Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
File:                     cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json)
Hash identifier:          koc/pL/rfZJWJq9x6PAw4EOp+xgQPAkUZjJB7kHo2RQ=
Subject key identifier:   15:33:0B:CA:EE:B4:C2:E0:66:32:ED:FB:51:83:1D:E1:1E:F9:44:48
Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Certificate issuer:       /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
Manifest number:          C8
Signing time:             Tue 09 Sep 2025 05:52:19 +0000
Manifest this update:     Tue 09 Sep 2025 05:52:18 +0000
Manifest next update:     Tue 16 Sep 2025 05:52:18 +0000
Files and hashes:         1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: kx0kXOAW4KyoK0TZRCLFiexHLpmlr/rPG3VNVaLw2/w=)
                          2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: MZgkuhZaLuaH742l5Nmqx23G0Q6+kgWllUIicpxtkRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
                          rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 05:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
        Validity
            Not Before: Sep  9 05:52:18 2025 GMT
            Not After : Sep 16 05:52:18 2025 GMT
        Subject: CN=68bfc092-2067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:98:cf:b3:6b:de:54:07:4b:3f:1f:46:a5:
                    db:63:75:8c:ef:c7:aa:9a:e7:cb:1b:d8:20:2d:a4:
                    8b:2a:d8:93:4b:24:7c:16:8a:78:87:09:89:d6:58:
                    72:a9:91:06:06:c4:7d:87:c9:c0:08:0d:d2:5c:42:
                    e8:5d:da:66:af:91:7b:16:ef:2c:ee:f7:53:40:a4:
                    be:fe:e0:4e:b2:f5:cd:b8:db:54:07:60:92:27:11:
                    52:09:55:45:72:6b:8a:fc:71:8c:fd:57:0e:85:ef:
                    21:57:73:fc:40:cc:44:1a:c7:bf:78:11:72:f1:c2:
                    02:61:87:dd:20:bd:91:70:ac:e2:23:6d:67:7a:bc:
                    59:86:0c:e4:d5:34:f4:8f:95:69:f7:23:79:5c:9a:
                    61:2c:a5:77:a4:c3:55:e5:4c:84:1b:96:73:d2:19:
                    20:b4:cf:a4:67:86:aa:6b:d6:ae:8c:d3:36:1f:fe:
                    46:fa:a5:62:9d:68:ac:98:7d:1a:4e:f9:3d:00:3c:
                    02:53:7c:57:62:18:f8:c7:3e:28:67:77:97:8a:01:
                    35:0f:e2:fa:90:d2:fb:67:05:e0:db:52:7b:11:2a:
                    82:24:04:0d:3c:47:0f:1e:d7:2f:d3:44:f5:b9:13:
                    0d:2f:00:bf:43:b9:9c:50:e3:74:b9:6e:f9:7a:e5:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:33:0B:CA:EE:B4:C2:E0:66:32:ED:FB:51:83:1D:E1:1E:F9:44:48
            X509v3 Authority Key Identifier:
                keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:94:41:7e:8b:9b:c8:52:16:22:ad:36:78:ca:97:38:8d:03:
         35:61:5c:25:6b:ee:b4:55:6b:4b:f7:34:9d:b7:35:55:79:22:
         da:06:af:de:05:ae:71:5b:38:5a:26:ec:ae:cb:21:92:ae:34:
         28:91:f1:32:33:b4:cd:04:49:6d:1e:8e:71:34:7d:d2:c4:45:
         cf:63:7f:46:6d:51:1c:05:6a:3a:a7:28:ab:7b:fe:20:65:a5:
         54:63:3d:62:1f:46:e3:a3:a8:4b:10:56:06:b7:ae:fc:37:88:
         40:da:20:7d:66:71:84:aa:09:70:6a:91:0c:7a:08:e4:7d:54:
         bf:a0:90:cf:01:14:ee:50:61:2f:65:a5:8c:cc:5b:40:ea:66:
         b1:bc:4d:04:a7:18:e4:e1:41:a3:5b:84:27:07:b9:36:41:56:
         fa:42:89:5a:94:23:14:4c:cb:ab:cb:c9:7f:9e:ea:c3:eb:21:
         2c:79:17:72:27:b6:2e:a1:06:d8:64:6e:8e:ba:4f:9e:04:86:
         99:e1:07:78:bf:0a:43:63:d4:08:14:24:92:e6:9b:d4:a8:70:
         0c:54:c2:a8:fe:47:fb:66:f9:97:2b:1f:0a:1d:62:2b:2a:dc:
         62:b1:c5:65:84:5c:29:2a:f8:ad:a2:70:c9:dd:bb:de:f6:e0:
         da:2c:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:04:46 2025 by rpki-client