Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
File:                     dhdGJegWMtON9iqDtXsDuiiH5vU.mft (raw, json)
Hash identifier:          ehQe+0B5PH6r1Fh9R3HlkIUpS6zoP/RS5GBc4siBhqA=
Subject key identifier:   F1:0C:B6:4B:E1:80:2A:4C:9D:A9:54:2B:87:68:4F:55:5B:2E:41:EF
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       07DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
Manifest number:          079E
Signing time:             Wed 18 Jun 2025 21:13:22 +0000
Manifest this update:     Wed 18 Jun 2025 21:13:22 +0000
Manifest next update:     Wed 25 Jun 2025 21:13:22 +0000
Files and hashes:         1: dhdGJegWMtON9iqDtXsDuiiH5vU.crl (hash: Uv5moOrJwG8qgM3YpOvKHS0mFf65cICR83bYbzVSNJA=)
                          2: 84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (hash: v6e1A53lOs4ttAFgNyyjZoCXEPeOi0GiecLMqc/MAn8=)
                          3: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (hash: Ok9YVh7iJVfq5jAi1dUk84sBA5IsYOWabJTj7XjuXII=)
                          4: 824D5E300E9711EB9A6C2B3CC4F9AE02.roa (hash: ZDF/6Xw9ZE7b2+OVuWk9y1I5UDHjuJdR4+iTcEafgmY=)
                          5: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (hash: 5isKKj264kPgvcdF8hBz70YJR1jtU24tZnWCibLQbs8=)
                          6: 8068BF600E9711EB9A6C2B3CC4F9AE02.roa (hash: iqYDXGJezvbHsoQI5LOs/HpZOp9DdP6shWT091zXI/w=)
                          7: 21CF5E6C7AF111EF8BC4E684C4F9AE02.roa (hash: b1nalvR/eNXqTum+cSymzCLGQcxE1TXmTmkjmB0g0BY=)
                          8: A98668464EEB11EFB3305C85C4F9AE02.roa (hash: tWiWEgQiTh2MC49VXb2kimhBotEglhYAfcGxfEIxWjU=)
                          9: 1E5945A69E4111EDB7C9020EC4F9AE02.roa (hash: LsbxGQh0J4jRRvHUOzGfhoQnBu+EqX3+bxB0XHIwKEg=)
                          10: 830314BE0E9711EB9A6C2B3CC4F9AE02.roa (hash: eUQRjtj0tF+4ReuUVl4yzwgyQ7i/OO1b+JP4gilLkCk=)
                          11: 80F371780E9711EB9A6C2B3CC4F9AE02.roa (hash: BL4tECo9e+3ufRZK8OCt2j/Uj2lw36IymgWS2+ZdHFQ=)
                          12: 8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (hash: bczxjt2FwG7ZvqXhUNRx4J14OqU7vScZjaB3EzaWWXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 21:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Jun 18 21:13:22 2025 GMT
            Not After : Jun 25 21:13:22 2025 GMT
        Subject: CN=68532bf2-8188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:d4:23:8c:ad:21:8a:b9:80:41:94:7b:4e:
                    bd:af:58:81:db:90:14:55:29:5f:4e:7b:9d:a3:30:
                    ba:ff:52:6c:c0:88:73:2b:5d:09:07:5c:ee:f7:14:
                    30:91:01:2e:41:03:3e:73:cd:1c:6c:ca:cd:84:5f:
                    20:c3:b8:d4:a4:8d:3f:4e:1e:a0:04:de:cd:d3:b7:
                    fb:ae:ab:d7:2a:ae:7e:f1:4b:27:75:ed:aa:06:96:
                    b2:fd:5e:f2:e5:01:f1:fe:90:b1:54:d8:2b:88:b1:
                    bc:52:81:c8:5f:b0:ed:36:db:20:d3:df:42:34:09:
                    50:ba:05:99:87:17:91:a8:10:60:b7:93:e3:11:b1:
                    9e:69:d0:fa:52:67:31:3e:c6:71:7d:ba:ee:df:ce:
                    70:46:d7:c1:ff:07:52:be:9e:e9:c1:22:39:69:1e:
                    6f:b2:1c:ba:76:9b:f5:d8:05:3a:dc:56:3e:4b:bd:
                    96:05:d0:53:35:fb:f9:d2:64:87:c4:95:21:c5:47:
                    8a:fa:03:a3:20:68:d3:8c:f6:89:60:19:2b:c5:db:
                    2d:cb:a9:d7:b2:6b:e6:5d:8b:32:f9:7c:42:df:b2:
                    37:db:a7:25:fd:97:e0:ee:9f:b1:4c:95:96:74:08:
                    9a:ae:53:18:6c:75:91:46:42:bd:97:4e:94:36:c0:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:B6:4B:E1:80:2A:4C:9D:A9:54:2B:87:68:4F:55:5B:2E:41:EF
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f8:d4:0a:4e:09:d3:6a:61:88:d9:93:a7:10:a3:04:e7:ec:
         ce:f8:5b:4e:a5:b6:dd:a4:82:2e:f5:b3:1b:1f:ed:ba:25:c2:
         8e:f3:c3:bc:a5:a0:0e:06:d3:9b:da:c4:e7:4c:f5:cd:26:ec:
         c4:82:97:9a:6f:5d:b3:03:a5:ff:0e:8a:ad:6b:1e:1e:3b:f2:
         f0:0b:c7:38:ad:db:5c:a1:7f:ba:05:a0:cf:2c:78:6f:a7:ba:
         72:5c:f7:c3:a0:0a:a6:a1:f4:f5:45:5e:4d:3d:d3:6c:eb:6c:
         8e:2a:4a:3d:08:8a:ff:f4:84:fb:1d:e8:3b:c4:69:4d:16:39:
         bf:a0:13:ae:fa:1c:e9:80:c0:de:d0:19:1f:5c:79:7f:56:b6:
         ab:48:f0:26:06:80:66:06:37:ae:97:d9:da:62:bf:99:62:9e:
         92:f3:ba:0c:1a:d6:3a:4a:0d:a5:bd:3c:e7:ed:f7:47:eb:ae:
         57:ab:a1:46:4c:e9:e1:ed:1c:53:bf:92:09:87:2b:e4:26:9b:
         8c:9b:67:9e:f9:d1:37:d3:70:c6:32:4d:a5:dc:a6:3c:c4:3d:
         c4:38:0d:dd:e0:49:0c:59:4f:af:d2:7f:66:9a:6e:da:a0:c4:
         91:82:71:76:06:14:eb:87:58:a6:e3:10:34:80:a8:b6:3a:45:
         d3:4e:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 16:29:48 2025 by rpki-client