Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
File:                     MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json)
Hash identifier:          UONOjPtUddNS5AXEVy+g7GgoYWApcwWD9qH8pLrYFcA=
Subject key identifier:   97:FB:2A:4A:B8:E1:29:BE:46:BE:99:81:2E:50:8F:08:54:DB:54:7A
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Certificate issuer:       /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial:       14FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
Manifest number:          14EF
Signing time:             Sat 02 Aug 2025 16:59:07 +0000
Manifest this update:     Sat 02 Aug 2025 16:59:06 +0000
Manifest next update:     Sat 09 Aug 2025 16:59:06 +0000
Files and hashes:         1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: 14jFhOWlRLAT9UHBz9nrrnv4qxqfNoTyM0ygH2ugzLc=)
                          2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: pz/sh5ewtugJGaQEjLj/4LhT6VQlQpXzMK/OXn+CHaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
                          rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 16:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5370 (0x14fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
        Validity
            Not Before: Aug  2 16:59:06 2025 GMT
            Not After : Aug  9 16:59:06 2025 GMT
        Subject: CN=688e43db-7f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:6a:8d:d9:f6:fe:96:9c:b0:41:9b:ce:91:
                    aa:ae:03:db:50:56:5e:f4:11:7b:eb:51:63:1f:1a:
                    e6:00:0f:18:2b:a1:e8:4d:b8:74:22:2e:ff:9a:19:
                    52:9a:c4:1a:db:32:30:f4:eb:23:d0:fd:7e:f2:ad:
                    23:00:2e:42:f9:e0:00:79:d0:37:ed:cf:e8:60:1b:
                    56:4f:fa:00:b9:4e:fe:d5:ff:43:61:0f:ac:f2:08:
                    36:54:3d:f8:b2:2b:20:4b:b8:ab:74:d2:5f:d7:41:
                    0a:47:0c:9f:53:3c:e6:37:ea:3d:12:04:09:c8:c2:
                    85:72:05:86:2a:82:96:8c:46:38:db:11:68:37:73:
                    b1:7b:b9:45:56:c2:ed:a9:2d:c7:97:d5:62:ee:3f:
                    b4:75:9d:12:79:fb:27:97:f0:ba:ce:5d:b7:71:11:
                    6a:6d:6d:f2:b9:0d:99:8d:01:c9:c3:2b:1a:be:c6:
                    1a:c7:1f:95:13:16:d0:69:15:b4:d3:09:17:98:f9:
                    e7:55:a0:6b:bf:81:05:1b:6b:cb:be:6f:3b:da:d3:
                    97:5a:18:b1:ff:d9:b4:b5:bf:2a:95:09:6b:2c:88:
                    5c:35:67:3f:61:c5:70:6b:75:d3:50:aa:dc:16:7e:
                    39:8e:87:ec:70:48:78:5a:00:a8:b4:49:e0:d4:d6:
                    a5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:2A:4A:B8:E1:29:BE:46:BE:99:81:2E:50:8F:08:54:DB:54:7A
            X509v3 Authority Key Identifier:
                keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ba:51:24:94:0e:e2:2e:04:c6:2e:57:04:d2:bf:b1:33:e5:
         ba:c2:01:5d:9e:eb:19:20:ab:ce:a4:a4:3e:31:23:a9:4e:86:
         dd:e4:e5:92:6a:10:8d:b3:d0:80:47:67:55:9d:52:29:56:bb:
         19:43:e4:58:a5:81:fa:15:6c:79:f6:ed:26:18:f7:56:1b:e0:
         aa:50:0e:08:f9:a2:3a:96:ea:47:05:9d:fb:bd:46:b0:e4:46:
         f9:e8:b6:6f:15:db:bc:dd:ea:98:ce:fb:f7:f4:8f:03:6c:98:
         9b:ac:09:e3:d9:f7:39:7e:35:70:d4:d2:0f:ea:fd:b3:cb:a6:
         eb:dd:43:8b:4d:93:07:08:64:55:34:eb:77:bb:bc:b8:d0:74:
         33:1d:23:3b:aa:26:75:bf:86:41:db:20:2d:59:0b:89:82:43:
         cc:43:7b:64:d4:51:4e:a1:8d:e0:f3:10:83:a1:55:da:b7:2e:
         9d:a6:3d:9c:a6:1e:da:45:f0:76:c9:64:cf:aa:9f:1c:29:6b:
         b7:a7:f9:6b:cf:45:01:9b:d0:ae:00:7f:76:51:4f:c4:04:5f:
         15:f6:6b:0b:49:10:5d:c1:3e:48:f9:a8:f9:17:4f:23:f0:30:
         78:83:8b:ce:41:c9:a9:1f:1f:9a:db:48:ef:93:01:0f:60:4b:
         68:c1:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:53 2025 by rpki-client