Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier:          VWnjYOf6H3qhWpM9/mCX4BdvuYdP+zPIdyWKDsWQwLI=
Subject key identifier:   0D:CC:06:72:ED:EE:4E:83:EB:37:A2:B7:8C:3A:E6:5E:16:A9:F6:8D
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer:       /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial:       05EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number:          05EE
Signing time:             Fri 22 Aug 2025 23:07:29 +0000
Manifest this update:     Fri 22 Aug 2025 23:07:29 +0000
Manifest next update:     Fri 29 Aug 2025 23:07:29 +0000
Files and hashes:         1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: bys0o8EjcPDwCDQqqSq3RBahxpt0JAvS9iaVnNcAdWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
                          rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Validity
            Not Before: Aug 22 23:07:29 2025 GMT
            Not After : Aug 29 23:07:29 2025 GMT
        Subject: CN=68a8f831-3aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:19:85:b9:b2:17:66:94:e8:08:23:b5:b0:
                    48:b4:ce:65:80:94:9a:09:5b:b7:ec:00:38:d8:d8:
                    72:c8:8d:fc:45:ec:69:ef:e1:57:66:17:a0:40:16:
                    84:3d:9f:66:c0:40:23:d3:62:73:8c:14:ed:b5:8e:
                    38:d4:5e:a9:9c:29:03:a0:94:60:99:f5:c5:cd:f3:
                    60:d0:f5:c6:6e:ee:f1:4f:b6:0a:9c:22:90:c2:23:
                    2a:9f:ea:00:ac:d2:78:c9:69:ef:e1:fc:7c:94:94:
                    f5:eb:11:d7:6a:83:6d:87:c4:7b:96:67:e1:49:58:
                    2d:af:bf:02:8e:df:70:8d:8b:11:4a:07:7b:b5:f6:
                    e1:c0:b2:7e:8f:4f:7d:79:05:29:d2:0e:af:0e:45:
                    3c:de:05:ce:33:74:3e:73:e8:bc:04:4e:40:44:36:
                    6e:05:da:16:1f:66:cb:3a:74:07:a0:c3:f6:0c:b3:
                    db:2b:76:73:2f:1c:de:1b:2e:cc:35:35:6d:3c:32:
                    c6:56:b4:64:74:8c:7b:1f:50:5c:5e:64:b9:6d:78:
                    6f:cc:fa:7a:07:93:96:7d:1c:56:07:2b:92:c3:61:
                    e4:bb:f8:c9:09:67:6e:d0:bb:05:b9:0d:42:f8:9e:
                    a5:96:5c:a0:c6:2a:88:f2:b4:49:de:7d:d9:eb:69:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:06:72:ED:EE:4E:83:EB:37:A2:B7:8C:3A:E6:5E:16:A9:F6:8D
            X509v3 Authority Key Identifier:
                keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e5:d8:4f:21:36:98:a7:60:31:ec:ea:e6:89:e3:1f:85:74:
         f7:b6:53:be:55:15:e0:d4:87:94:89:b0:6e:c1:fc:38:9b:e9:
         6f:98:8f:fb:a6:f0:e0:a9:41:6f:0f:38:4c:76:da:0c:22:bb:
         40:2d:97:40:e0:15:1f:43:44:f1:1b:8f:a6:8f:33:f3:6c:6a:
         87:dd:9f:6a:b2:e7:e4:b3:fd:00:d7:ba:e3:05:79:99:c3:66:
         d6:82:07:30:88:ff:0d:8c:ec:58:f1:bd:ab:02:7b:87:2b:6f:
         73:90:f5:4a:ed:00:ce:c3:b3:65:b5:1c:22:5c:88:3c:a6:5a:
         0b:63:58:e8:54:c9:af:37:ef:fa:b9:1c:a5:b0:d6:c2:b9:ed:
         99:e0:f4:b3:28:12:c1:8b:6a:d1:7f:ff:26:8a:5b:e9:08:78:
         3e:31:5b:34:b1:7a:fc:d0:b5:17:a6:e1:09:aa:c5:8e:51:f5:
         dd:22:1a:37:52:9a:c2:c5:42:8a:f0:36:c5:84:f6:41:9f:7f:
         6c:7a:c6:0b:21:2d:93:ef:dc:1c:05:23:ce:0e:cc:3e:a3:a7:
         15:2a:39:a2:8f:06:f8:a3:6d:99:1d:b1:38:1e:6e:68:88:f2:
         38:23:e5:f7:3b:9c:a7:89:28:19:a9:39:83:17:76:ec:9a:fb:
         c5:13:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:21 2025 by rpki-client