:7b:8a:
                    77:d3:f1:db:3d:1c:10:4a:ad:34:13:6c:b7:91:10:
                    d7:04:1a:cc:f6:03:b3:0e:06:0c:2f:c1:80:00:18:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:92:5F:B3:41:FC:46:F1:FE:EB:20:86:B5:A1:4C:3D:0B:13:4A:E2
            X509v3 Authority Key Identifier:
                keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:65:1f:0d:f8:46:29:81:a5:54:b3:63:6b:5e:c3:8f:92:
         7a:55:20:65:4f:dc:fe:8a:95:94:ba:72:e1:39:68:06:e8:73:
         7f:79:4c:cb:ee:dd:d9:c9:d0:b4:38:1f:f7:c3:c2:51:32:22:
         a5:6f:8e:eb:ce:f6:e2:89:8f:2d:06:a1:e6:5b:ff:a4:5e:67:
         75:07:25:ac:91:7a:1e:88:30:4f:9a:76:28:dc:81:92:d1:dd:
         d1:f3:fc:24:83:25:ac:d9:4f:3f:3e:66:40:42:66:0c:dd:bb:
         f3:ba:a9:21:c2:a1:f7:ee:d9:09:bf:fa:62:1c:87:8c:92:fb:
         77:80:62:15:08:75:cd:34:dd:b6:51:2f:0c:46:9e:71:3b:1d:
         86:f1:48:6a:d0:a8:a0:c8:96:bc:aa:42:39:d6:db:7a:df:47:
         77:9c:a3:87:37:25:05:97:9d:e8:88:72:16:79:e5:78:03:05:
         f4:6b:a3:4a:60:fb:a5:33:6a:71:9b:39:08:a8:37:ec:39:bd:
         a4:61:4e:e5:fa:71:81:c8:a8:6b:53:44:1e:df:5e:31:f4:64:
         9b:8c:f9:f8:f9:48:70:b0:12:1e:44:ad:b8:08:5a:94:20:4e:
         08:2e:86:36:5c:fc:46:93:99:51:05:47:30:3b:0d:0d:b4:e8:
         8d:35:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:33:11 2025 by rpki-client