Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
File:                     xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json)
Hash identifier:          wSY69r10CNylTLwtBpb4W6xBDecof8TTX6h9neS0wuE=
Subject key identifier:   4B:03:DA:70:33:37:84:3E:CC:35:9A:EB:DD:F3:A1:05:14:41:FE:03
Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
Certificate issuer:       /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
Manifest number:          01E6
Signing time:             Sat 05 Jul 2025 02:59:34 +0000
Manifest this update:     Sat 05 Jul 2025 02:59:34 +0000
Manifest next update:     Sat 12 Jul 2025 02:59:34 +0000
Files and hashes:         1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: xl7OeAAONIz/vU5d2nrqD3uFX2kjrPIbNnrmjpS/QG0=)
                          2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
                          rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
        Validity
            Not Before: Jul  5 02:59:34 2025 GMT
            Not After : Jul 12 02:59:34 2025 GMT
        Subject: CN=68689516-63a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:ff:74:c3:8c:78:7b:93:89:ca:63:8a:01:
                    0e:51:15:e4:3f:82:c7:60:cf:3d:0e:eb:7d:6f:2d:
                    b8:af:9b:1c:1f:8a:f7:05:38:5e:0b:c5:05:e8:30:
                    17:93:cd:fb:20:92:c3:a6:c3:3a:e2:63:9a:23:c0:
                    bf:85:38:18:1f:1f:01:16:84:95:af:ec:3f:3c:8a:
                    62:60:3d:a9:f2:6c:a9:e8:3a:d5:84:4b:56:c5:90:
                    3e:6a:e5:03:94:93:49:45:31:76:5b:69:8a:61:86:
                    92:93:a6:6e:28:c7:16:04:03:73:8d:f5:ca:bb:f6:
                    9c:97:d1:22:36:5f:63:41:6c:5f:0d:16:e3:6a:55:
                    a8:b0:e5:fd:ed:f8:39:8e:2a:b5:8f:86:ef:ed:e9:
                    b2:3f:99:93:4d:a5:a7:4d:5a:b8:86:c3:6c:db:89:
                    41:72:79:78:f2:ae:e0:42:92:47:3c:7c:4d:3f:dc:
                    fa:97:b6:be:36:28:57:d0:8d:ac:0d:3d:0c:17:d9:
                    a7:33:65:f7:0a:9c:be:ed:52:db:25:d7:52:47:12:
                    f8:71:ec:31:00:ba:d8:12:c6:d2:b6:92:43:39:10:
                    7a:ef:71:94:c3:d1:7c:0e:db:c6:f0:66:51:09:f1:
                    8f:27:7a:3a:30:39:8b:c6:b7:c5:67:7e:d0:00:ca:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:03:DA:70:33:37:84:3E:CC:35:9A:EB:DD:F3:A1:05:14:41:FE:03
            X509v3 Authority Key Identifier:
                keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a4:3b:a7:d9:6c:de:8f:19:9e:59:84:72:4c:8f:83:21:c5:
         66:99:69:c8:1f:87:bb:52:cf:72:7c:19:39:c6:24:e4:87:f3:
         b8:97:c4:38:b1:ea:9d:ea:57:84:d8:1d:7a:58:96:7a:a8:ce:
         12:e1:5d:70:de:46:96:23:44:9d:e3:e0:68:48:60:f2:08:80:
         3c:c1:45:da:96:0c:f3:87:4d:1f:76:7f:a0:f0:45:1e:b5:bd:
         38:76:35:e7:15:54:85:a5:87:93:f7:8e:72:18:be:a2:16:56:
         bd:42:9e:86:ac:48:51:0b:4d:9f:b6:64:68:23:db:97:9b:57:
         ce:20:61:da:2c:f5:dd:af:a9:1b:e8:4f:00:f5:92:19:54:31:
         d2:af:91:81:44:ac:6d:7d:43:8f:af:8a:52:6e:34:8d:cc:6d:
         ee:f5:f9:ac:64:4e:63:59:31:74:aa:b3:04:0a:3f:85:77:9e:
         d8:78:9c:a6:64:d8:78:79:d6:43:f3:a3:27:9e:3b:0b:89:cc:
         7c:7c:de:5a:e5:2a:e8:f9:6d:77:63:48:74:26:88:19:75:d7:
         6c:d4:fe:3d:6b:7d:d8:fc:a5:86:db:af:84:74:50:51:57:aa:
         1f:68:0f:7c:a2:99:27:7a:3b:29:ae:5c:8d:96:59:82:04:41:
         a0:67:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:13:17 2025 by rpki-client