Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
File:                     75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json)
Hash identifier:          37wgjeAEXHthD7H/3S4GFg6RZY4reCGEMZOlvQf/t/w=
Subject key identifier:   03:E4:8D:A8:52:09:CE:43:4A:5A:36:2A:5B:0B:35:B7:46:7D:C1:10
Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
Certificate issuer:       /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
Manifest number:          58
Signing time:             Sat 09 Aug 2025 07:45:50 +0000
Manifest this update:     Sat 09 Aug 2025 07:45:50 +0000
Manifest next update:     Sat 16 Aug 2025 07:45:50 +0000
Files and hashes:         1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: nkaJjQPKhylF5Tm6m/XkVeGsXuVokyUzCwbJ4DWwTK8=)
                          2: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl
                          rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
        Validity
            Not Before: Aug  9 07:45:50 2025 GMT
            Not After : Aug 16 07:45:50 2025 GMT
        Subject: CN=6896fcae-c889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c6:ca:12:db:19:84:b3:d6:ad:b4:d8:5b:fd:
                    24:e5:69:27:a4:a5:70:ec:ba:e7:cc:28:78:0f:4c:
                    72:7f:fe:1b:db:73:fc:19:bf:93:8a:fa:1a:7b:64:
                    6d:cb:2e:02:54:a6:ce:f0:d1:31:ee:45:0a:26:57:
                    39:06:ad:d0:b1:01:39:d1:64:cc:56:7a:48:11:ff:
                    60:06:dd:0d:8f:1e:df:db:8d:b4:e0:de:6b:36:31:
                    2a:42:0e:7e:19:98:d8:db:11:d5:3d:d4:6d:0b:7c:
                    6e:92:5c:c1:84:45:0b:1d:7d:4d:5f:60:cb:11:f5:
                    fa:ce:4a:d0:57:63:37:bc:ee:90:5f:9b:df:be:98:
                    f4:c4:c0:9b:7b:10:0c:a7:94:20:58:49:f4:83:3a:
                    10:0a:08:1f:7a:5d:92:9f:a2:12:17:ca:87:a2:b0:
                    26:ba:f7:37:ad:6a:f8:83:22:9c:88:fa:e1:7c:92:
                    69:4e:f0:67:e9:56:d0:6a:ef:d0:e8:92:c8:68:7c:
                    23:04:dd:99:34:c0:2f:12:07:6c:ed:f5:62:16:55:
                    1b:55:25:27:c6:40:9f:16:29:a6:9a:c1:6a:2e:48:
                    7d:27:5f:fd:e5:e3:92:83:02:7c:6a:c0:d2:7c:d4:
                    80:15:db:b7:a1:b7:67:f5:4e:0a:73:58:ff:a0:03:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:8D:A8:52:09:CE:43:4A:5A:36:2A:5B:0B:35:B7:46:7D:C1:10
            X509v3 Authority Key Identifier:
                keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3e:70:9e:3d:13:e3:55:cd:9f:e9:29:70:18:21:2d:34:4a:
         5d:24:90:dc:1d:6a:b4:ac:3d:12:94:1e:d0:c0:67:5c:44:c9:
         14:78:fe:96:a2:41:84:18:10:9d:cc:11:64:41:25:b8:b5:54:
         c3:13:05:47:61:53:76:43:da:e0:11:9e:c0:99:83:89:d7:0d:
         ca:13:af:19:5a:9c:ca:cd:12:42:53:ff:0a:a0:f7:da:2d:fe:
         71:8b:26:d3:26:47:1b:ac:19:78:03:c6:1d:8f:10:c4:d4:f4:
         48:42:fb:6c:39:4d:8e:63:87:96:58:46:57:65:87:8c:00:3d:
         da:0e:9e:57:b8:34:f4:cc:02:43:fe:92:c5:5a:8c:bf:a9:c1:
         e0:8a:f4:bc:04:ed:bb:5a:ed:c5:58:c4:1e:33:60:80:46:52:
         3a:6a:a9:52:13:bb:ee:a9:e1:6a:4c:84:f5:cb:e0:0c:dc:68:
         0c:05:27:8c:18:f0:7f:1c:a7:15:65:9a:b3:86:35:f7:ef:fc:
         e3:2c:f9:c2:fc:17:2d:97:a7:93:ad:a9:b3:f0:52:88:e2:b7:
         16:26:5b:86:11:29:57:a4:bc:c7:3e:5d:81:50:b5:01:07:63:
         93:83:c5:eb:6a:84:0d:ab:a8:66:04:6c:37:45:dc:e2:fb:b5:
         6a:c6:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:08:53 2025 by rpki-client