Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
File:                     STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json)
Hash identifier:          FJinuxkOu6Lf+i2QUu9grYoH2+cwzOc/vjli7kvh8Sk=
Subject key identifier:   2F:DD:00:F3:8A:14:1C:08:3F:27:C2:68:E0:7E:D4:12:04:20:88:D6
Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C
Certificate issuer:       /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
Manifest number:          A0
Signing time:             Thu 07 Aug 2025 06:50:52 +0000
Manifest this update:     Thu 07 Aug 2025 06:50:52 +0000
Manifest next update:     Thu 14 Aug 2025 06:50:52 +0000
Files and hashes:         1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: RlHazE9jvRxg0bNOpNHVpBeYSWUxd2y0z+mJ8+Kk5Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl
                          rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142E1E, serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
        Validity
            Not Before: Aug  7 06:50:52 2025 GMT
            Not After : Aug 14 06:50:52 2025 GMT
        Subject: CN=68944ccc-e45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:85:44:7c:57:d9:d5:0b:11:25:8d:ea:f6:13:
                    e6:99:61:68:84:06:7e:ae:96:74:12:b7:bc:4f:e2:
                    d6:73:43:a2:69:e6:99:fa:31:5a:48:a3:6d:7a:00:
                    52:62:d6:59:13:4d:5b:13:ad:6a:2f:9c:c1:37:62:
                    3d:f6:7f:3a:15:f1:ae:b4:f9:63:eb:b6:42:1c:e3:
                    18:f8:81:50:1f:3e:ed:b2:dc:75:e8:ca:ef:24:37:
                    f3:93:f3:4e:49:a3:02:7e:69:f9:03:30:e1:15:01:
                    ae:b2:56:cf:1c:c7:02:82:30:ad:2a:b7:b0:98:e8:
                    ad:87:54:3d:7d:2f:75:4b:93:b7:5a:e6:55:c4:af:
                    29:b8:ff:4e:04:71:4e:fc:63:94:92:a3:65:89:da:
                    45:81:ff:80:bd:cf:b6:18:d9:a6:60:94:f5:b2:b3:
                    c8:1e:85:d8:20:6f:00:d0:4f:f2:97:96:4c:55:6e:
                    c8:a1:1a:85:45:96:a2:39:5c:9f:77:3f:94:2b:bb:
                    a6:3e:54:35:18:20:5f:1e:0b:2d:e1:c3:90:9e:97:
                    46:c5:75:90:65:00:75:17:17:03:dc:bf:cd:94:2e:
                    f5:f9:03:64:e7:13:d3:19:07:af:fe:bc:29:88:1e:
                    be:b9:48:b0:be:aa:18:4e:b1:d4:8c:ff:43:cb:ac:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DD:00:F3:8A:14:1C:08:3F:27:C2:68:E0:7E:D4:12:04:20:88:D6
            X509v3 Authority Key Identifier:
                keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:37:be:96:08:09:64:ec:e3:99:c5:12:c0:1a:ba:25:47:ec:
         cf:f2:40:c1:27:af:47:2a:68:14:ef:91:cd:43:42:05:c3:26:
         f6:e9:6f:7d:30:d8:8c:b3:5c:72:87:d5:2b:62:bb:53:01:66:
         dc:f5:b4:d9:0f:5a:43:a3:64:6e:3f:20:49:c4:ac:23:7b:39:
         ae:a8:2a:47:e7:e0:14:02:10:96:88:b7:71:de:b5:6b:9d:4f:
         8c:49:36:78:c2:d9:c9:61:cb:5b:dc:72:dd:4e:72:63:fb:89:
         24:2c:dc:b9:14:6e:e0:93:ee:05:48:4b:0b:2c:ec:71:6e:fe:
         70:bb:e3:03:9c:eb:02:57:65:24:59:5f:98:05:1b:76:48:5f:
         36:7f:9c:a0:d3:b5:6c:1e:b4:01:0f:3e:75:b0:6e:75:1f:3c:
         46:a5:d5:5b:e5:fb:2b:3c:57:7c:02:d2:c6:4b:ef:ff:32:6f:
         f7:2a:6b:49:fe:8f:34:a1:60:3d:1f:23:fe:08:d7:d9:07:6c:
         ea:3b:ab:1a:d9:f4:5f:d9:3c:bf:b3:00:16:e2:54:67:31:ad:
         2c:82:13:76:42:1b:69:7a:3c:29:1e:e9:4c:92:15:5d:eb:dd:
         83:f5:01:de:9d:bf:92:fb:0b:42:be:6b:2d:80:f5:54:94:92:
         f8:83:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:39 2025 by rpki-client