Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File:                     cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier:          bMPnomzM8BWkRhPUkYk4gEYcw/vi5jc/4kmknRFMiy0=
Subject key identifier:   65:C2:56:94:26:4B:1A:EA:99:57:A7:31:84:2B:A7:F2:75:DE:A8:BD
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer:       /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number:          78
Signing time:             Sun 29 Jun 2025 05:48:07 +0000
Manifest this update:     Sun 29 Jun 2025 05:48:06 +0000
Manifest next update:     Sun 06 Jul 2025 05:48:06 +0000
Files and hashes:         1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: kP/5XPfF1vM4fni4VW21eUd2P4A41ILqLsvjv4i1Hpk=)
                          2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 05:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
        Validity
            Not Before: Jun 29 05:48:06 2025 GMT
            Not After : Jul  6 05:48:06 2025 GMT
        Subject: CN=6860d396-1e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:01:77:9e:3f:fb:50:34:6b:f2:ba:cd:04:
                    65:34:50:1c:87:2d:0e:f2:fc:ac:8e:c9:d4:b6:e4:
                    41:64:32:ce:9a:17:89:71:ad:82:0d:83:00:87:e9:
                    9d:53:7c:12:85:5b:46:5f:b3:ae:22:c8:24:02:7f:
                    5a:8d:fb:fd:0f:9a:30:c5:45:86:81:d8:64:f8:b6:
                    4d:4e:d6:36:28:d7:2d:0c:20:dc:40:45:96:d9:e0:
                    91:ba:06:db:59:3f:9a:19:aa:34:73:31:8c:ef:87:
                    8c:c8:8e:24:16:0d:68:cc:a2:ae:03:b2:6c:15:7c:
                    5e:1c:48:4e:24:35:4c:33:60:bb:92:48:7c:88:e0:
                    fa:a2:49:cb:a5:32:99:a9:f6:ba:c4:5b:e2:43:07:
                    e2:cd:ba:7f:f2:f1:a6:21:c8:d4:b9:55:e4:ce:c9:
                    1f:9a:2c:63:92:5e:03:e8:0c:bb:64:cb:c5:ce:45:
                    5b:f5:bc:ce:37:39:67:5d:6a:ff:2b:d7:4f:7a:dd:
                    f9:2e:62:5a:62:87:0c:a9:fb:d4:24:ce:38:ce:37:
                    5e:d5:fc:fd:9d:56:92:c1:aa:cb:36:a6:34:46:a1:
                    66:c0:37:5c:26:cf:94:5f:3a:fb:a4:dd:4c:c6:6e:
                    60:5a:e4:3e:db:0e:ec:d1:af:e1:0b:e0:82:45:ce:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:56:94:26:4B:1A:EA:99:57:A7:31:84:2B:A7:F2:75:DE:A8:BD
            X509v3 Authority Key Identifier:
                keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:db:ea:be:87:4e:72:59:e2:f0:3d:d6:2f:85:83:ed:de:a3:
         72:f2:a3:19:45:74:23:4e:9d:a7:56:0a:c6:25:0a:ee:04:d0:
         3f:75:a4:a4:55:f5:b8:4c:1d:c3:8f:0c:8e:b8:10:14:db:de:
         89:21:65:49:0c:66:c2:7f:1a:f0:71:a0:5f:fa:be:e0:c1:db:
         68:3f:ef:60:7e:e3:e5:1c:65:70:0b:15:b4:15:ab:74:d4:9d:
         f2:f3:38:2c:34:7f:90:7b:4d:2f:19:55:08:09:a1:c6:34:c2:
         ff:76:d8:b0:01:e8:18:7d:83:71:f8:df:0f:fe:76:12:1e:13:
         3e:cd:2e:4c:70:b3:7e:7a:bd:d3:69:98:27:2f:57:95:44:c7:
         30:b1:fa:30:9c:2f:e3:bb:e5:0d:3b:4a:9d:57:95:ac:39:64:
         f1:58:44:be:37:13:22:b9:e5:25:1c:05:47:08:75:f9:f6:cb:
         92:02:0c:ba:f4:70:d9:1c:ba:fb:f7:b0:b2:21:d3:31:2a:4e:
         ef:74:88:4b:dd:3c:7c:30:32:c7:84:7d:b1:0b:4a:92:bc:20:
         84:f4:61:07:9f:5d:36:63:f6:59:76:59:c2:75:77:87:58:cb:
         57:7a:0d:2a:17:b7:a7:79:05:57:2f:c1:8c:df:79:14:b0:52:
         59:13:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:03:42 2025 by rpki-client