Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
File:                     XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json)
Hash identifier:          r2LK5p9ePxSj/VRl1XIc+IpYdb+5IhVbfup3SmoizAk=
Subject key identifier:   00:33:AD:18:21:3C:B3:BE:8E:7E:11:E1:88:93:BE:96:D3:FD:B3:8A
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Certificate issuer:       /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
Manifest number:          D5
Signing time:             Sat 09 Aug 2025 06:02:08 +0000
Manifest this update:     Sat 09 Aug 2025 06:02:08 +0000
Manifest next update:     Sat 16 Aug 2025 06:02:08 +0000
Files and hashes:         1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: GJfoqCTMYGI7hxNg3HA/yDd+Mgc4wE249VJ95uAn0BM=)
                          2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=)
                          3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
                          rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
        Validity
            Not Before: Aug  9 06:02:08 2025 GMT
            Not After : Aug 16 06:02:08 2025 GMT
        Subject: CN=6896e460-39e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:51:71:83:2d:a8:ad:93:b3:8f:b6:5f:b4:
                    2e:fd:84:98:1c:89:d5:f6:38:0d:af:6d:01:c0:20:
                    f5:23:ca:d7:d1:60:c8:4c:8a:20:2e:0b:ca:7d:ba:
                    d6:5b:d0:a1:ad:d9:27:ad:a3:65:e4:2c:45:3a:04:
                    66:ed:ff:43:06:a3:f7:44:cb:98:56:2e:f2:a3:42:
                    92:46:0a:40:f8:53:8e:7f:ed:83:45:04:64:fd:67:
                    22:24:54:32:65:53:4c:5f:0e:5e:0f:df:ce:95:a9:
                    3b:b2:0a:d2:e6:c8:8e:4b:cc:fd:e5:8c:3f:dd:b1:
                    17:1c:60:2d:86:34:57:c9:37:de:c8:3c:68:30:30:
                    c0:56:68:b4:05:b4:bc:f0:22:d4:91:8d:3d:13:3d:
                    65:e0:e1:7c:1b:85:86:4c:7f:51:b6:de:dd:dc:df:
                    c8:ec:23:07:6e:5c:5e:e0:1b:2a:e6:7f:ed:f3:dc:
                    85:8e:36:31:d8:23:25:d3:7c:63:2e:aa:9a:35:b6:
                    42:32:6a:35:bb:ed:9d:22:a7:e5:d5:98:7a:cb:c9:
                    f7:80:0f:cb:48:2c:9f:27:10:49:3c:1d:0c:eb:80:
                    91:c2:78:c8:2e:27:6e:02:69:c4:19:04:89:b7:a3:
                    e8:be:94:4e:45:d7:43:8d:6b:89:e6:ec:91:cc:17:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:33:AD:18:21:3C:B3:BE:8E:7E:11:E1:88:93:BE:96:D3:FD:B3:8A
            X509v3 Authority Key Identifier:
                keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:34:22:11:a7:f3:29:0f:23:e1:1c:f2:63:0d:87:89:82:9a:
         f8:1d:59:fa:d2:ca:80:cf:2b:55:2e:49:20:f7:a9:46:d8:bb:
         4c:34:ea:4f:10:50:a5:0f:d6:55:5c:0d:36:96:9e:1d:d0:e7:
         42:d3:4a:2a:5d:1f:8a:10:f8:d7:c7:a7:c5:70:f0:60:48:95:
         d9:de:ca:63:ef:32:d0:87:d0:d4:93:54:19:49:e9:61:51:34:
         fa:39:9e:34:5a:53:1e:e0:ea:4d:ad:d1:db:79:0a:5f:dc:76:
         21:ca:0e:07:a6:ac:df:34:9b:52:6a:9b:72:a1:eb:b9:1e:63:
         07:46:af:dc:3d:a2:36:7f:77:5e:9a:68:01:e1:a3:df:26:23:
         ed:95:a8:0e:98:e2:21:92:6a:29:b0:27:c7:41:0b:17:2b:e2:
         94:03:d5:42:87:c8:20:bd:65:ca:ca:a6:3b:13:b5:fb:ae:c8:
         d3:99:a8:f5:68:95:14:82:9e:c0:e7:90:e8:88:e8:80:66:45:
         81:1b:c6:b8:dc:e3:a2:bf:fa:46:c1:6b:a8:7a:7c:64:0f:42:
         ae:ee:17:be:e2:e1:06:77:85:15:a5:d3:4b:1e:18:5d:87:45:
         c1:07:69:71:48:2e:ee:0c:36:86:67:09:cb:56:7f:14:81:5e:
         6f:c0:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:24 2025 by rpki-client