Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
File:                     DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json)
Hash identifier:          0LJmyzcs/2Ee2015+iIyNG5zHTV8Dt6dlf944auYGvE=
Subject key identifier:   79:49:C7:DB:40:63:F1:57:8D:15:19:6E:17:24:EF:97:7E:75:69:CA
Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA
Certificate issuer:       /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
Manifest number:          0111
Signing time:             Sun 03 Aug 2025 05:14:13 +0000
Manifest this update:     Sun 03 Aug 2025 05:14:13 +0000
Manifest next update:     Sun 10 Aug 2025 05:14:13 +0000
Files and hashes:         1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: CNTT5JhPBtFznjJxgODjhcMY3DnFUrd/C8dd6d2/zF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 05:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
        Validity
            Not Before: Aug  3 05:14:13 2025 GMT
            Not After : Aug 10 05:14:13 2025 GMT
        Subject: CN=688ef025-d85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:0e:d7:27:b1:55:4d:c4:40:e8:e8:a4:69:
                    45:5e:84:f1:0b:48:5e:64:ab:78:d0:e8:77:78:22:
                    3e:98:02:68:32:08:1f:79:13:ea:4d:3c:32:d6:2b:
                    f8:b8:a9:db:a2:37:2d:87:11:57:3b:ef:52:23:02:
                    86:a1:f1:4b:9e:a1:8e:d9:22:f9:d4:ce:7d:a5:c0:
                    d9:44:2b:a3:1e:a1:36:91:ce:f2:8f:41:1e:6a:06:
                    d3:05:fc:58:4b:92:12:d2:bc:dd:24:11:7b:5c:cc:
                    3f:10:e9:6b:90:f9:6b:4e:02:f8:cd:94:21:b3:b2:
                    65:01:e2:78:cd:ab:9f:02:13:05:34:18:26:0e:ba:
                    82:6e:08:98:06:78:b7:7c:64:dc:fb:a6:45:bd:3a:
                    f1:df:2f:c0:a2:d7:92:ca:ef:04:c8:08:c8:ee:8c:
                    1a:a2:29:1c:56:5d:91:71:6c:8e:3f:46:58:a1:13:
                    76:cf:df:15:74:47:c7:1b:5f:9d:59:38:a8:7f:e4:
                    2d:e9:04:e2:6c:86:13:2e:4b:df:19:6d:65:72:e1:
                    5d:c1:df:fc:da:dc:7a:99:26:1e:d0:42:6d:91:fd:
                    67:20:fe:f5:97:50:c6:9b:da:44:97:8e:2f:5e:8a:
                    72:79:db:29:cc:3f:9a:d1:5d:5e:c6:53:01:de:ee:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:C7:DB:40:63:F1:57:8D:15:19:6E:17:24:EF:97:7E:75:69:CA
            X509v3 Authority Key Identifier:
                keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:cc:85:7c:01:e7:e4:21:54:2a:5b:fd:cf:8b:4a:59:5c:ce:
         84:97:b4:e3:14:ef:4c:16:c9:a5:70:6d:ac:5b:45:a6:8f:56:
         4f:10:48:a7:dd:fb:bc:37:71:34:50:eb:85:99:1c:31:62:99:
         cf:a8:29:44:93:91:e0:4c:91:84:db:7a:62:83:79:7b:d9:46:
         a9:5b:9f:62:96:dc:0b:70:e9:b1:dc:de:47:1c:30:ee:81:5f:
         02:ac:fb:0c:19:e9:44:2d:57:7e:3c:70:47:bf:65:2d:f1:dc:
         ab:2d:b1:a6:da:bf:b7:c8:db:2a:81:2e:a1:24:f5:4d:52:45:
         3e:cc:ea:bd:bc:1e:e1:5e:85:a1:54:2d:73:d8:50:40:72:7f:
         68:de:cf:dd:fe:2b:44:5b:c6:eb:f6:57:bc:da:41:62:c9:73:
         d0:e2:14:f9:ba:9a:bb:4c:98:94:bb:f5:00:c9:7b:b6:07:4e:
         93:c7:44:81:52:9f:b1:ca:7f:41:1f:0c:be:d9:74:5b:98:31:
         8f:3c:3a:e3:1f:81:e2:8d:62:89:4c:67:36:4f:89:a6:ec:04:
         ff:ec:22:75:ac:8b:d2:a6:6b:d6:08:0c:87:0a:4c:90:9a:82:
         73:4b:32:0f:fa:7f:f9:5f:e9:79:30:ed:ac:f4:11:64:9f:88:
         8b:6f:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:19 2025 by rpki-client