Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
File:                     b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json)
Hash identifier:          ZxuKS/qMQR9zeVXsmbDc0a1TymL4C3jnNR7l0QQeuJo=
Subject key identifier:   C6:83:2D:89:4B:4B:E0:5B:79:ED:68:DA:05:76:10:C8:CD:02:28:AE
Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
Certificate issuer:       /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
Manifest number:          0F
Signing time:             Sat 09 Aug 2025 08:36:18 +0000
Manifest this update:     Sat 09 Aug 2025 08:36:18 +0000
Manifest next update:     Sat 16 Aug 2025 08:36:17 +0000
Files and hashes:         1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: y9kzkZw6vUqdOuBJJMgtUjXXMfHTihD0AazlIaf1C7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
                          rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
        Validity
            Not Before: Aug  9 08:36:18 2025 GMT
            Not After : Aug 16 08:36:17 2025 GMT
        Subject: CN=68970882-d86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:c2:5f:ac:4b:23:b8:a1:7a:a8:4c:83:5d:
                    a9:07:b6:9b:1b:45:94:eb:69:8a:da:b9:05:c6:9b:
                    b5:98:3b:3f:fe:de:10:0b:10:c6:ff:49:23:53:69:
                    2d:4e:89:bb:40:ed:0d:ef:b3:b0:1f:44:53:29:5c:
                    bc:1f:2f:62:d9:90:08:c2:08:df:44:6f:67:67:e7:
                    18:49:12:97:43:c7:cb:58:fd:6f:bf:13:a7:44:e8:
                    11:9c:05:c8:d4:f7:61:76:db:a7:74:bf:e8:c4:d0:
                    f1:c2:42:46:28:2e:89:4a:12:1f:0b:16:58:5b:25:
                    5c:31:c6:b9:e9:c8:63:86:56:81:8d:40:a4:d4:83:
                    32:7f:bf:3a:bd:33:75:e1:67:55:56:c8:b7:a9:ca:
                    f0:2c:6e:9d:bd:f6:77:98:23:f4:92:fa:ac:cb:6d:
                    b6:3b:24:00:01:4c:ec:ad:be:b5:94:b3:13:0b:97:
                    07:05:8f:30:0e:af:ef:86:df:2b:f2:b2:e6:de:87:
                    98:27:0d:65:6c:31:48:79:c5:fb:7c:08:d9:18:2c:
                    81:a4:33:1b:b9:c2:fe:e0:67:45:ba:a3:64:e4:7e:
                    28:66:e0:97:e5:da:62:51:a0:73:d5:43:91:75:36:
                    3d:75:88:de:de:8f:61:61:96:3f:63:d5:a6:b6:09:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:83:2D:89:4B:4B:E0:5B:79:ED:68:DA:05:76:10:C8:CD:02:28:AE
            X509v3 Authority Key Identifier:
                keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:de:3e:d3:e5:e6:22:2e:08:66:12:c7:c5:54:59:91:1f:
         51:21:92:fc:b0:3c:41:97:ea:2d:ae:1d:21:6a:93:96:f2:11:
         55:72:4a:6f:54:ea:b8:24:84:70:6a:2e:a1:5a:64:c9:11:05:
         7a:e6:40:52:12:89:af:de:8b:cb:10:84:c0:d3:ba:55:50:9d:
         78:0b:ea:be:ef:a4:87:cb:34:c8:a7:92:2a:c9:24:0a:5c:21:
         36:2a:7f:3d:16:d0:61:65:44:7f:86:6c:96:96:ad:65:21:f6:
         06:b7:1d:93:0c:48:5a:83:31:18:78:52:a2:9d:ed:85:44:10:
         06:83:ae:3f:6b:1f:39:10:98:df:05:37:da:c1:f0:d9:b7:f2:
         b4:e6:bc:b8:7d:8b:74:41:8a:2c:ef:22:bb:00:b9:07:86:d1:
         5b:5a:c3:7e:c9:52:b4:ee:26:68:83:94:19:8b:53:e1:cb:13:
         3b:b0:a3:d7:93:21:16:6c:bb:c2:14:14:f4:10:3a:88:73:a7:
         1a:4d:1f:3e:ea:83:a5:ea:09:ca:4c:20:ce:f3:26:09:10:62:
         50:72:07:b1:b4:16:40:9b:37:d6:06:42:40:ef:97:0b:6c:25:
         7b:4f:51:d2:ce:94:dd:09:51:50:79:38:8b:cf:55:d7:6b:d5:
         95:b6:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:26:21 2025 by rpki-client