Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File:                     dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier:          Z2i5bHfs0ed/DMuHxiCHfSyN+HGxRs0v37DNCQH5bu4=
Subject key identifier:   04:60:B5:ED:67:CA:8E:B5:2A:B6:B3:C1:B2:80:3E:0D:34:35:51:8D
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number:          0167
Signing time:             Thu 19 Jun 2025 03:24:50 +0000
Manifest this update:     Thu 19 Jun 2025 03:24:49 +0000
Manifest next update:     Thu 26 Jun 2025 03:24:49 +0000
Files and hashes:         1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: 2T+I0Q7nnAEPjqzqN7qkg1chKA9Q1ZNmw31DIN1r57M=)
                          2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: zJw8Qq8QUnGm1SovwMdlmkT9wmbsFtkZF4qsHtw/2sk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 03:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Jun 19 03:24:49 2025 GMT
            Not After : Jun 26 03:24:49 2025 GMT
        Subject: CN=68538302-b01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a5:17:3c:8a:d1:60:d9:67:94:1b:1a:d8:4f:
                    de:63:43:e2:f9:3e:20:c1:01:40:bf:23:ee:e5:68:
                    f7:28:4f:b1:ef:16:7d:55:ac:cb:a9:01:34:7b:79:
                    a8:c0:6c:16:7f:77:ed:07:e8:0c:b5:a1:ce:b8:ce:
                    ce:9a:ca:f9:a5:1d:f1:14:df:3f:32:dc:36:b3:88:
                    cb:44:16:19:56:16:61:ec:17:95:7b:03:bb:17:74:
                    cd:18:4c:86:45:ec:d1:29:93:a3:12:c6:b9:ea:66:
                    16:63:12:a8:c6:e6:bc:47:e7:65:8d:9a:5f:0f:e9:
                    24:0e:5f:7a:a0:04:e0:97:67:a8:6e:ea:d3:e7:99:
                    f2:c3:17:7f:b1:93:4a:a3:d4:f8:6d:a0:19:3e:17:
                    2b:fe:20:25:97:54:0d:dd:7d:56:9a:7e:8d:e7:10:
                    b1:f5:43:7b:49:93:76:1e:08:e3:61:c6:1c:c6:9f:
                    ff:78:ff:cc:9e:68:b9:7c:09:80:cb:20:5e:48:3f:
                    86:7e:98:61:f3:a4:8c:6f:04:84:1c:7e:40:fd:29:
                    88:24:75:3e:3a:30:7f:05:6d:1b:3a:d3:0b:3b:6d:
                    fb:f0:29:7d:7c:fc:46:e9:38:a4:4f:66:64:ab:a6:
                    ff:73:72:fe:39:5a:fd:6e:cc:35:7a:7c:3f:5d:06:
                    eb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:60:B5:ED:67:CA:8E:B5:2A:B6:B3:C1:B2:80:3E:0D:34:35:51:8D
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:c0:b8:02:9c:8e:67:f0:88:8f:e3:40:21:75:0f:72:23:
         26:89:36:55:ef:ea:d6:03:c9:76:e7:f8:6b:7f:06:80:29:7f:
         0e:1b:fa:1e:41:53:93:2c:70:6a:17:57:c1:83:75:96:1d:1b:
         8e:32:76:58:97:98:9a:19:51:f2:e3:8e:71:18:f0:fb:5d:ed:
         e3:24:59:45:4c:6e:5d:05:52:33:a9:e6:c1:da:11:bd:3c:6e:
         15:28:27:b7:0d:a4:b6:cd:d4:9f:1f:1f:89:0a:cd:b0:77:7f:
         1c:a8:a0:09:e5:fc:70:13:aa:22:e4:e2:0a:4e:3d:25:e0:d3:
         e5:29:aa:42:d7:ce:f6:4f:68:79:f7:cf:af:40:e9:69:02:e0:
         e1:b1:cf:d1:53:e1:db:03:e6:51:3e:08:bb:e9:a9:10:8c:0b:
         a8:58:a9:99:93:f9:04:1e:69:4b:53:f9:ce:9a:00:21:7a:b5:
         0f:1f:51:7e:13:e2:15:30:cb:8f:04:51:1a:6a:0d:2d:b8:22:
         cd:4a:68:09:12:6f:ec:44:aa:2f:f8:7d:4d:67:1c:fe:3c:96:
         00:71:a1:fd:c5:3e:7a:dc:25:4d:2b:66:10:2f:fc:fb:37:81:
         8e:73:7a:4b:28:d0:aa:25:37:b2:c2:ff:4d:6a:da:0f:1f:1b:
         e2:03:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:51:08 2025 by rpki-client