Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
File:                     xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json)
Hash identifier:          XRomhV7xoEmsDJpZ+8EAsu7LHoi61gtxe1xd+mRi93E=
Subject key identifier:   BC:31:D5:1F:09:2E:56:AE:66:35:71:55:64:EE:7B:C0:62:89:0C:21
Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E
Certificate issuer:       /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E
Certificate serial:       0DB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
Manifest number:          0DAE
Signing time:             Mon 04 Aug 2025 18:07:09 +0000
Manifest this update:     Mon 04 Aug 2025 18:07:08 +0000
Manifest next update:     Mon 11 Aug 2025 18:07:08 +0000
Files and hashes:         1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: 3t0JG4g+zvio3EvHhLGYXs6kiiKxmu9opqae39Swvok=)
                          2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: nnMRznD8HI2Yb7yh15XfK/3vrMLq6BY/UPlfXXuokSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl
                          rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 18:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3509 (0xdb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E
        Validity
            Not Before: Aug  4 18:07:08 2025 GMT
            Not After : Aug 11 18:07:08 2025 GMT
        Subject: CN=6890f6cc-5ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:fc:0a:e6:48:7b:06:b9:3a:1f:fc:29:2c:
                    d1:5b:c7:a8:31:3c:95:73:c2:bc:41:90:2c:d7:f2:
                    89:ba:80:6f:7c:1e:67:30:ea:a4:cd:6c:63:54:fe:
                    fc:7b:04:7b:11:a8:a3:5e:13:b2:44:f6:3f:d4:5c:
                    8b:8b:b1:37:61:56:dd:7b:05:22:a1:4d:0b:5b:5a:
                    dc:91:95:6a:dc:3d:f8:5a:98:9d:49:2b:2e:c6:bd:
                    14:e1:ca:cc:1c:2e:84:4c:60:0c:0b:79:6f:ee:86:
                    cd:0d:f4:81:c2:be:74:d9:42:2a:e8:25:ea:87:d1:
                    43:8e:76:16:5b:5e:4a:cc:86:02:8f:0e:53:c4:81:
                    4f:7b:b3:28:8b:4d:22:d1:fe:2c:93:bd:98:a4:af:
                    33:df:32:ed:8f:da:50:95:3d:57:bc:1e:3a:d9:6d:
                    3d:f9:b0:6b:e4:99:76:a9:d2:d9:8f:8d:50:ca:34:
                    73:d7:1b:52:44:c3:ce:44:24:04:41:76:c0:82:7a:
                    ab:1b:8d:d8:3d:c7:ad:1b:0d:a3:dc:5e:82:f0:98:
                    fe:2d:18:26:b2:bf:af:dc:49:37:c3:0e:ad:45:35:
                    16:5a:70:18:1e:29:0b:a9:f2:c6:70:56:33:48:37:
                    29:f9:66:fd:c4:e0:0c:ce:c7:db:f1:c8:a8:7c:1f:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:31:D5:1F:09:2E:56:AE:66:35:71:55:64:EE:7B:C0:62:89:0C:21
            X509v3 Authority Key Identifier:
                keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:18:ad:db:a5:a9:9d:9c:5e:a3:fd:42:60:b6:fb:45:68:
         7b:32:89:27:80:36:9d:e1:54:8c:cb:15:5f:44:e6:0f:1d:76:
         43:a3:a9:1a:27:bb:20:9a:6f:de:95:50:dd:19:06:77:fc:a5:
         6d:3e:02:37:eb:bc:1c:c9:75:c0:c8:67:14:a5:a8:d2:51:80:
         02:ac:d2:1c:74:69:34:5a:c7:85:75:78:a6:e2:b7:c8:e2:37:
         1e:de:63:c9:c9:ba:09:f0:fa:69:dd:f1:4a:ac:70:f4:24:be:
         1f:93:4f:51:73:d8:2e:40:e9:da:01:cc:13:ab:38:85:eb:d5:
         b4:ba:6c:a6:47:7b:b1:77:bc:64:16:f5:07:04:39:0b:c4:00:
         1a:d9:0d:c6:20:44:61:38:26:48:86:a5:44:80:07:60:31:50:
         c0:ff:25:8f:97:51:4c:c1:93:ca:71:9f:61:2e:1b:be:d5:cb:
         67:8f:ef:93:ed:be:43:76:c1:e1:fc:2c:57:61:9c:60:49:fa:
         57:d3:9c:0e:22:9b:eb:ef:2b:f2:28:f3:77:ed:2e:91:da:c1:
         69:7c:61:95:c3:37:73:ae:2a:93:96:fc:25:be:8c:b7:eb:39:
         37:59:05:2a:bb:32:a2:c3:40:b1:dd:6a:24:8f:f5:bb:d1:48:
         72:0f:db:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:03 2025 by rpki-client