Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File:                     DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier:          c2eQKCejP4Bu5jAaXiISbkZIS39DLia5Kx1DHntXt1g=
Subject key identifier:   6D:F6:0A:04:00:B0:1A:01:C1:DE:45:5A:E3:4E:3A:8E:39:90:B4:57
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer:       /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number:          01D0
Signing time:             Sun 15 Jun 2025 02:28:54 +0000
Manifest this update:     Sun 15 Jun 2025 02:28:54 +0000
Manifest next update:     Sun 22 Jun 2025 02:28:54 +0000
Files and hashes:         1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: T9UVY1yV1DzDGWi9hoWQn8RRyzTp9PN8mOnNObuPksQ=)
                          2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=)
                          3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: SWOYtTparuLNcoY2J2+YbGx7VZ2r6FyeMqDuKJ+aGIE=)
                          4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: 4aOvYw0Eo1kn2gxCnWQmbywNgEtQRRPUXbr/k+ZLw8M=)
                          5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: ttGdGPsU5z/fVvxdSI+hiSfmbJNjWbGxGefkXRpFRpI=)
                          6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: CF1J0U4bw58RMShNGhdMA9v1rutlPTB0QeSV/Dx5uXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
                          rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
        Validity
            Not Before: Jun 15 02:28:54 2025 GMT
            Not After : Jun 22 02:28:54 2025 GMT
        Subject: CN=684e2fe6-cb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:e6:53:c7:d9:f7:dd:fc:04:e5:55:e9:78:
                    bd:b6:c4:ca:67:88:ea:2f:f3:84:0f:11:8f:38:7c:
                    95:b6:3e:5b:8c:ea:6c:cd:df:fb:ce:f1:c7:50:be:
                    20:b8:9a:ff:e8:f6:50:ce:13:2c:20:f4:a4:40:38:
                    b6:9a:80:20:8d:6e:dd:3f:5e:f1:a1:8a:d3:23:2c:
                    ee:10:b5:52:3d:af:32:92:00:e9:bc:91:84:9b:ce:
                    2d:d0:26:d9:9c:ac:3f:65:9f:53:2d:c9:c4:3a:ae:
                    7d:11:9c:e1:c6:69:7a:94:4e:56:d8:de:07:24:be:
                    8e:ec:5e:85:e5:a3:ba:7a:e7:73:e2:5e:ea:b1:98:
                    94:0c:1c:1b:fc:4b:ec:2d:18:85:fe:79:ca:01:cc:
                    7a:0b:46:6a:01:1c:56:c5:12:ab:86:69:7c:23:2e:
                    b1:8b:7c:10:63:fe:0c:99:2b:f9:58:1c:91:f4:0e:
                    06:b4:41:bf:5e:2b:4a:ac:d4:a0:f3:49:e0:1f:be:
                    3a:21:84:82:44:c6:9c:b7:1c:f5:f5:48:c8:89:39:
                    54:e8:8c:04:11:03:55:78:a9:6f:64:76:5a:0d:59:
                    37:2e:9a:65:60:b1:d8:a1:02:5b:2d:69:74:8d:ad:
                    3e:15:26:bb:e1:fc:0c:7f:7a:f9:4f:02:3b:53:1c:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F6:0A:04:00:B0:1A:01:C1:DE:45:5A:E3:4E:3A:8E:39:90:B4:57
            X509v3 Authority Key Identifier:
                keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:67:a9:6e:11:eb:bb:99:bd:86:8a:86:49:bb:f3:fc:ad:27:
         3d:93:ba:8e:b3:8a:12:bd:3b:a0:7b:6b:9b:17:25:db:c5:13:
         d2:42:ff:31:b1:b5:dc:bc:05:97:ba:94:4c:6f:e1:18:73:74:
         4c:8b:b1:1d:26:65:b7:2f:56:86:bc:69:d2:cb:d8:31:a3:a1:
         4c:5c:98:54:d0:5e:37:f8:c9:c9:c8:10:59:00:4a:ec:01:17:
         10:c4:87:0b:a0:e6:f2:f5:2a:51:a7:ab:4b:88:c3:73:d2:bf:
         ec:47:15:b8:01:99:d6:73:d2:be:cd:76:79:7e:ed:ce:36:d0:
         2e:06:02:1d:77:28:32:46:bc:66:48:72:e9:4c:c4:14:0e:09:
         58:64:68:33:3c:cc:58:37:6f:42:bd:ff:43:aa:c9:2a:83:35:
         b3:a0:a1:63:f6:22:0b:b1:49:fd:50:53:8e:7d:06:45:c0:fc:
         c5:40:b0:c3:6b:09:cf:4e:c1:52:07:b5:9a:e9:51:37:ac:ac:
         8c:3c:48:c4:f7:ac:a9:40:9e:87:e1:39:88:54:d1:e3:5f:2a:
         8f:2c:ab:ac:88:19:84:c7:df:28:74:50:ec:3f:f2:01:10:8d:
         b4:de:d2:ba:8d:db:da:16:66:0a:8c:99:94:7a:98:c7:5b:4d:
         ca:0b:ec:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1
MUI5Nzc3RkEwHhcNMjUwNjE1MDIyODU0WhcNMjUwNjIyMDIyODU0WjAYMRYwFAYD
VQQDEw02ODRlMmZlNi1jYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2PmU8fZ9938BOVV6Xi9tsTKZ4jqL/OEDxGPOHyVtj5bjOpszd/7zvHHUL4g
uJr/6PZQzhMsIPSkQDi2moAgjW7dP17xoYrTIyzuELVSPa8ykgDpvJGEm84t0CbZ
nKw/ZZ9TLcnEOq59EZzhxml6lE5W2N4HJL6O7F6F5aO6eudz4l7qsZiUDBwb/Evs
LRiF/nnKAcx6C0ZqARxWxRKrhml8Iy6xi3wQY/4MmSv5WByR9A4GtEG/XitKrNSg
80ngH746IYSCRMactxz19UjIiTlU6IwEEQNVeKlvZHZaDVk3LpplYLHYoQJbLWl0
ja0+FSa74fwMf3r5TwI7UxxQkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG32CgQA
sBoBwd5FWuNOOo45kLRXMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF
MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo
WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjZ6luEeu7mb2GioZJu/P8rSc9k7qOs4oSvTuge2ubFyXbxRPSQv8x
sbXcvAWXupRMb+EYc3RMi7EdJmW3L1aGvGnSy9gxo6FMXJhU0F43+MnJyBBZAErs
ARcQxIcLoOby9SpRp6tLiMNz0r/sRxW4AZnWc9K+zXZ5fu3ONtAuBgIddygyRrxm
SHLpTMQUDglYZGgzPMxYN29Cvf9DqskqgzWzoKFj9iILsUn9UFOOfQZFwPzFQLDD
awnPTsFSB7Wa6VE3rKyMPEjE96ypQJ6H4TmIVNHjXyqPLKusiBmEx98odFDsP/IB
EI203tK6jdvaFmYKjJmUepjHW03KC+xP
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:58 2025 by rpki-client