Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File:                     5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier:          PEWM0+ayg7XVs0nHMuGs7/vwDpDlnEY16EHfQxbiI20=
Subject key identifier:   07:74:CB:C3:09:06:03:A4:57:DA:64:9C:FD:17:F6:ED:16:B7:1A:20
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer:       /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number:          0108
Signing time:             Sat 23 Aug 2025 05:09:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:09:39 +0000
Manifest next update:     Sat 30 Aug 2025 05:09:39 +0000
Files and hashes:         1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: vKhF1vduFdP4ANS/pcvTmPUfCrEXYccplAtHPoIgGhA=)
                          2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: JMqNNeHY27Hx5eJ7SJKoh8TY1qwKjQvReEB44gwMvpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
        Validity
            Not Before: Aug 23 05:09:39 2025 GMT
            Not After : Aug 30 05:09:39 2025 GMT
        Subject: CN=68a94d14-c739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:15:30:ca:18:53:94:51:2f:d9:cc:f0:a5:
                    90:78:b7:73:b3:af:5a:00:41:53:81:30:31:4f:a3:
                    e9:29:81:20:a8:5b:b3:99:90:d1:c5:07:5a:dd:89:
                    41:17:80:77:ad:9d:43:9a:d6:4e:5d:f2:78:cc:6a:
                    89:09:8c:ce:75:5e:63:32:6a:7f:02:5c:6b:ae:79:
                    af:99:48:06:4e:85:51:16:e0:2c:82:d3:e7:c0:ef:
                    70:fb:18:e9:e6:1c:47:f3:ac:8d:b2:4a:b5:91:de:
                    9b:2a:49:24:06:f4:d4:c4:aa:06:2d:f6:70:9e:4c:
                    d9:b3:89:e2:a0:ce:39:24:a6:36:1b:bc:ec:a1:af:
                    e8:96:95:6a:f1:3a:14:2e:91:4a:cc:a6:7e:ed:19:
                    35:a3:74:00:2a:87:ce:6e:40:4f:33:d0:8d:30:a8:
                    74:d2:f1:7a:05:db:75:f0:5a:74:8b:83:07:70:4b:
                    64:18:24:07:79:dc:b8:a8:db:3b:29:69:9d:6f:bb:
                    e8:67:8d:8a:a9:31:05:8f:94:93:40:43:b5:1c:bf:
                    0d:32:17:a7:8f:4e:98:d9:51:0a:ff:30:76:85:2b:
                    e4:c5:99:db:28:85:6a:b6:75:07:2f:ba:cf:45:84:
                    de:dd:9c:42:df:19:3a:aa:9d:7e:30:64:be:4b:03:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:74:CB:C3:09:06:03:A4:57:DA:64:9C:FD:17:F6:ED:16:B7:1A:20
            X509v3 Authority Key Identifier:
                keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:ec:f0:89:eb:f9:76:d1:39:31:ed:98:4e:f3:94:c7:f8:
         af:82:12:da:28:cf:ae:f5:a2:44:a0:d9:65:22:62:b4:a2:74:
         1c:89:91:61:50:f6:aa:c3:a4:75:fc:12:a7:c3:c0:7c:de:0f:
         53:5b:b8:ec:d4:38:1e:87:38:8a:73:3e:90:f7:80:c0:ce:96:
         51:ca:3b:a7:ab:81:d6:6e:c4:1f:7d:78:06:85:6f:25:80:a6:
         aa:be:89:93:3b:6a:c7:be:32:1c:19:09:cd:05:06:07:18:16:
         c0:be:b1:a7:c6:d8:c6:5f:cd:ee:d3:0b:e5:e6:f0:12:e0:91:
         b9:1c:45:b4:8c:54:41:90:c7:f9:cd:c4:8c:43:40:e3:4b:42:
         f6:92:a6:38:9b:a6:e6:60:ba:ba:3f:30:35:36:37:e2:32:7e:
         bf:cb:b1:ec:0d:29:a6:10:f8:f2:97:37:8e:5a:74:01:db:76:
         29:37:64:90:c3:43:8f:06:0e:60:34:86:9b:e1:cc:38:87:f0:
         33:9c:b7:4a:8f:8d:a2:50:bf:3e:0f:8d:a6:31:83:d4:bf:14:
         bc:e6:6a:ed:40:e7:bd:a0:6d:75:e3:a1:2d:dc:f7:54:d7:2d:
         ec:c9:57:cc:1b:76:87:bf:bd:8b:21:a9:bd:fa:f9:48:3c:e2:
         87:c6:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:27 2025 by rpki-client