Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File:                     xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier:          XxbMtLedtLTBRbGq6cMhn23etQ4aFC8J7H0uDuSvxGk=
Subject key identifier:   A9:06:A8:1E:7D:23:76:43:EF:CA:A9:3F:4F:CF:AA:1D:E6:B9:29:1C
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer:       /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial:       07D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number:          07C5
Signing time:             Fri 22 Aug 2025 21:19:47 +0000
Manifest this update:     Fri 22 Aug 2025 21:19:46 +0000
Manifest next update:     Fri 29 Aug 2025 21:19:46 +0000
Files and hashes:         1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: ikIrVGyn7PM8EkTU83SiOxsgsugIyuVkD9QWMANSU9M=)
                          2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw=)
                          3: 21EE9510083211EB81509633C4F9AE02.roa (hash: wjVXkLI0cRiF7TL9Zg9ZcPtd+sgFgSN+IcqPU2UoUBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
                          rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2000 (0x7d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
        Validity
            Not Before: Aug 22 21:19:46 2025 GMT
            Not After : Aug 29 21:19:46 2025 GMT
        Subject: CN=68a8def3-7a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:cf:cf:8c:bb:dd:c7:a5:7e:83:2f:44:74:
                    b9:a5:af:09:12:d7:f4:03:94:ec:83:2c:7f:ed:0b:
                    4b:1d:53:bf:2c:47:14:ce:7c:a4:67:f1:8b:86:73:
                    df:de:88:24:94:da:1e:f2:23:54:2f:13:64:d6:2e:
                    4d:f5:3d:13:f5:e5:52:4e:10:ac:8c:84:01:a4:b7:
                    ba:8f:10:cd:55:6e:91:5e:bf:50:be:a1:67:17:f2:
                    13:77:43:d5:5f:5e:c9:00:a9:11:f5:3f:e2:59:34:
                    3f:6c:78:59:3d:b7:78:53:00:fd:d4:a8:11:fa:60:
                    11:e2:ee:64:e1:d5:b5:60:6b:22:bb:26:1d:2e:67:
                    e8:e1:80:c2:d7:27:f9:38:7d:3b:22:05:19:52:24:
                    1e:4b:a0:43:69:7c:6d:25:28:bd:5a:4d:4d:95:e6:
                    93:66:38:80:49:8e:d7:3d:ea:3a:cd:7a:47:95:fe:
                    18:f6:d5:a1:92:9e:1c:63:e2:7e:74:4e:70:65:d8:
                    e1:ad:0d:65:a1:08:13:2c:08:7d:35:56:7b:3b:00:
                    83:f3:7b:df:79:1a:a2:a6:a7:39:37:c9:88:a7:2f:
                    47:41:40:a7:3b:c0:42:00:58:6f:70:7e:5e:00:5c:
                    ff:13:f2:c0:14:72:50:08:74:f0:50:41:cd:f0:c9:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:06:A8:1E:7D:23:76:43:EF:CA:A9:3F:4F:CF:AA:1D:E6:B9:29:1C
            X509v3 Authority Key Identifier:
                keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:b0:b5:96:e8:e0:e1:df:15:e6:28:47:05:71:57:c7:91:
         d5:15:ba:5b:5e:33:0a:47:94:aa:0d:f8:1e:02:28:97:66:6e:
         54:bc:cc:f3:3c:75:f8:bb:97:bc:ef:f8:ca:0c:ff:80:07:63:
         be:65:93:a2:31:26:74:2f:97:06:5c:d1:c8:2f:08:a6:4d:31:
         aa:9f:d6:0a:12:d3:56:a7:e8:d2:a5:e0:4a:a9:5e:5a:12:06:
         0e:1c:9a:d6:36:ee:62:e3:2d:96:75:77:d7:e5:b6:ad:54:60:
         83:21:17:f2:13:fa:fa:d9:e7:cc:28:29:77:c0:60:f9:8e:6b:
         d6:59:e7:6a:8e:ce:a0:e1:33:4f:e4:d0:95:7e:0a:cd:40:1f:
         01:67:87:1c:8f:b9:a2:1b:7d:d1:76:d6:5d:da:ca:81:f3:72:
         0c:e4:c8:4c:2a:04:d7:3f:24:49:9d:09:67:99:2a:3d:c6:fe:
         f4:2d:e1:da:69:8c:f8:b2:f1:70:12:2b:c1:62:fc:53:4e:cb:
         20:52:da:c7:09:85:b9:14:30:bf:2f:b4:39:7c:f5:75:54:c5:
         64:aa:58:a8:a5:9d:a7:2b:d9:aa:43:6a:1f:3a:89:da:cb:4f:
         a2:e4:85:d1:63:79:26:09:9c:4d:06:47:e8:64:2a:b6:3b:3f:
         1a:02:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:03 2025 by rpki-client