Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
File:                     DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json)
Hash identifier:          wN11dXlL4qPD3dBbqof8Di9X/w7u0tCFd6aCk3ZRp/E=
Subject key identifier:   5C:8E:D4:A1:96:7A:C1:7B:8A:7B:ED:A0:CC:2A:76:81:9F:AE:91:5D
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Certificate issuer:       /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial:       0C10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
Manifest number:          0C03
Signing time:             Sat 14 Jun 2025 18:35:30 +0000
Manifest this update:     Sat 14 Jun 2025 18:35:30 +0000
Manifest next update:     Sat 21 Jun 2025 18:35:30 +0000
Files and hashes:         1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: MfHU/66bV6A1zoKLUAZx02m4U7/53Zo8dxxRi2HbLGU=)
                          2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: OkLjB8I3eDhRRVfDQZiCj4Sm6JPcO6VJzFas4dJE+v8=)
                          3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: zKVWIo/ijyHnnaofhrkb9doq9/PhIYNnKSPWfXTf04w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
                          rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3088 (0xc10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
        Validity
            Not Before: Jun 14 18:35:30 2025 GMT
            Not After : Jun 21 18:35:30 2025 GMT
        Subject: CN=684dc0f2-5e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:4c:40:13:66:80:44:24:da:9b:4e:6f:5d:
                    9f:49:87:6e:7e:6a:14:b9:93:68:d3:7f:0f:ca:95:
                    63:16:c8:1c:d4:65:65:35:55:16:e8:57:03:71:cb:
                    e9:2a:4a:1f:21:4d:e9:d6:8d:91:ad:26:8e:d1:b2:
                    d4:6c:c6:ac:69:85:af:35:6a:50:da:5b:c6:f9:65:
                    ae:ae:53:67:3d:55:11:eb:ca:ab:0f:91:60:3b:35:
                    75:19:ef:35:a4:b1:cc:27:e2:bd:a9:37:89:50:fe:
                    8f:ef:0d:3c:f2:9f:b6:eb:95:1c:59:0e:b1:18:71:
                    fd:7f:a9:44:71:97:ca:20:9d:8a:ec:8b:ed:bb:14:
                    cd:d4:d7:56:3f:ac:d9:af:69:cd:31:92:37:73:28:
                    10:60:a6:a5:a2:2f:69:f4:85:96:da:5f:a7:c9:36:
                    ec:6c:3d:72:3f:24:58:41:0a:41:30:6a:18:93:2d:
                    f5:3c:76:25:34:32:32:3e:8a:2f:76:62:70:18:8a:
                    20:cc:6d:67:9b:eb:8e:25:f5:d9:48:f0:2e:bd:99:
                    1e:20:20:d7:e9:b0:81:29:4a:51:86:3e:b9:df:7b:
                    eb:b0:b0:03:37:20:91:84:d7:0d:64:d8:4b:53:21:
                    da:06:ff:ad:8e:5b:5f:7a:57:e1:8e:f9:67:9b:d5:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8E:D4:A1:96:7A:C1:7B:8A:7B:ED:A0:CC:2A:76:81:9F:AE:91:5D
            X509v3 Authority Key Identifier:
                keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:3e:bc:27:9a:86:d5:a4:d8:40:54:f7:eb:b1:9f:1c:8f:
         fc:88:38:23:74:36:b2:bd:94:11:7a:9b:41:c4:1f:8c:2b:6a:
         eb:d8:f7:17:68:e0:3e:0e:be:14:b2:19:63:8a:36:b3:a7:4a:
         17:e0:93:a2:f1:1d:11:d0:fa:f8:31:a7:a9:41:ff:21:a3:1e:
         a0:fd:58:16:32:cc:43:27:24:77:0d:70:86:e2:4f:cc:be:51:
         cc:bf:08:72:21:5b:83:fc:81:c0:0b:51:0b:40:c0:ed:ac:fb:
         5b:41:1e:3b:cf:76:02:78:24:b0:e0:cc:96:bd:45:8f:bb:67:
         92:e0:88:bd:93:a1:2f:56:6a:8a:ac:b4:58:0d:5e:e5:f1:2d:
         32:98:43:51:0b:9a:cf:cf:97:04:83:df:9d:0a:e0:c7:c2:3a:
         6a:09:ec:aa:d1:51:ec:76:c1:ac:0c:af:94:9e:91:da:0c:57:
         4c:63:01:cf:de:b4:6b:e3:cc:5e:d6:f7:7b:81:be:08:35:24:
         cb:2f:cd:f4:ae:fc:d5:22:fa:da:1d:f0:9d:ab:01:b0:5b:70:
         bb:fa:dd:21:85:1f:50:3c:35:b0:c1:41:e9:a0:66:57:1f:0d:
         ec:11:47:f4:fa:2a:70:0b:8c:fb:01:98:b1:fa:68:51:3c:6e:
         a3:19:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:58:29 2025 by rpki-client