Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
File:                     fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json)
Hash identifier:          Xh9xHo+mgU8oTGPfsm7kKV1SVFzYg0toAfX7xCXcn1w=
Subject key identifier:   EF:4E:4B:BD:71:1D:64:60:05:67:3C:09:2F:DD:9D:A3:0C:58:B9:73
Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F
Certificate issuer:       /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
Manifest number:          03F9
Signing time:             Sun 15 Jun 2025 00:11:07 +0000
Manifest this update:     Sun 15 Jun 2025 00:11:07 +0000
Manifest next update:     Sun 22 Jun 2025 00:11:07 +0000
Files and hashes:         1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: WNLZcHvchTloLFKNGd1o29QHF+SzDCS9+06eWCtD8Wc=)
                          2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: t8XuoQmVWFDhGIw5z4xI5py7yU/yXUz4bzdYNO89YHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl
                          rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 00:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F700, serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
        Validity
            Not Before: Jun 15 00:11:07 2025 GMT
            Not After : Jun 22 00:11:07 2025 GMT
        Subject: CN=684e0f9b-4ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:07:ce:72:90:0a:f0:db:e8:72:d7:9f:19:
                    91:b6:8a:0f:39:bc:8f:1d:6e:31:98:f8:60:60:8b:
                    1b:40:d2:c0:92:d4:0c:c2:c9:6e:89:20:0c:dd:09:
                    90:84:c1:90:81:e6:ce:3a:46:d5:c8:72:79:f7:e9:
                    5d:fe:e9:85:2e:04:3c:62:61:ee:f8:d8:25:cc:cd:
                    5d:c9:93:98:22:bb:f6:8f:c0:41:d7:25:8d:f9:2c:
                    9b:c6:6e:2c:21:16:c3:70:31:6d:9a:3e:a2:f9:e4:
                    8e:40:97:1c:e1:77:29:68:94:50:4c:08:1d:a7:89:
                    71:c1:9b:35:ce:50:f7:3d:a3:c3:9b:11:0d:58:9a:
                    ce:8f:71:15:54:df:3b:f6:36:f6:ec:0f:e1:27:b5:
                    b4:9f:a5:6e:27:62:79:5c:d1:85:3e:94:63:8c:a0:
                    3d:9c:f5:d9:6b:5b:5c:b3:d7:7b:ca:a0:d4:87:74:
                    99:e3:ae:29:04:bb:fe:9f:80:29:fc:fb:be:b4:f2:
                    8f:74:8b:d9:2c:b6:c2:49:f3:53:10:04:bc:8c:70:
                    88:9c:94:a1:a4:f9:49:6a:24:13:95:c7:78:05:4a:
                    bf:04:43:fd:8b:3f:77:65:ee:89:ea:19:2c:d4:f2:
                    75:7c:5b:48:cf:5d:dd:8d:c2:e0:db:f8:7b:f4:17:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4E:4B:BD:71:1D:64:60:05:67:3C:09:2F:DD:9D:A3:0C:58:B9:73
            X509v3 Authority Key Identifier:
                keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:79:71:22:e9:e8:bf:cf:24:1c:28:c9:5c:7b:bc:56:d9:bb:
         58:06:59:6c:83:27:34:b2:c4:95:a4:8a:76:49:bc:64:ca:a7:
         ed:86:8d:b4:78:cd:a5:54:75:54:e7:c8:7b:73:87:17:dc:dc:
         c4:a1:da:53:41:4d:cb:f9:55:8e:16:67:46:df:04:1e:a6:98:
         5f:b6:16:fa:ff:d4:ce:35:05:a7:39:40:94:c0:d3:47:04:be:
         96:73:d8:a0:6a:22:76:93:5b:bc:1a:05:4a:8f:12:10:a8:bd:
         38:aa:5d:51:95:a3:a4:10:06:24:e5:5f:af:76:dc:6c:5d:ea:
         06:85:86:f2:62:d5:85:a1:71:8e:9b:2e:88:50:6e:45:3f:b6:
         3e:e2:e0:4d:48:4d:46:d3:43:07:c2:a0:57:cb:de:6f:aa:42:
         25:71:18:00:69:f2:d7:e6:14:9c:da:f5:e1:f6:58:d4:4f:19:
         de:2c:93:b6:bd:fd:ce:02:f7:b9:6d:fb:84:be:76:34:37:04:
         66:e3:f2:22:46:9f:13:54:85:68:f6:7a:b9:5f:19:1f:4c:67:
         34:35:11:de:55:90:50:cb:de:ce:2c:6c:b7:9d:1d:38:ad:a2:
         73:58:4d:24:08:a7:e6:12:47:24:69:f0:4b:8e:b8:1a:81:67:
         fb:0d:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:24:02 2025 by rpki-client