Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File:                     XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier:          G41yJm9VYvUGDq+VvzkrIqnnrb9npSTAtrYobQGMuIQ=
Subject key identifier:   2A:79:A1:8F:CC:E5:7F:2A:97:2F:80:5F:55:F1:72:82:DE:29:10:30
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer:       /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number:          5D
Signing time:             Mon 21 Jul 2025 07:18:35 +0000
Manifest this update:     Mon 21 Jul 2025 07:18:34 +0000
Manifest next update:     Mon 28 Jul 2025 07:18:34 +0000
Files and hashes:         1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: FxrkkZM6PO0ywT6OImTjF6+XIRStzLBLX0WQZAc/LVQ=)
                          2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
                          rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
        Validity
            Not Before: Jul 21 07:18:34 2025 GMT
            Not After : Jul 28 07:18:34 2025 GMT
        Subject: CN=687de9cb-7846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:fc:17:5c:43:a8:9f:23:18:b6:46:1a:aa:
                    5e:77:a8:72:29:e7:16:a0:8d:b2:1b:e4:f5:34:95:
                    ea:25:9c:17:98:c5:8c:a1:7d:65:d8:3d:1b:bd:96:
                    b7:63:d2:17:2c:05:57:f2:dc:c4:9c:43:8e:b8:bc:
                    15:25:63:c4:5e:7d:2a:96:0f:b1:8e:6d:1c:83:a8:
                    af:4a:cd:32:95:6b:9d:e5:37:70:70:7a:bd:f1:6a:
                    82:d5:1f:6b:27:ec:8b:87:a0:9e:88:46:b3:14:a8:
                    59:2b:eb:a5:79:05:58:8a:fc:e6:b6:7a:76:91:0b:
                    a7:6b:cf:97:75:9b:d9:10:61:fd:75:a9:5e:99:f7:
                    d7:95:31:f1:9a:5d:95:34:f2:82:bc:80:b8:d7:6f:
                    cd:f4:b8:a1:62:1c:3d:52:3e:dd:3d:1c:ee:e8:9e:
                    27:3e:f4:5c:af:d6:14:f9:d6:69:1f:e3:5a:f2:0e:
                    d6:78:08:09:93:69:65:92:db:7b:af:9f:40:4f:33:
                    8a:f3:ae:e0:4b:fa:7b:6d:68:2a:6a:ba:22:b8:66:
                    42:02:a7:f0:ff:7e:d9:63:4c:d4:59:1a:c9:a2:51:
                    fe:42:87:0d:9f:cc:d0:fd:f2:12:be:9a:0a:b3:81:
                    cf:b4:d1:84:3d:d8:ca:28:7c:44:bd:ed:27:3f:91:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:79:A1:8F:CC:E5:7F:2A:97:2F:80:5F:55:F1:72:82:DE:29:10:30
            X509v3 Authority Key Identifier:
                keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:57:3d:07:23:1f:73:2e:58:66:52:b3:df:a6:02:3f:ea:ee:
         5a:fb:37:7d:ee:7d:15:9f:56:96:21:30:5e:7c:f2:d1:c5:8a:
         2a:b6:21:ef:1f:b8:4e:bb:50:b5:31:47:8f:18:36:64:e7:29:
         39:b2:08:59:2f:9d:e9:4b:4f:6e:e0:b9:fb:48:6f:8e:91:eb:
         ce:5b:1f:2a:18:ca:7a:a9:0a:b9:2e:a5:4c:f3:33:d3:31:a9:
         ac:48:39:5e:2d:54:8c:3f:9e:a5:52:bc:c7:f6:6b:5a:ba:66:
         2c:d0:49:e6:90:6a:1d:22:73:f6:d2:42:16:2b:59:c2:f3:7e:
         e8:fd:e9:27:b3:62:8e:f8:dc:d4:43:86:db:2d:bc:ca:02:74:
         68:31:6c:2d:f9:dc:88:a9:d1:44:fc:fe:33:2b:41:2f:8e:c5:
         48:6e:9e:11:70:26:e7:2b:70:52:f4:de:a1:0f:b4:55:d1:f9:
         a0:ba:de:0e:fc:1c:33:b7:63:cf:cc:43:37:51:ce:48:07:23:
         fe:2f:31:84:b8:2a:a1:c3:51:7a:43:e0:26:20:22:bc:31:e0:
         1c:34:5c:34:28:a6:36:36:e1:e0:e4:27:cd:a1:d2:2a:0d:81:
         ce:9d:49:15:8c:70:70:88:97:c6:43:d9:5d:bc:46:d3:6d:f0:
         82:89:73:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:18:06 2025 by rpki-client