Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
File:                     zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json)
Hash identifier:          XqEO3D8/aup5dftcgXWbY4HY9IwWxJDAVhDUghgM5u8=
Subject key identifier:   D9:16:03:FE:8E:42:DC:2B:CD:15:F9:13:0A:59:31:7D:D3:16:17:86
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Certificate issuer:       /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
Manifest number:          010F
Signing time:             Mon 11 Aug 2025 05:06:57 +0000
Manifest this update:     Mon 11 Aug 2025 05:06:57 +0000
Manifest next update:     Mon 18 Aug 2025 05:06:57 +0000
Files and hashes:         1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: JmPihiZgPJ+ndzMsIY0mt5ZbOR3SQc5lxSrwXEzVZh0=)
                          2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: KzdO+S8UaZA+5dqwU3YevT9OI76OGpIsZ7GNNEbB7Sc=)
                          3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: 9rjLofEU8o84/eDpG2+v1chrVfPs+sqWqIrHcUhxjLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
                          rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 05:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
        Validity
            Not Before: Aug 11 05:06:57 2025 GMT
            Not After : Aug 18 05:06:57 2025 GMT
        Subject: CN=68997a71-ec0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:af:2c:62:cf:43:ae:69:94:38:df:e8:37:
                    62:cd:1f:c5:d0:c3:7b:5b:7d:14:4b:bc:a8:c2:a7:
                    e7:99:8a:3c:4b:28:f9:49:59:b1:3b:17:64:07:91:
                    28:96:9f:bf:df:02:b6:5e:9d:59:9e:7e:af:4a:1a:
                    a7:3e:ab:de:14:60:5d:3d:6a:80:23:dd:31:f4:00:
                    3e:5f:25:8a:27:ec:19:9c:72:40:01:6e:23:b9:1a:
                    8c:c9:91:31:26:70:16:45:62:ef:51:23:f8:77:58:
                    b6:b0:25:ec:d1:ba:5f:99:26:6a:54:3b:5e:65:25:
                    22:5c:91:81:8f:26:52:45:2b:ce:75:62:d1:e2:86:
                    d6:4c:6d:37:79:12:57:81:74:9e:95:9f:86:1a:d5:
                    62:92:f3:a0:94:ad:8f:1c:c9:79:18:90:84:9a:ca:
                    f7:23:eb:aa:57:37:92:a1:69:93:3d:af:fe:f4:35:
                    47:d7:85:a8:f1:60:2e:89:c7:11:a5:7e:5d:cb:6d:
                    64:44:2d:55:88:2d:03:f7:84:36:78:18:02:b0:ba:
                    de:66:ad:af:b0:16:07:0b:a4:22:b6:aa:4d:1a:4c:
                    86:b5:b0:89:49:2d:d0:ac:01:74:15:5e:0c:d9:e5:
                    0e:cb:37:36:8d:93:ee:bc:33:ac:e7:f1:b6:76:cc:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:16:03:FE:8E:42:DC:2B:CD:15:F9:13:0A:59:31:7D:D3:16:17:86
            X509v3 Authority Key Identifier:
                keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d5:27:12:15:aa:a3:8c:ab:05:08:b2:13:3b:05:fe:76:ae:
         40:e6:f8:14:f7:8c:e5:cc:d9:df:8b:a6:8d:6e:85:b5:8f:56:
         15:98:43:17:b5:81:94:06:c3:16:10:0f:f7:b9:11:4d:8c:02:
         54:60:e0:ea:cc:01:c2:37:75:d3:4f:cf:8f:c6:ac:79:b1:92:
         48:c9:99:57:74:1b:69:84:fa:d7:32:5f:6f:27:4a:f3:20:cd:
         b3:9e:1c:dd:ee:0c:df:fe:11:f2:7c:f2:6c:92:26:1d:93:c9:
         da:b8:3c:95:63:73:b8:88:52:ab:8b:f5:6e:b1:e4:ce:46:4a:
         aa:f2:40:43:70:aa:37:21:9f:8f:1e:ce:0d:ac:e4:0b:fb:54:
         d3:fc:3a:27:3c:c1:53:66:a6:42:5d:57:52:9a:cf:89:31:6f:
         3e:b0:5d:15:01:a2:13:2d:b7:46:e4:26:e6:c9:d5:3f:77:37:
         78:0b:6b:24:0d:83:f1:40:40:d2:0f:d3:9a:df:cd:c5:18:34:
         55:7b:2d:2c:a9:57:71:c8:e7:cb:68:97:f2:7b:b0:77:5a:1a:
         df:d6:83:65:0c:9c:82:d2:86:2f:ce:8a:c0:13:3e:cf:00:60:
         3f:65:34:61:30:27:58:76:48:84:ea:a7:21:b1:7b:08:72:e8:
         58:64:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:57:35 2025 by rpki-client