Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
File:                     xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json)
Hash identifier:          OeGxlukUodFgvsli2ipf+UKd3CHp7MCnoWLKHFJWKsQ=
Subject key identifier:   6A:D8:A3:19:3A:A5:F8:61:DD:94:E5:78:4F:AA:36:98:A8:14:DE:9F
Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
Certificate issuer:       /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
Manifest number:          0178
Signing time:             Fri 13 Jun 2025 02:43:22 +0000
Manifest this update:     Fri 13 Jun 2025 02:43:21 +0000
Manifest next update:     Fri 20 Jun 2025 02:43:21 +0000
Files and hashes:         1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: +ieaCq9Nwcq8iFUvvrtYHPqmzHXb3p1BEl/dZWeJQOs=)
                          2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl
                          rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
        Validity
            Not Before: Jun 13 02:43:21 2025 GMT
            Not After : Jun 20 02:43:21 2025 GMT
        Subject: CN=684b9049-8cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:4c:97:3a:ad:c1:71:a6:64:22:ad:4c:0e:
                    8c:6b:6e:b4:db:1a:89:38:73:8a:ad:b6:c7:a4:40:
                    81:25:f9:01:a0:69:d2:72:d3:df:96:74:b9:23:d7:
                    f0:cb:3f:41:ae:31:0c:1f:c9:72:0c:f2:cf:e7:a6:
                    b4:c2:c3:96:be:23:8d:39:33:3b:31:ec:1a:c9:e9:
                    22:f5:73:a1:d7:62:db:9f:1f:15:17:2a:7f:90:9c:
                    91:7d:52:7e:1b:42:2d:1d:d7:f8:39:80:3e:4b:6a:
                    0e:89:a7:b0:3f:28:9b:5e:66:97:d3:7b:38:b4:ae:
                    11:ec:94:0a:02:55:56:24:8c:9d:e3:34:12:a4:07:
                    f7:a4:46:21:c0:17:f0:60:02:bb:f6:bb:e1:85:e4:
                    ba:dc:4c:1a:cb:07:cb:4c:a6:05:71:b0:ba:94:bd:
                    e6:48:cc:31:31:1c:4b:d8:de:5c:2e:61:9d:bd:dd:
                    e2:7e:3d:72:86:cc:4e:63:f9:65:25:94:e9:0b:86:
                    b8:8c:d7:eb:67:40:27:a3:22:d8:6f:fe:19:4a:00:
                    13:88:04:e6:95:09:8c:d4:46:2b:5d:7d:68:ab:8f:
                    31:2f:33:23:fe:8c:f6:ab:e6:24:e4:ca:13:59:19:
                    05:70:5f:cb:73:fc:97:f4:26:81:86:01:22:54:be:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:A3:19:3A:A5:F8:61:DD:94:E5:78:4F:AA:36:98:A8:14:DE:9F
            X509v3 Authority Key Identifier:
                keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:96:47:16:de:b1:a9:81:3f:45:ba:ea:2b:13:98:f4:ee:9b:
         31:70:38:7a:38:a6:f4:46:9f:17:95:b1:1d:1d:44:c0:54:10:
         95:ad:66:1f:05:38:da:a9:8c:66:cb:7d:95:b4:0f:35:3e:a9:
         cd:88:31:f8:c5:6a:21:94:7c:24:e2:f1:21:0c:e3:77:a3:81:
         f9:46:6f:c6:1e:3a:4e:b0:ed:9d:0a:0c:b1:67:90:92:cc:04:
         ed:2f:46:72:d9:06:bc:25:2b:4b:ac:cf:eb:a3:70:37:49:d8:
         4f:12:9b:69:47:4d:b4:ad:5c:88:2c:79:3f:e0:53:cd:99:5b:
         03:1b:af:90:9a:ea:ca:6b:a3:58:1e:95:c3:b6:85:b7:55:bb:
         76:8b:0d:8f:d2:19:1b:48:0d:d9:3f:dc:d0:74:58:20:32:53:
         f9:f1:5a:04:5b:ca:93:a5:ea:ac:14:4d:7b:37:b8:9a:51:94:
         79:88:6d:d5:c9:8c:f5:61:f4:49:d5:45:dc:61:19:80:94:64:
         84:59:08:2e:5d:3b:08:74:6d:7f:f7:52:ac:cd:10:19:0e:47:
         41:0a:6e:18:71:f7:6b:24:65:a5:2c:55:7a:2c:fe:a4:37:42:
         8d:02:f8:65:cd:5d:3f:52:2d:52:fc:55:12:80:4f:2f:3e:23:
         30:2e:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:33:09 2025 by rpki-client