Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File:                     xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier:          9MQz2pmUL1dmQGMgn3LZIO94zXI2ZqXHyiG3wqEdJcQ=
Subject key identifier:   76:2E:25:60:C0:E9:CA:9B:1A:01:56:ED:4C:BC:C2:9B:52:FE:4E:56
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer:       /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number:          A7
Signing time:             Sat 19 Jul 2025 02:30:02 +0000
Manifest this update:     Sat 19 Jul 2025 02:30:01 +0000
Manifest next update:     Sat 26 Jul 2025 02:30:01 +0000
Files and hashes:         1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: +Ms6qK0UGKBJfe7GiUCBBYOtUB+NCqkek/yPfgV2bi0=)
                          2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: DgEucoR97Y9+a6MdEE8/uaZNnvtkSjr5/qYttwnSpcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
        Validity
            Not Before: Jul 19 02:30:01 2025 GMT
            Not After : Jul 26 02:30:01 2025 GMT
        Subject: CN=687b0329-6382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:ec:6f:79:a1:f5:b0:15:84:f6:f8:38:b3:
                    a3:66:1c:3c:e8:02:8d:29:32:c4:09:3b:aa:b7:86:
                    46:32:e0:d9:46:21:38:10:9a:48:de:e0:83:3b:32:
                    54:8f:5d:6f:16:d2:3e:c0:17:f7:50:79:eb:15:5b:
                    65:19:c0:96:93:3d:c5:95:11:58:4d:eb:da:aa:c2:
                    f9:a9:44:47:41:87:b4:9c:3c:f5:49:c4:d7:d8:05:
                    b0:c9:de:c8:33:43:41:43:f9:23:9d:5c:9f:37:81:
                    59:fd:62:66:84:6a:a1:2a:5e:4b:64:37:5d:a7:d7:
                    b1:f6:ac:b3:d7:80:ef:7b:49:5a:cf:8a:2b:4b:5a:
                    30:20:b0:21:83:72:e3:34:40:51:e2:68:ef:29:0c:
                    cd:ac:74:8e:d3:1d:d6:25:94:cc:6e:48:b1:27:5d:
                    67:bd:8c:1c:85:11:10:c3:17:aa:9f:ea:93:58:5b:
                    e8:f1:99:dd:de:e0:a1:48:72:a6:23:e4:0a:3a:5a:
                    f9:3f:bb:eb:fe:cc:f3:87:59:e5:03:27:5e:e9:bb:
                    8e:5a:72:08:43:f6:75:1e:84:a1:7a:ae:de:bc:1b:
                    48:70:46:af:90:4a:a0:11:f6:c3:70:e7:fc:01:78:
                    b2:9c:d0:02:b3:d9:82:e4:38:3c:53:e2:0f:43:25:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2E:25:60:C0:E9:CA:9B:1A:01:56:ED:4C:BC:C2:9B:52:FE:4E:56
            X509v3 Authority Key Identifier:
                keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:47:1c:29:cc:fe:f6:24:d7:80:bf:85:9b:5a:d1:98:6b:42:
         78:2a:cc:28:11:c2:bf:b3:b0:07:1a:74:e5:62:df:81:1b:10:
         0d:22:ee:47:10:c0:03:01:7b:5c:ab:e9:67:e8:fd:6f:48:bc:
         be:1a:e6:93:05:14:d4:85:0a:65:3f:de:ae:16:6f:a3:e0:92:
         b6:db:10:af:5d:4a:96:15:72:26:b8:47:86:5b:84:dd:01:c3:
         9b:46:d7:42:c8:e4:00:3f:9f:9f:be:f2:2b:c5:86:c2:52:c3:
         41:8c:f3:83:b7:ac:64:ca:9a:af:cb:3d:77:43:83:e9:21:ee:
         f6:63:47:9f:37:31:ae:47:7c:21:38:30:28:55:68:5b:48:74:
         59:19:c0:60:72:d8:80:5f:94:c4:7f:ab:00:88:d4:a6:3b:4f:
         5c:5e:40:65:68:8c:9d:3c:f8:ee:6d:57:09:7b:f8:dd:99:5f:
         a1:0d:57:b9:fb:8e:50:13:05:5e:d2:38:81:a3:40:c8:c0:ba:
         96:16:9f:aa:fa:75:39:09:17:7b:b2:28:77:b1:85:6a:ce:ab:
         17:8f:9a:88:db:02:2d:77:f5:55:f0:26:7c:2b:43:6f:b0:fc:
         f3:78:82:31:4f:d1:97:81:7d:e8:4f:fd:06:93:74:68:ac:57:
         3f:37:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:31:17 2025 by rpki-client