Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
File:                     cXie4rLIt_u60_eFpd3s7xXMFaQ.mft (raw, json)
Hash identifier:          MOEiZs24H+7Oh89TqQIMhUd7e/ImYWHt+X75VrnNziQ=
Subject key identifier:   FF:F5:6C:67:B8:F7:ED:33:A1:00:A8:8F:D9:1D:39:E0:B2:7F:4A:94
Authority key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
Certificate issuer:       /CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
Certificate serial:       0789
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
Manifest number:          077C
Signing time:             Sat 14 Jun 2025 21:16:04 +0000
Manifest this update:     Sat 14 Jun 2025 21:16:03 +0000
Manifest next update:     Sat 21 Jun 2025 21:16:03 +0000
Files and hashes:         1: cXie4rLIt_u60_eFpd3s7xXMFaQ.crl (hash: qG8ZpAN5nSpeVWHRBoo9W7cNfuNHt+BAoNgfNTqAIsI=)
                          2: 4848EB6E18BF11EBA5E2E946C4F9AE02.roa (hash: WcA0e7saPqIm2zyMau/4bmWlWFCaJQ2WBh7b1zXUWss=)
                          3: 47B8C6B018BF11EBA5E2E946C4F9AE02.roa (hash: saRxbZnY10CKxPD1pSytKLg8FuSkNaBBrOYD5Hz5qjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138171, serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
        Validity
            Not Before: Jun 14 21:16:03 2025 GMT
            Not After : Jun 21 21:16:03 2025 GMT
        Subject: CN=684de693-8fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:a0:f7:30:e2:8a:b8:f9:0e:a1:ea:9e:3b:
                    e6:f5:2b:ea:f1:76:8a:33:44:09:0c:8b:cb:e0:52:
                    ad:89:ce:de:72:17:f3:9c:32:b7:e6:c3:95:2b:22:
                    f9:7c:10:21:de:2a:a6:86:83:60:03:28:82:e6:ec:
                    08:a6:3b:e8:a1:45:36:4d:8a:2a:75:0f:f9:5b:02:
                    d4:1c:9f:72:8b:eb:0f:9d:9d:03:39:8f:fc:0d:30:
                    7d:c2:30:0a:df:f6:6a:e3:45:18:34:9b:e0:ae:5a:
                    19:6f:ab:b1:bc:5c:ca:83:45:33:83:81:46:db:80:
                    59:a6:da:5b:da:c6:f3:35:03:71:c7:12:e5:02:6f:
                    6f:04:0f:a0:67:e1:4b:ea:e5:1e:e8:05:f5:83:c7:
                    cc:af:c9:19:87:9a:52:4d:26:5d:a4:9e:ea:0e:b0:
                    b3:ed:9d:69:78:4b:78:88:38:a3:79:7e:22:b8:d1:
                    a3:80:02:bd:e7:5a:08:64:c2:f7:2f:69:33:c4:3d:
                    77:a0:8c:10:36:2b:31:4f:c0:ef:94:33:49:a4:c7:
                    22:5f:2a:36:f9:21:17:d5:09:59:ca:ea:83:d7:83:
                    cc:9d:f3:0c:2d:98:03:37:02:5e:89:63:49:9b:27:
                    e6:24:28:dd:30:84:ba:c2:a4:46:bc:09:21:4d:fc:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F5:6C:67:B8:F7:ED:33:A1:00:A8:8F:D9:1D:39:E0:B2:7F:4A:94
            X509v3 Authority Key Identifier:
                keyid:71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:99:54:d2:e8:2c:04:8e:25:a5:69:83:81:76:06:d2:8a:
         ca:37:0a:e2:1b:cd:28:af:9b:65:d9:96:5c:d9:95:47:98:b2:
         81:da:3c:16:db:21:8b:ef:a8:6f:a7:e0:35:27:d9:48:53:b6:
         cc:a9:5d:1f:e0:26:36:c7:91:42:e8:ad:65:67:0b:31:3b:fc:
         6c:2f:24:c0:2f:3e:ce:c0:36:bd:21:05:e3:69:e4:11:49:77:
         5a:ec:8a:ac:72:66:07:84:bc:57:24:f1:14:46:2e:ab:d8:bf:
         04:bf:1b:83:96:43:26:27:b0:b0:80:a6:2f:10:50:7a:43:53:
         ed:f7:fb:02:d8:45:83:80:f1:e9:05:87:5d:51:04:de:8a:6b:
         a7:60:50:a3:23:1a:1a:0f:44:1a:8e:50:e3:9a:f1:71:65:20:
         2f:5d:45:37:74:62:44:97:3b:7e:d3:15:c7:20:a9:c8:37:b6:
         d7:30:7c:45:22:26:67:f3:02:88:27:c2:16:f6:d6:d9:dd:d1:
         bd:64:4e:78:cc:30:ce:3a:5a:d5:88:0c:c8:98:47:94:0d:fe:
         95:15:72:08:b5:6c:8e:f7:00:7b:3d:df:2d:08:05:a0:41:2d:
         2e:e2:b3:d9:12:3f:df:3c:b7:a1:7e:cd:a4:81:68:3d:19:30:
         78:09:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:43:45 2025 by rpki-client