Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
File:                     DVYqrcHASY2u4mEMGn2odb5jXOo.mft (raw, json)
Hash identifier:          +L07qhDIg/OjrS7AHbHE3h38koTMSpKbtHNtfiF/Y84=
Subject key identifier:   22:9C:B6:B1:81:D3:74:74:13:34:5A:D7:17:4C:C4:47:64:9A:AD:5A
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Certificate issuer:       /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial:       02C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
Manifest number:          02BE
Signing time:             Sun 15 Jun 2025 01:09:17 +0000
Manifest this update:     Sun 15 Jun 2025 01:09:17 +0000
Manifest next update:     Sun 22 Jun 2025 01:09:17 +0000
Files and hashes:         1: DVYqrcHASY2u4mEMGn2odb5jXOo.crl (hash: nPUfnhsKlLLc7C4N24M1UfRoHH0wIl3wW8Z/axaZ4q0=)
                          2: ACC8D92C543611EEA8C54616C4F9AE02.roa (hash: iIYe3iAqeI3EEeITOhoXPScYKg3h3YTnGvgaSVvgFv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
                          rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
        Validity
            Not Before: Jun 15 01:09:17 2025 GMT
            Not After : Jun 22 01:09:17 2025 GMT
        Subject: CN=684e1d3d-ec4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:fd:79:48:f8:cc:34:9a:dd:0e:98:90:5c:
                    d7:37:bb:23:a9:fb:4a:f5:51:33:69:7a:f5:bb:cd:
                    85:37:6a:13:b8:14:c6:91:25:05:37:bc:dc:a6:76:
                    5f:c9:08:78:dd:33:18:e8:d8:7f:e4:13:7a:fa:41:
                    0d:4e:a8:4e:75:00:4d:89:7f:9b:b8:c7:a9:ad:35:
                    07:46:3f:eb:ec:b8:5a:fa:4e:01:8d:3e:f6:42:dd:
                    8b:57:f2:6e:11:fa:57:05:44:67:a2:2f:6a:80:5b:
                    0e:c6:cf:0e:f9:92:6f:c6:bc:08:b5:94:6a:99:4c:
                    e1:8f:fe:61:0a:1a:03:db:4c:96:9c:52:39:d2:8c:
                    b5:e9:48:fc:c3:14:eb:42:f3:82:fe:5f:4c:fe:29:
                    d3:0c:ff:8b:46:a3:ac:5c:21:fe:46:00:6b:0b:1e:
                    5d:02:b3:72:67:8a:7d:19:46:21:cc:ec:69:5c:8b:
                    ab:17:75:c4:86:ac:f4:91:70:eb:13:98:b3:18:62:
                    b3:f7:cb:d6:8f:3e:ad:68:a4:07:2a:09:c4:03:81:
                    9c:bc:12:4f:dd:d5:7c:d7:05:52:ac:12:1f:a3:54:
                    01:4c:ee:3a:af:04:b0:7d:a0:01:b0:07:e9:3d:ab:
                    c4:69:4f:35:93:48:cb:66:ef:57:f4:df:49:6a:c7:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9C:B6:B1:81:D3:74:74:13:34:5A:D7:17:4C:C4:47:64:9A:AD:5A
            X509v3 Authority Key Identifier:
                keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:33:56:b9:01:c9:f5:53:ee:c4:64:07:54:43:6d:93:f3:
         30:13:df:df:3d:4c:10:e7:be:86:ad:3f:1e:5b:40:a1:a2:68:
         18:7b:f9:b8:0a:e9:8d:30:71:41:32:1c:15:ce:0f:7e:d9:87:
         47:96:75:98:d7:ad:39:2b:a1:b0:fd:1d:0a:03:d7:df:e4:dc:
         49:52:62:5c:45:e4:88:14:82:5a:89:8d:a5:00:29:e7:34:a4:
         c9:5e:8c:e5:a4:a5:73:cc:f9:b6:46:cc:0e:da:0a:d0:12:49:
         57:4e:db:cf:2c:39:a1:ec:a7:c3:7a:3d:4f:ee:91:fc:56:bd:
         8b:2b:71:5b:6b:78:a8:b7:d2:6c:53:25:d4:13:17:b4:5d:2f:
         45:a5:7d:25:d5:5b:ea:8e:bc:77:90:86:1b:db:8c:bb:52:ef:
         fe:ac:04:b3:c6:10:ac:2b:77:80:9c:e3:5e:a7:d7:3b:e0:49:
         6d:06:81:10:66:de:18:10:65:ff:6c:50:fe:9d:23:82:43:43:
         3c:bd:6a:0a:60:17:07:d8:0d:b2:42:e9:44:ca:8f:1a:30:b2:
         a8:81:4a:8b:78:d3:6c:e8:50:96:48:59:76:10:9e:70:e2:24:
         29:d5:1f:14:df:9c:46:3d:c8:70:3e:95:b4:dc:0e:ae:00:ac:
         96:17:7d:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3NTYxMTAvBgNVBAUTKDBENTYyQUFEQzFDMDQ5OERBRUUyNjEwQzFBN0RBODc1
QkU2MzVDRUEwHhcNMjUwNjE1MDEwOTE3WhcNMjUwNjIyMDEwOTE3WjAYMRYwFAYD
VQQDEw02ODRlMWQzZC1lYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFD9eUj4zDSa3Q6YkFzXN7sjqftK9VEzaXr1u82FN2oTuBTGkSUFN7zcpnZf
yQh43TMY6Nh/5BN6+kENTqhOdQBNiX+buMeprTUHRj/r7Lha+k4BjT72Qt2LV/Ju
EfpXBURnoi9qgFsOxs8O+ZJvxrwItZRqmUzhj/5hChoD20yWnFI50oy16Uj8wxTr
QvOC/l9M/inTDP+LRqOsXCH+RgBrCx5dArNyZ4p9GUYhzOxpXIurF3XEhqz0kXDr
E5izGGKz98vWjz6taKQHKgnEA4GcvBJP3dV81wVSrBIfo1QBTO46rwSwfaABsAfp
PavEaU81k0jLZu9X9N9JasebwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKctrGB
03R0EzRa1xdMxEdkmq1aMB8GA1UdIwQYMBaAFA1WKq3BwEmNruJhDBp9qHW+Y1zq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc1Ni85MTkwNjg1MkY4
OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZMnU0bUVNR24yb2RiNWpY
T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RWWXFyY0hBU1kydTRtRU1HbjJvZGI1alhPby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Qzc1Ni85MTkwNjg1MkY4OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZ
MnU0bUVNR24yb2RiNWpYT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBfjNWuQHJ9VPuxGQHVENtk/MwE9/fPUwQ576GrT8eW0ChomgYe/m4
CumNMHFBMhwVzg9+2YdHlnWY1605K6Gw/R0KA9ff5NxJUmJcReSIFIJaiY2lACnn
NKTJXozlpKVzzPm2RswO2grQEklXTtvPLDmh7KfDej1P7pH8Vr2LK3Fba3iot9Js
UyXUExe0XS9FpX0l1Vvqjrx3kIYb24y7Uu/+rASzxhCsK3eAnONep9c74EltBoEQ
Zt4YEGX/bFD+nSOCQ0M8vWoKYBcH2A2yQulEyo8aMLKogUqLeNNs6FCWSFl2EJ5w
4iQp1R8U35xGPchwPpW03A6uAKyWF32R
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:35:48 2025 by rpki-client