Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
File:                     XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json)
Hash identifier:          Z8sEoc8rJa/x4VSF48EDwyI01N4ygBgQPkIrxgYHr70=
Subject key identifier:   76:B7:2F:AF:14:9E:B8:57:61:9C:8B:35:EE:A9:BB:9D:3A:57:CE:E3
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
Manifest number:          0217
Signing time:             Thu 07 Aug 2025 02:55:23 +0000
Manifest this update:     Thu 07 Aug 2025 02:55:23 +0000
Manifest next update:     Thu 14 Aug 2025 02:55:23 +0000
Files and hashes:         1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: qKN3XFV1KD3wjb4BWAVaMwaWjNrNRDi3zaZIV556bYE=)
                          2: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: pPi15z/Whv1VOzdwch9x1UduIv6zmo0v/XxtgZH7i/0=)
                          3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: 5lEL9eS9yJhHrkaY87CyfNgKHrW5Wh6Msg6SUfVkO2Q=)
                          4: 6121C23230AC11F08C150767C4F9AE02.roa (hash: qk9SRvFWTxqsmsPfswd/7B1ZhpozisrjOm8xQ91ish0=)
                          5: CD152404495B11EF93EA3757C4F9AE02.roa (hash: 4cq9yG51A0O6Vq8JFh6wKZKMWZPp3grbIJj2LCtHk+0=)
                          6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: qM0AwU6iF9zfpDGKy2SZ3RCibpnSgHxUctYX3hAWago=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 02:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Aug  7 02:55:23 2025 GMT
            Not After : Aug 14 02:55:23 2025 GMT
        Subject: CN=6894159b-0e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:89:5d:a5:86:49:55:b6:fb:fa:33:1c:93:
                    28:d3:d2:9c:46:1a:51:fd:8d:07:25:81:f5:d3:27:
                    b9:b9:ea:fa:da:d8:be:e5:6a:25:1f:70:6a:ab:f6:
                    fd:cf:dd:08:a0:e3:12:33:8a:62:05:dc:e5:eb:73:
                    d3:5f:7e:9d:c0:1c:19:f5:31:55:bc:ac:d2:b3:f0:
                    25:08:7d:35:99:39:44:01:aa:10:8b:32:5a:7f:32:
                    cd:0b:bd:90:9b:7c:5c:8c:c8:ea:cb:a2:42:43:4a:
                    ee:78:8c:f8:e5:ed:06:45:8c:a7:32:a2:ff:ee:b7:
                    78:05:29:15:f3:d8:a0:57:2a:1d:57:1e:d3:3e:9a:
                    fe:26:23:07:86:77:1d:0a:9b:87:fb:f3:ae:2f:f9:
                    62:a5:4d:90:59:50:61:8c:a5:7f:02:b5:fa:d8:73:
                    01:96:43:62:38:93:21:80:52:f4:c3:ff:f0:17:9e:
                    9a:04:9d:54:ce:25:11:b7:c3:8a:36:80:b0:1f:09:
                    7c:31:e3:e5:90:61:42:0a:1f:e3:39:76:45:ad:be:
                    2e:65:7d:28:ba:7f:1f:75:d5:88:e1:3f:52:12:b7:
                    af:fa:bf:13:f9:dd:b8:1f:72:d3:25:18:8e:64:a0:
                    99:22:90:07:e7:c0:dd:08:d8:06:e2:63:6c:31:95:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B7:2F:AF:14:9E:B8:57:61:9C:8B:35:EE:A9:BB:9D:3A:57:CE:E3
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f9:cf:e4:12:3b:ea:61:cf:82:67:66:1d:e9:d2:96:d2:89:
         be:0d:13:eb:b7:aa:0c:af:e0:be:62:22:cf:36:ca:da:fe:22:
         95:c0:03:96:b9:e6:1a:46:d6:34:cb:09:7c:36:51:5a:74:ad:
         50:7e:3c:85:ac:35:82:f7:74:72:f8:63:ce:06:6e:f3:91:81:
         2d:c1:f4:81:9d:51:5a:77:6b:12:0a:09:84:46:61:e9:39:6d:
         7a:ac:b1:83:a8:19:91:8a:e3:63:f2:bb:66:b9:4e:68:ad:17:
         47:c7:df:fe:35:cb:6f:47:d6:86:39:41:e0:d9:81:50:0a:13:
         39:05:6a:ac:6d:9f:f9:06:c4:e5:51:9b:16:21:0c:89:d2:91:
         b1:2c:99:93:73:5f:b1:42:7a:6a:c6:52:c0:0d:af:81:76:d5:
         fc:59:77:38:c7:3c:02:22:9d:38:fa:5f:35:8e:7d:34:6c:84:
         e7:89:5e:5b:da:ff:00:4e:49:10:e8:14:d9:89:ba:48:06:dd:
         bb:3d:30:af:ab:37:5b:ec:30:93:69:db:07:ac:89:12:9f:29:
         45:98:44:64:2b:0c:92:be:da:5e:da:6f:3d:ac:9e:d7:cd:fa:
         82:6b:fd:fb:1b:b8:96:82:50:34:90:9d:7b:c3:d2:ea:a9:aa:
         47:aa:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:16 2025 by rpki-client