Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
File:                     XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json)
Hash identifier:          lU/zRFCLA5pQRVaRwFgLe0Euf1yzYChi2L0M2HWh/CA=
Subject key identifier:   69:08:45:0F:E8:F5:11:4E:6E:B2:87:15:A8:38:DE:BB:90:2D:85:8B
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
Manifest number:          01F4
Signing time:             Sat 31 May 2025 02:34:49 +0000
Manifest this update:     Sat 31 May 2025 02:34:49 +0000
Manifest next update:     Sat 07 Jun 2025 02:34:49 +0000
Files and hashes:         1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: 8mdnuc7iMQrpXk6IYKButJBMa1HJhwwsix7tqsran38=)
                          2: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: pPi15z/Whv1VOzdwch9x1UduIv6zmo0v/XxtgZH7i/0=)
                          3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: 5lEL9eS9yJhHrkaY87CyfNgKHrW5Wh6Msg6SUfVkO2Q=)
                          4: 6121C23230AC11F08C150767C4F9AE02.roa (hash: qk9SRvFWTxqsmsPfswd/7B1ZhpozisrjOm8xQ91ish0=)
                          5: CD152404495B11EF93EA3757C4F9AE02.roa (hash: 4cq9yG51A0O6Vq8JFh6wKZKMWZPp3grbIJj2LCtHk+0=)
                          6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: qM0AwU6iF9zfpDGKy2SZ3RCibpnSgHxUctYX3hAWago=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 02:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: May 31 02:34:49 2025 GMT
            Not After : Jun  7 02:34:49 2025 GMT
        Subject: CN=683a6ac9-866f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:bc:85:ae:89:f5:c8:2b:8f:d8:d9:72:a5:
                    8c:dd:e5:3b:cc:ac:19:bf:3b:25:3a:81:69:4e:56:
                    04:cb:d5:d2:14:aa:e6:24:72:dc:4c:c9:e4:c1:7b:
                    c8:6b:e6:2c:59:de:f4:a3:95:a3:49:15:55:ca:25:
                    87:51:78:8c:71:f0:b4:fe:46:cb:f4:89:b6:5b:fa:
                    df:75:ce:7c:2a:6a:89:79:1a:95:ad:60:2a:72:88:
                    be:71:4d:47:42:30:9c:80:c2:bf:b2:24:64:d2:14:
                    55:be:5b:cc:ff:f8:6c:32:6f:da:d4:da:5e:73:a4:
                    aa:97:f2:00:0d:64:63:31:d5:1e:27:e5:e4:b4:24:
                    bd:74:5e:c4:f7:c4:e9:ef:77:67:de:60:8e:4c:36:
                    1c:5a:72:12:ee:b1:c3:69:75:1e:cd:2c:c2:ab:af:
                    1b:4b:7d:53:e4:51:01:46:60:0d:36:0b:a2:01:9f:
                    13:ba:aa:f2:c2:53:d7:dd:ff:63:c9:e1:77:d1:ea:
                    d5:60:67:83:42:da:71:4d:a5:e2:a6:ce:82:f0:54:
                    f6:ec:23:98:6e:b4:a0:4f:98:d8:b5:b4:93:ea:d5:
                    56:32:6f:4e:17:cb:17:b1:e0:2c:32:10:29:23:e7:
                    59:bd:f0:db:d4:30:a9:de:15:3e:90:40:cf:c1:ca:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:08:45:0F:E8:F5:11:4E:6E:B2:87:15:A8:38:DE:BB:90:2D:85:8B
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:1c:0d:30:75:4d:cb:ac:30:ae:6c:0d:ac:1b:bb:c5:70:
         ea:2b:fa:b1:1b:4e:6d:7a:f0:16:61:0a:22:7c:f1:60:ef:1a:
         4c:f0:ab:fb:18:d3:ab:73:66:ce:56:62:14:fd:95:aa:bb:8c:
         31:51:53:bc:cd:90:f1:0b:56:52:9b:29:7c:ee:ad:cd:3a:49:
         26:7d:f3:dc:e6:c4:c6:bf:fc:de:ed:a4:c2:f8:e9:3b:c1:d0:
         43:7f:93:01:3d:23:2c:e9:0e:9d:0f:7a:0a:38:53:d2:7d:7d:
         d3:7f:8a:1d:3a:5f:75:80:94:5c:cc:04:7e:7d:22:c8:f1:34:
         7a:7b:e1:49:b1:cf:ce:e4:91:b9:c7:bb:22:6c:98:dc:c0:f2:
         3a:65:13:bb:30:51:1d:ff:10:15:74:b6:50:87:0d:81:f1:84:
         1e:6e:99:7e:42:f7:d2:f1:3c:0b:f9:74:10:3c:30:e2:d9:00:
         7c:ea:d4:19:d4:ad:0c:c6:46:cc:5e:3e:fe:5e:79:41:3a:a7:
         cf:27:26:c8:78:06:a6:64:11:c0:8c:0c:ca:3d:3b:1f:ed:0c:
         7d:8d:f3:e5:53:52:5a:07:a2:f8:46:97:c9:ca:5e:06:c9:39:
         76:14:0d:04:99:0d:95:f4:f3:39:be:dd:ae:5e:75:88:4e:a8:
         6e:32:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:46:54 2025 by rpki-client