Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File:                     XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier:          E2r14vpJ0ThgJl9lxL9PaPDIUNrKNQmFrAhh4bKLaOU=
Subject key identifier:   3D:68:72:03:CF:AC:87:52:CE:33:21:9B:80:B9:6F:85:46:A3:01:1F
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number:          C4
Signing time:             Sat 19 Jul 2025 05:35:32 +0000
Manifest this update:     Sat 19 Jul 2025 05:35:31 +0000
Manifest next update:     Sat 26 Jul 2025 05:35:31 +0000
Files and hashes:         1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: RKFRVK3oihaE5T8czhWIMmzeIi2kCH+VuEr6+kT2nwQ=)
                          2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: jYgy4yMQyKQf5VxNbJ2NKQFUgnsZsFyOqLwxVUIrb0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Jul 19 05:35:31 2025 GMT
            Not After : Jul 26 05:35:31 2025 GMT
        Subject: CN=687b2ea4-6667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:0c:30:76:fd:2b:ff:09:42:d4:ac:14:a6:
                    6a:43:ae:fd:c5:55:a9:e6:70:fa:23:db:42:4b:43:
                    25:18:f6:41:b2:c1:38:2b:6d:a8:59:3c:0a:ae:0c:
                    3f:d4:1c:43:02:d1:9f:76:6c:c5:12:7f:7e:ea:f2:
                    6e:f7:28:fe:a1:c0:72:5c:5f:67:20:f2:9b:9d:91:
                    49:2c:6c:51:a8:2a:d0:56:11:70:c2:d7:58:48:6a:
                    88:eb:23:e8:bf:d2:16:7c:2d:eb:67:85:da:86:e8:
                    6d:57:46:c2:b9:36:75:eb:79:44:44:9e:d9:c7:45:
                    88:5a:e4:e7:9a:d8:37:e6:ed:05:71:40:ec:ce:bf:
                    bf:ee:b5:81:a2:a4:6c:45:63:6f:42:ec:2c:b3:bc:
                    b4:b7:a3:98:ab:22:6d:10:db:53:d2:ac:86:2c:9b:
                    2c:5f:19:46:8e:8d:bb:e7:f6:fe:ed:1c:d7:95:08:
                    8e:7d:00:e4:88:16:08:52:b9:8c:88:de:c5:f8:a9:
                    15:ae:06:aa:86:61:df:6c:3d:49:25:b0:70:7c:23:
                    9d:b0:28:25:c5:4c:ec:70:4f:96:5e:0a:5d:1c:00:
                    71:0d:a7:a1:c8:d7:eb:2c:cc:08:f1:be:75:77:de:
                    d6:06:53:04:2b:e2:ab:12:55:ac:83:8e:5a:e0:59:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:68:72:03:CF:AC:87:52:CE:33:21:9B:80:B9:6F:85:46:A3:01:1F
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ea:29:cd:59:ae:35:2b:8c:82:90:3b:b8:e5:e0:5b:a4:35:
         c1:09:8c:e8:4a:95:d5:0c:b1:d3:26:f6:93:ae:be:4d:6b:3d:
         bb:c4:ef:37:31:84:75:86:ce:b8:f8:fa:2d:4c:ca:82:d2:31:
         52:ee:55:65:46:7c:08:2d:0e:bb:a5:eb:47:3e:f1:70:b8:47:
         b4:69:f4:b4:ad:67:e2:20:36:da:07:99:1c:4e:cb:66:33:74:
         5a:59:16:be:95:a9:27:81:0f:15:c6:50:da:44:4f:47:d5:6d:
         55:d4:47:ee:d1:d6:38:83:12:02:8c:4c:96:09:7d:c9:4a:e5:
         3e:44:88:c0:ab:29:cd:6f:24:c0:fc:bd:9c:6e:16:d8:db:e6:
         ed:f3:18:58:71:a5:5d:91:12:97:2e:c1:bb:19:e6:5e:6c:41:
         b7:4c:1a:a6:f9:ec:a3:37:95:80:5d:ac:c8:95:b6:a4:b7:16:
         44:87:3c:04:55:8f:e7:d5:99:30:b7:ff:a3:ca:0a:4e:82:66:
         d3:d9:77:74:ba:5d:1f:08:b9:bb:e0:44:b8:b0:83:9e:7b:4a:
         e3:7f:d0:2e:46:81:ad:93:a1:b1:5b:73:4b:c3:5d:44:12:06:
         ae:ab:5e:23:ef:e0:fc:16:3e:86:11:94:be:51:74:74:6b:fd:
         41:3e:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 19 21:35:46 2025 by rpki-client