Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
File:                     cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json)
Hash identifier:          WIWVdkX73FEXdhhLn+o3l1/wxW0kURjW58sstXD7d4M=
Subject key identifier:   6F:99:76:DB:EB:E0:13:C6:FB:AD:D8:07:2D:79:C7:2C:48:FB:10:8E
Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44
Certificate issuer:       /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
Certificate serial:       07FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
Manifest number:          07F5
Signing time:             Sun 10 Aug 2025 20:59:27 +0000
Manifest this update:     Sun 10 Aug 2025 20:59:26 +0000
Manifest next update:     Sun 17 Aug 2025 20:59:26 +0000
Files and hashes:         1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: pQqll9AUv5QmYcPo5FyqGBhmwVlFc9OXFZAnZ759LXs=)
                          2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244
        Validity
            Not Before: Aug 10 20:59:26 2025 GMT
            Not After : Aug 17 20:59:26 2025 GMT
        Subject: CN=6899082e-7df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:42:9c:59:f5:19:e9:d4:06:67:55:94:bf:
                    6d:0a:59:a0:7d:c9:e7:e9:11:af:28:d4:0b:3f:bc:
                    da:45:7c:27:b7:0a:d1:84:25:ba:58:71:23:f8:f4:
                    6b:0f:4d:e5:64:90:6b:97:20:65:1f:73:31:79:a5:
                    74:aa:4c:1d:68:f7:58:c8:5c:11:b6:10:8b:b2:79:
                    ce:05:8a:40:54:ac:68:f1:aa:48:6a:25:66:e0:f5:
                    80:cd:5b:89:e1:99:ef:4c:63:62:74:5c:f6:1b:a8:
                    dd:27:5a:54:0b:67:4c:cf:d0:bf:21:e1:4f:8f:49:
                    a2:a1:cc:62:db:6f:e3:1c:a3:67:6b:41:e8:40:fe:
                    59:07:d5:91:96:b8:bc:a3:6f:02:96:3e:46:25:b0:
                    33:bf:fa:5d:52:0d:63:28:06:21:8a:44:72:4d:ed:
                    49:23:9a:8c:39:ad:6a:38:32:31:3f:bb:8f:86:59:
                    b7:16:99:b0:13:ba:d7:af:d8:83:bb:dd:c8:56:8c:
                    6f:5b:7a:63:47:dd:3d:16:c0:e9:32:0e:0e:b2:5a:
                    9b:29:da:a4:da:87:b3:61:1f:50:f1:c1:fb:e1:64:
                    ee:a6:51:ed:48:74:85:55:67:01:dd:02:06:f8:ee:
                    f5:3b:1b:7f:6b:bc:6e:c1:40:54:0a:a7:df:7a:24:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:99:76:DB:EB:E0:13:C6:FB:AD:D8:07:2D:79:C7:2C:48:FB:10:8E
            X509v3 Authority Key Identifier:
                keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4c:ac:9f:90:70:79:33:81:aa:2f:66:a3:fa:4d:1c:94:95:
         ac:ec:99:33:32:1f:5e:0e:07:77:90:05:20:da:eb:92:1c:d1:
         69:ef:85:2f:cd:aa:53:00:78:77:90:d0:77:88:67:72:35:5f:
         83:33:c1:34:8c:5b:6f:c0:e2:7f:d0:08:20:fc:06:b4:90:54:
         df:68:a1:b9:9c:38:a0:8b:38:fd:29:e4:a6:17:ad:c2:b4:f2:
         fc:15:87:7f:fd:be:98:d8:ee:7f:38:29:83:ee:4a:da:eb:3b:
         e8:d9:be:77:f1:39:76:fa:fe:b3:d6:5b:f1:42:35:a5:58:3f:
         64:8d:e0:4b:dc:26:6d:53:fa:3a:a6:e4:05:cd:8e:d8:55:3f:
         76:9e:6e:b9:57:6f:3b:e4:c3:78:3c:25:a8:e3:ec:16:f7:88:
         82:ed:66:ae:b6:2e:b8:a4:5a:14:59:b9:39:cc:a7:8e:98:93:
         76:f8:3d:d1:db:c4:da:ca:39:4f:e8:69:e7:8b:c2:87:0d:15:
         00:02:a6:69:74:ca:16:7e:ef:a5:82:f5:52:87:cc:ae:3f:7c:
         df:8f:62:67:c4:69:fd:d6:75:08:56:82:09:f3:80:23:c8:f0:
         c1:d9:7c:0a:13:38:82:83:69:89:3f:e2:63:65:38:49:ee:3e:
         f2:d8:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:13:31 2025 by rpki-client