Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File:                     XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier:          CNi6ML0jBYwQMlpsXw8NV5hKhS9uI0pLNB8TU4JntJ4=
Subject key identifier:   5B:21:8B:C7:54:3D:C5:1F:86:4A:BC:04:4A:FC:A7:9D:05:DE:6E:2E
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer:       /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number:          5E
Signing time:             Wed 23 Jul 2025 07:27:48 +0000
Manifest this update:     Wed 23 Jul 2025 07:27:47 +0000
Manifest next update:     Wed 30 Jul 2025 07:27:47 +0000
Files and hashes:         1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: 33fX9UbGkNjwkcacKpb7yHUQolCvnq+jwWz/3ieQWh0=)
                          2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
                          rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 07:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
        Validity
            Not Before: Jul 23 07:27:47 2025 GMT
            Not After : Jul 30 07:27:47 2025 GMT
        Subject: CN=68808ef3-ccb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:56:e4:08:14:09:21:5f:b9:37:81:08:ff:
                    a1:c5:7f:7d:99:5b:f9:fe:79:a0:4a:95:47:6d:73:
                    47:5c:ff:22:7b:50:6f:8f:f7:de:f5:d4:c1:d3:94:
                    3a:6d:1d:38:27:37:5d:c5:3e:ee:47:26:88:d9:d5:
                    14:92:3f:a2:ba:2f:9d:fe:dc:3c:47:aa:38:81:cc:
                    8f:98:42:46:63:cd:37:48:9b:2f:d4:d4:fc:d5:c5:
                    7a:32:52:72:c3:30:13:56:d1:98:d4:43:ec:da:7c:
                    9e:3d:5b:4b:6c:34:59:a8:42:16:82:c1:c5:24:b5:
                    5c:7d:4c:81:a2:e2:08:64:15:4f:b3:66:6f:f7:f4:
                    59:1f:c7:d4:3a:e3:55:df:cc:54:9f:c4:31:3b:83:
                    54:9f:cf:27:1d:49:c3:d3:64:32:d7:68:22:ff:1f:
                    cf:8b:02:da:4c:a0:5d:3e:ec:48:97:32:40:c2:dd:
                    b2:77:7a:29:dd:3b:2d:51:80:f8:5a:4e:ea:4b:2d:
                    40:27:4f:fb:0f:94:78:b8:7a:31:2b:0c:31:ea:2f:
                    d2:91:5f:74:f7:d7:1e:3f:d8:35:33:8e:ed:68:3f:
                    3e:96:01:be:eb:b9:76:97:e7:6b:6c:01:b7:15:88:
                    b2:23:a8:bf:9a:99:48:fb:e2:ca:d4:87:59:a0:0c:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:21:8B:C7:54:3D:C5:1F:86:4A:BC:04:4A:FC:A7:9D:05:DE:6E:2E
            X509v3 Authority Key Identifier:
                keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:79:8a:b2:61:b0:5e:76:7b:63:36:45:6b:a6:c1:d5:a1:
         a3:0a:34:60:c6:b6:e7:69:c5:f3:ae:56:e8:3d:74:96:59:f9:
         5f:27:73:98:fb:c7:36:eb:9b:d4:a2:85:74:7b:e1:88:9d:01:
         f1:98:4d:7f:5f:6e:3a:a1:9f:7e:59:51:c0:a0:05:65:f2:15:
         9f:27:9f:61:81:8b:b8:82:40:2e:b5:6c:4a:7c:bc:86:ed:95:
         ac:ad:04:d5:0e:70:32:ce:9e:bb:72:06:63:0d:9e:5e:ae:6e:
         9e:bb:ee:d5:b1:c5:18:4e:aa:8e:bd:0d:5b:c6:c6:44:48:00:
         56:df:a1:39:24:49:d1:ea:86:55:3d:7f:ba:df:fa:b2:ec:f2:
         2d:43:2e:f7:40:d8:57:19:4f:4d:89:e4:b4:a6:43:53:c8:3c:
         d8:7f:09:3f:14:2f:26:96:b9:dd:41:7a:fc:24:e8:95:fd:16:
         14:54:e4:68:1b:f1:74:c1:ab:9f:cb:f0:93:25:39:da:e9:be:
         fa:8c:a4:14:50:b2:15:6d:d8:c9:ab:bc:dd:20:01:91:d4:e3:
         96:b2:8a:4c:c7:0a:05:e2:6e:b2:08:16:af:be:25:96:30:99:
         9c:fd:c2:7c:f5:27:af:f7:ee:76:46:af:5f:a8:83:ab:d4:1c:
         da:92:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:37 2025 by rpki-client