Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File:                     MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier:          UZWoW5gHpN04qjyljRFwSatzugWe3qemEeppISPXgwk=
Subject key identifier:   71:62:5E:51:BE:87:5B:C1:47:3A:11:62:21:88:0C:25:0E:84:A9:89
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number:          06B8
Signing time:             Fri 22 Aug 2025 22:21:57 +0000
Manifest this update:     Fri 22 Aug 2025 22:21:56 +0000
Manifest next update:     Fri 29 Aug 2025 22:21:56 +0000
Files and hashes:         1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: rS2T9C+RICSGkl+1/IfjwoS6+jC+Fyq+4jb0Am4pZsU=)
                          2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=)
                          3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=)
                          4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: 8KuusaWdM7XE0SsLxUanmFi6arr5FObPV+arfCP9uGg=)
                          5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Aug 22 22:21:56 2025 GMT
            Not After : Aug 29 22:21:56 2025 GMT
        Subject: CN=68a8ed84-53c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3a:78:cf:6f:24:d2:ff:cb:a5:09:15:a9:c4:
                    14:dc:c1:38:e3:66:7b:3e:d3:34:88:75:9a:f1:f8:
                    4b:11:f9:48:dd:cf:62:47:f0:65:a9:c9:a4:0b:88:
                    20:42:6f:26:37:d2:62:87:06:33:09:74:49:41:15:
                    66:4a:83:bd:a8:7b:a0:5c:c4:d1:66:6f:9f:46:5c:
                    ce:40:6b:ec:74:0c:11:b0:9e:3e:42:af:bb:61:59:
                    2a:e5:cb:80:97:09:f0:08:e0:b7:7a:20:2c:81:d3:
                    2e:3f:dd:40:e5:43:41:43:47:4c:23:12:ad:1c:8f:
                    58:5f:01:07:1c:6d:a2:e3:d4:b8:6b:68:30:86:3d:
                    bf:70:23:12:c6:d1:88:3b:ee:df:08:a8:fd:e8:0d:
                    bb:e4:13:c5:f0:ed:c2:98:44:68:29:05:97:dc:f0:
                    62:1d:73:d3:4a:0a:ff:7c:a4:20:af:3f:8f:3c:f9:
                    3c:c3:de:26:e7:b8:0e:75:b7:f6:da:3d:df:bd:4b:
                    a1:1e:06:5f:e6:58:f8:a3:d9:25:98:91:63:e4:b0:
                    90:2f:5c:32:30:7c:ec:42:2a:5b:2c:15:96:f8:3d:
                    ea:d4:c5:91:4f:e5:ac:24:8d:7c:97:99:c0:58:95:
                    73:bf:fa:55:53:55:f2:00:a1:8e:5a:9a:22:63:ff:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:62:5E:51:BE:87:5B:C1:47:3A:11:62:21:88:0C:25:0E:84:A9:89
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:05:9c:93:3d:32:5c:93:57:85:d9:81:ec:5f:0a:39:93:
         6b:0c:67:42:a2:b1:d1:ae:17:2a:6c:e4:ed:e7:f7:70:47:44:
         78:06:41:ee:32:10:cf:c6:43:8c:da:95:83:01:95:8b:91:47:
         a7:91:7f:36:c5:8c:24:e9:13:e1:3c:f9:df:89:1e:d4:46:52:
         b5:5a:82:86:bf:08:57:2e:65:8b:f7:2a:86:ef:64:fc:81:a4:
         0e:68:22:f6:14:da:13:23:95:01:33:29:14:d1:c9:91:a6:e0:
         7a:6f:90:3b:e8:bd:f6:bb:d6:23:96:7e:18:d4:65:01:1e:0c:
         fc:73:59:e0:e9:b8:dc:22:b6:02:1d:e4:7a:a9:55:e5:19:71:
         36:24:09:34:ae:24:f8:6c:12:7c:b2:1f:30:77:3e:78:61:4a:
         8f:44:a6:77:3b:b4:0b:b2:14:53:b5:40:e4:63:53:a4:a7:7a:
         70:41:f4:be:08:5b:bc:ac:1f:e4:09:db:21:43:34:c6:9b:90:
         bd:fe:b2:b9:dc:0c:ac:ac:61:8f:54:61:ea:a7:9e:53:66:6f:
         bc:4b:ef:87:52:ff:c6:27:dc:eb:ad:11:36:0b:c2:05:9e:9f:
         c4:77:29:a7:82:bd:3c:84:52:58:77:83:d9:d8:c2:ae:50:77:
         94:6e:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:31 2025 by rpki-client