Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
File:                     gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json)
Hash identifier:          D15Oy1MflPAuaouHdNBf771Vn2HjVRjQjb8esCZ7rxg=
Subject key identifier:   C1:DC:2D:47:03:9B:7C:AE:E0:00:A3:CF:85:E8:E4:4F:FB:36:7A:EC
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Certificate issuer:       /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
Manifest number:          9C
Signing time:             Sun 15 Jun 2025 05:22:24 +0000
Manifest this update:     Sun 15 Jun 2025 05:22:24 +0000
Manifest next update:     Sun 22 Jun 2025 05:22:24 +0000
Files and hashes:         1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: ffMoYv3BNw46Q0vfWWtX+CAfNklzw2Pb9a0BiFQOByc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
        Validity
            Not Before: Jun 15 05:22:24 2025 GMT
            Not After : Jun 22 05:22:24 2025 GMT
        Subject: CN=684e5890-5dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:a3:c5:88:c8:03:50:2c:db:46:95:73:94:
                    70:09:f6:04:7e:b9:39:dd:44:da:8a:a4:48:30:bd:
                    d3:e7:c0:62:0d:b6:c4:97:51:97:de:c1:22:50:c7:
                    a6:18:bc:67:77:db:7d:d1:55:78:79:92:e8:f9:58:
                    da:74:27:f4:35:13:55:40:1a:19:4b:56:cf:f6:02:
                    c5:6d:ff:3e:79:a6:b7:81:46:ff:79:f9:94:9e:21:
                    36:6e:b7:ab:19:41:86:15:c2:7c:48:7e:f9:25:1f:
                    02:33:79:d7:76:7d:0b:5f:2f:40:bf:99:be:00:22:
                    80:9c:ee:68:67:27:52:7e:6f:29:e0:4e:f1:6b:af:
                    54:f2:f8:d3:01:0d:18:8c:aa:be:1b:a9:7a:dd:9d:
                    af:37:a1:ef:8c:3d:b2:81:e3:33:4e:5e:a2:5e:3c:
                    52:b7:4c:4e:f7:8d:aa:9d:35:f2:72:72:68:6e:7e:
                    1e:93:a9:bf:39:bd:62:5e:a7:c2:94:75:bd:00:80:
                    84:d7:90:eb:e3:97:3f:7b:32:de:60:8c:0b:d1:6f:
                    21:73:10:be:06:c1:21:c7:fe:6c:e7:03:87:f2:4b:
                    d2:f7:87:8e:cf:89:3f:5f:f1:8b:ac:6a:4d:9e:63:
                    b7:ee:d1:d4:bd:96:e2:26:83:3d:a9:bc:8a:bd:af:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DC:2D:47:03:9B:7C:AE:E0:00:A3:CF:85:E8:E4:4F:FB:36:7A:EC
            X509v3 Authority Key Identifier:
                keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:37:43:f4:6e:f8:c0:80:ff:83:f2:98:c2:71:6f:93:55:25:
         0b:77:6c:a3:79:6b:7e:35:a3:10:c6:9a:73:ee:3c:78:e6:90:
         19:64:a6:ca:0f:ff:ce:c7:7a:61:38:42:88:69:32:30:9f:03:
         b3:c7:65:a5:a0:19:e3:e5:30:38:df:2a:19:25:9f:92:a2:e1:
         cb:03:90:56:22:8e:bf:11:b2:56:51:4d:18:86:a5:6f:9e:12:
         0f:52:9f:a3:93:7c:72:e3:1c:f9:bc:2e:2a:b5:a3:04:f1:0d:
         d1:2c:0c:4a:dc:b7:f7:be:ff:e1:88:64:69:c8:99:40:91:d6:
         79:a0:36:b4:e6:af:57:f3:d2:c0:64:55:5c:fa:f8:4a:d6:5f:
         a1:db:4b:f8:9b:06:6c:bd:bb:0b:c9:c4:98:a3:2a:34:93:00:
         ee:fa:16:25:d1:c3:c7:0b:42:75:44:95:9d:00:2e:d0:aa:e3:
         e2:31:95:04:35:f9:96:ef:29:88:38:42:b0:62:33:38:99:81:
         63:b5:15:20:1d:55:f8:d1:ce:1f:0b:ac:2e:5e:a4:8f:83:3d:
         5e:c6:ad:75:d9:63:59:5e:7e:29:c9:27:73:d9:41:df:1c:c7:
         a9:61:0a:70:bd:64:1d:94:32:ff:81:b1:49:5d:62:00:0f:45:
         ea:25:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:35:07 2025 by rpki-client