Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
File:                     dhdGJegWMtON9iqDtXsDuiiH5vU.mft (raw, json)
Hash identifier:          mUUIhsEyBRTyx77OFw0blS3hq0vqPcy8BM1XkhVG6rM=
Subject key identifier:   6E:99:68:10:78:92:E1:ED:14:CA:4C:75:E0:10:FE:01:04:95:AA:01
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
Manifest number:          0783
Signing time:             Thu 24 Apr 2025 21:16:18 +0000
Manifest this update:     Thu 24 Apr 2025 21:16:18 +0000
Manifest next update:     Thu 01 May 2025 21:16:18 +0000
Files and hashes:         1: dhdGJegWMtON9iqDtXsDuiiH5vU.crl (hash: 8yyZoT3s4nxj7FC4WEh1kpUM3c35h0LBT0eKJOVbqMA=)
                          2: 84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (hash: v6e1A53lOs4ttAFgNyyjZoCXEPeOi0GiecLMqc/MAn8=)
                          3: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (hash: Ok9YVh7iJVfq5jAi1dUk84sBA5IsYOWabJTj7XjuXII=)
                          4: 824D5E300E9711EB9A6C2B3CC4F9AE02.roa (hash: ZDF/6Xw9ZE7b2+OVuWk9y1I5UDHjuJdR4+iTcEafgmY=)
                          5: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (hash: 5isKKj264kPgvcdF8hBz70YJR1jtU24tZnWCibLQbs8=)
                          6: 8068BF600E9711EB9A6C2B3CC4F9AE02.roa (hash: iqYDXGJezvbHsoQI5LOs/HpZOp9DdP6shWT091zXI/w=)
                          7: 21CF5E6C7AF111EF8BC4E684C4F9AE02.roa (hash: b1nalvR/eNXqTum+cSymzCLGQcxE1TXmTmkjmB0g0BY=)
                          8: A98668464EEB11EFB3305C85C4F9AE02.roa (hash: tWiWEgQiTh2MC49VXb2kimhBotEglhYAfcGxfEIxWjU=)
                          9: 1E5945A69E4111EDB7C9020EC4F9AE02.roa (hash: LsbxGQh0J4jRRvHUOzGfhoQnBu+EqX3+bxB0XHIwKEg=)
                          10: 830314BE0E9711EB9A6C2B3CC4F9AE02.roa (hash: eUQRjtj0tF+4ReuUVl4yzwgyQ7i/OO1b+JP4gilLkCk=)
                          11: 80F371780E9711EB9A6C2B3CC4F9AE02.roa (hash: BL4tECo9e+3ufRZK8OCt2j/Uj2lw36IymgWS2+ZdHFQ=)
                          12: 8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (hash: bczxjt2FwG7ZvqXhUNRx4J14OqU7vScZjaB3EzaWWXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 24 21:16:18 2025 GMT
            Not After : May  1 21:16:18 2025 GMT
        Subject: CN=680aaa22-09ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:4b:b0:46:b9:b9:49:42:0a:00:62:e0:8f:
                    dc:1d:8b:aa:a7:25:a8:71:bd:c2:d0:82:29:64:1f:
                    69:30:83:06:94:1e:0b:fd:b7:cb:67:68:61:2a:01:
                    8c:79:73:86:08:43:d2:7b:b0:0d:c9:c6:50:61:a2:
                    74:cb:24:4f:df:50:1c:96:3c:d3:d5:d2:59:37:1c:
                    b0:3c:ae:54:9c:c5:26:1f:f6:c7:84:30:2c:cd:ae:
                    39:62:a6:0e:74:0e:9c:67:40:6e:ff:b5:45:a3:47:
                    62:f4:24:78:93:7e:df:44:cc:91:2f:50:e8:83:f4:
                    77:fe:23:d2:91:78:cb:c8:da:a4:93:8f:ce:f8:39:
                    c4:25:4a:3b:ee:e8:8f:20:8e:73:e2:f5:6e:9e:76:
                    87:f4:5c:c6:ed:58:6e:b0:8f:93:9a:cd:e8:e2:7b:
                    9f:f9:0c:8d:a4:ec:56:d9:e8:19:f9:c4:be:50:3a:
                    c4:ed:2c:bc:66:ce:a7:75:ce:05:f2:00:bb:5f:92:
                    33:7b:a6:ed:4a:75:b7:bf:9f:6f:50:b2:1f:5a:76:
                    0a:1a:c0:d4:68:2e:ac:1d:e7:b3:a6:0f:16:08:a6:
                    08:77:30:67:dc:65:96:c4:9e:ca:28:d8:45:17:b6:
                    93:c3:ee:95:59:cc:55:a6:e3:d7:d5:f8:2c:8b:0f:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:68:10:78:92:E1:ED:14:CA:4C:75:E0:10:FE:01:04:95:AA:01
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:b4:bc:5f:a5:5a:93:04:cc:d4:76:57:a6:c9:02:e7:b0:
         91:70:b9:d4:44:49:c0:61:a4:81:08:70:33:68:fe:ee:cb:54:
         60:82:b0:6f:fa:4c:d4:65:be:89:85:b4:a2:11:8a:3b:31:72:
         e3:53:f4:54:f3:b3:0c:b0:93:f4:cd:1c:15:54:96:c3:da:94:
         19:3a:a1:0b:6d:09:3e:c8:10:9d:88:ab:00:e3:30:b6:cc:e8:
         29:85:99:16:b4:e8:d2:da:1c:83:d1:51:f5:b3:f4:8b:5b:37:
         2d:f4:49:5a:9d:71:41:22:ac:35:72:97:b6:da:42:20:3a:34:
         81:2a:b2:b0:bc:15:30:7e:c9:43:7f:3e:eb:f7:58:dc:e1:50:
         ea:ce:ff:62:22:bc:08:87:13:ca:ef:64:8c:20:eb:31:cd:a8:
         73:10:c8:3c:94:70:b9:89:f2:4b:98:0b:a5:54:d6:45:65:ff:
         6b:63:5a:be:a6:fb:76:58:1e:47:dc:73:0b:f5:39:fa:c3:fc:
         13:d2:51:1a:05:3d:03:60:66:87:3a:9c:54:12:ba:5a:bd:c6:
         16:80:aa:df:47:43:5d:ce:8e:6c:40:07:13:2a:49:aa:d3:a0:
         57:50:88:fa:09:ae:4d:e5:78:d2:b1:b4:7a:34:38:be:86:01:
         ae:d2:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:33 2025 by rpki-client