Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
File:                     x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json)
Hash identifier:          wZWHhtpp0PGBCfrRf315ZC6OC8LmEs1qhpBUzjFZO0w=
Subject key identifier:   BF:31:48:8E:1D:33:1B:A5:EB:2A:BD:16:F6:E6:12:34:83:DC:3E:A2
Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
Certificate issuer:       /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Certificate serial:       053F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
Manifest number:          0531
Signing time:             Fri 08 Aug 2025 23:59:08 +0000
Manifest this update:     Fri 08 Aug 2025 23:59:08 +0000
Manifest next update:     Fri 15 Aug 2025 23:59:07 +0000
Files and hashes:         1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: fOKHDaKCN/wdiuTxynhKTEQWflxRicXpC6IX35yAkIw=)
                          2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M=)
                          3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: i3s18BaY3hcoxMjxy2QU6cAUMzbd78K/9/AXgiaYx9w=)
                          4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: 2k3mmFRSm00PZ1eU/1nDOAndoGHlqgxcb+UsBjNPu14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
                          rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1343 (0x53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
        Validity
            Not Before: Aug  8 23:59:08 2025 GMT
            Not After : Aug 15 23:59:07 2025 GMT
        Subject: CN=68968f4c-3883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:99:d2:21:7d:27:fb:77:39:eb:e0:4c:45:
                    f9:ed:56:d6:7e:b8:8d:17:1f:3b:62:b9:d3:3f:26:
                    07:9a:dc:c8:84:eb:c0:c6:08:91:f7:33:ef:2c:33:
                    1d:1b:60:55:ec:f0:32:39:7c:18:ca:ee:0d:dc:01:
                    01:cc:93:80:f2:91:ef:f0:d0:be:49:91:28:4d:d1:
                    ad:93:c2:9c:b8:6e:ba:30:81:82:71:d8:8f:75:33:
                    c7:47:cd:f2:af:65:9a:cd:b8:68:ae:79:78:35:67:
                    15:35:61:c9:56:5a:3e:f9:17:69:9f:1b:b6:37:aa:
                    6e:de:d8:4d:a1:56:83:82:d3:ba:f1:d1:ad:d9:c4:
                    42:de:73:13:94:f3:9e:1b:ce:6b:3a:77:3c:3d:4b:
                    be:74:44:93:d6:11:5a:2d:3c:95:eb:d7:8d:d5:65:
                    aa:30:41:07:9a:d9:07:52:44:65:db:e6:18:3a:d8:
                    1e:66:43:05:d4:34:e3:5c:56:c8:bc:fa:25:9e:38:
                    50:10:19:d3:2e:02:2e:d1:3e:66:c3:9e:3b:97:ab:
                    06:23:5a:44:cc:6a:af:4c:84:18:ae:be:99:ce:20:
                    2d:a4:49:b9:da:41:e2:49:20:38:48:5c:b4:e0:0e:
                    7f:af:c2:b9:6a:23:0c:3d:b3:fe:74:19:68:12:9b:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:31:48:8E:1D:33:1B:A5:EB:2A:BD:16:F6:E6:12:34:83:DC:3E:A2
            X509v3 Authority Key Identifier:
                keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:40:5a:c4:df:f7:07:03:e2:d4:b6:b3:49:a5:6d:32:d9:
         aa:5e:b9:7b:02:46:4b:c7:2d:37:d6:16:e1:ae:cf:ed:25:5f:
         38:1c:eb:a2:29:86:bb:71:c1:11:49:ad:45:8c:23:e9:3f:6d:
         b7:e5:2c:60:c3:32:0c:45:5d:7d:5f:c4:b5:7f:e2:6e:36:d5:
         8d:96:bf:9c:9a:f7:4c:79:ef:90:3b:28:b0:c9:40:55:66:0e:
         17:55:d3:c3:2d:3f:95:9e:62:64:fe:66:e4:e9:79:55:71:34:
         ed:20:ce:1e:75:7d:12:7c:93:aa:40:b5:70:85:a0:62:57:d5:
         0b:90:b8:32:7d:c5:50:ea:b7:74:3d:c3:26:96:f3:6c:9c:35:
         b6:19:f5:de:29:98:88:db:72:5c:25:3b:70:6d:67:12:ee:b2:
         c1:93:84:cd:5e:85:b8:58:70:b5:c4:05:3e:01:ef:eb:ee:18:
         b9:3b:d4:4c:1e:fd:e1:83:24:ef:3c:89:98:ea:13:30:bd:f3:
         87:c4:ca:11:d8:3f:19:39:3a:9b:81:40:5d:bf:40:3a:69:42:
         23:5f:b6:e9:b7:73:06:ff:14:e4:50:d8:10:ea:64:94:15:0e:
         eb:cc:52:d9:56:4a:c7:c0:4e:3e:7f:d1:8d:59:e8:20:2c:ba:
         f4:a6:35:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1
RDQ5RkJDRjkwHhcNMjUwODA4MjM1OTA4WhcNMjUwODE1MjM1OTA3WjAYMRYwFAYD
VQQDEw02ODk2OGY0Yy0zODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAWZ0iF9J/t3OevgTEX57VbWfriNFx87YrnTPyYHmtzIhOvAxgiR9zPvLDMd
G2BV7PAyOXwYyu4N3AEBzJOA8pHv8NC+SZEoTdGtk8KcuG66MIGCcdiPdTPHR83y
r2Wazbhornl4NWcVNWHJVlo++Rdpnxu2N6pu3thNoVaDgtO68dGt2cRC3nMTlPOe
G85rOnc8PUu+dEST1hFaLTyV69eN1WWqMEEHmtkHUkRl2+YYOtgeZkMF1DTjXFbI
vPolnjhQEBnTLgIu0T5mw547l6sGI1pEzGqvTIQYrr6ZziAtpEm52kHiSSA4SFy0
4A5/r8K5aiMMPbP+dBloEptA1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8xSI4d
Mxul6yq9FvbmEjSD3D6iMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB
NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv
akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbH0BaxN/3BwPi1LazSaVtMtmqXrl7AkZLxy031hbhrs/tJV84HOui
KYa7ccERSa1FjCPpP2235SxgwzIMRV19X8S1f+JuNtWNlr+cmvdMee+QOyiwyUBV
Zg4XVdPDLT+VnmJk/mbk6XlVcTTtIM4edX0SfJOqQLVwhaBiV9ULkLgyfcVQ6rd0
PcMmlvNsnDW2GfXeKZiI23JcJTtwbWcS7rLBk4TNXoW4WHC1xAU+Ae/r7hi5O9RM
Hv3hgyTvPImY6hMwvfOHxMoR2D8ZOTqbgUBdv0A6aUIjX7bpt3MG/xTkUNgQ6mSU
FQ7rzFLZVkrHwE4+f9GNWeggLLr0pjUt
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:48:08 2025 by rpki-client