Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File:                     R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier:          3Hb0idlvUuzwggnYjatJrmnLmKqQzgcpP1y4bfysWo4=
Subject key identifier:   B3:A8:6B:D2:3F:54:8F:89:DA:88:0E:EE:89:27:C8:DF:E4:61:41:0B
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer:       /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial:       068F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number:          0676
Signing time:             Fri 08 Aug 2025 22:55:17 +0000
Manifest this update:     Fri 08 Aug 2025 22:55:16 +0000
Manifest next update:     Fri 15 Aug 2025 22:55:16 +0000
Files and hashes:         1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: CdFzyFsbsbAkQ6nYqov8Yd3/kZCdIFRSfBwNVs4HXNw=)
                          2: A6556900C0DF11EE9BA7B27AC4F9AE02.roa (hash: 7GVgrXEYxEaDjdpBVuH7XCTs4tFbULYhuD4DnoFUT20=)
                          3: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: UrlgPQXsb4gQDscf1nttcVc31km04Zvk2KGgC6tLDaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
        Validity
            Not Before: Aug  8 22:55:16 2025 GMT
            Not After : Aug 15 22:55:16 2025 GMT
        Subject: CN=68968055-f0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:ee:4c:0e:b3:47:3a:51:60:5e:cf:41:85:
                    e3:9d:bc:04:86:45:bb:49:bc:17:88:6e:ce:68:36:
                    bb:c4:8a:ee:26:28:fb:38:29:14:4c:df:74:eb:88:
                    f8:5a:5b:1b:a5:31:fd:65:14:31:f2:30:7b:af:b8:
                    40:a4:da:fd:95:40:b3:db:95:3c:71:6a:34:c3:cc:
                    b2:21:99:7b:26:52:c9:85:48:0e:22:27:0d:ce:5b:
                    7e:aa:f5:ef:e0:01:9d:b2:87:aa:3d:22:f2:e4:e1:
                    24:d2:5f:35:82:84:fa:91:13:c8:03:d3:b2:71:d6:
                    27:49:df:5e:5e:2c:2c:54:49:10:e2:cf:e5:03:a0:
                    e1:bd:56:3d:0b:68:cb:9f:6d:90:91:bc:3e:04:c6:
                    c0:dd:f8:d4:e9:f0:7c:db:fb:57:06:3c:78:c6:e7:
                    e2:15:d2:df:be:7d:7b:02:44:fe:83:84:ff:44:54:
                    8c:8a:da:2a:f5:19:42:27:fe:bf:c0:0f:f7:f9:77:
                    49:55:b3:c0:a6:82:76:59:05:09:c7:9d:2c:3f:18:
                    7c:df:83:49:c1:b2:dd:87:a7:e3:f2:5f:ce:91:cf:
                    68:fc:41:69:65:e1:13:d6:da:15:a7:83:59:3b:b7:
                    77:8e:84:3b:cb:ee:87:81:52:74:ce:aa:50:b9:18:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A8:6B:D2:3F:54:8F:89:DA:88:0E:EE:89:27:C8:DF:E4:61:41:0B
            X509v3 Authority Key Identifier:
                keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:f0:14:ae:54:d3:14:e1:c8:39:a0:61:b9:97:fd:21:d2:a4:
         75:93:d1:c8:6b:0d:07:c5:d5:12:90:dc:dd:8e:1c:7a:9b:ec:
         d2:f2:74:59:1b:b3:54:2e:e5:7f:72:e4:8a:97:10:14:de:0d:
         db:4b:ea:36:03:79:8c:7e:3a:55:ae:6a:82:e4:7e:5d:78:fd:
         d7:08:33:48:73:4d:da:6e:c4:65:8c:7a:c3:3b:a2:46:f7:3c:
         75:1a:73:f7:33:75:1e:92:68:ad:a9:5e:e3:17:f6:59:75:33:
         71:19:31:cb:a2:9b:3e:38:ea:d9:73:ae:ed:66:2f:08:f0:c9:
         1c:4b:46:72:e2:e6:42:43:99:ee:a3:6c:e9:a3:0c:fa:23:19:
         2f:cb:f2:a7:b8:bc:1e:da:c1:93:d0:04:5c:81:33:93:31:d4:
         e7:a2:56:e7:c8:14:33:06:d4:0e:11:6b:8a:17:49:c5:12:4e:
         9f:c8:75:d2:63:c8:4d:8d:0e:e9:3b:de:f5:fd:cb:f1:ac:1e:
         26:dd:89:f1:e3:c8:0e:95:f2:af:50:1b:3b:e7:f3:1e:90:60:
         40:8b:b0:1e:d5:e2:5f:cd:c3:48:f2:24:f6:30:3e:30:a9:45:
         8f:e7:72:9b:85:f6:9f:16:2a:35:e6:6f:46:e4:e0:e1:c7:8b:
         da:6e:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:30 2025 by rpki-client