Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
File:                     DVAomGo1a2m0r30vZknWu9y-i-0.mft (raw, json)
Hash identifier:          gfBTh+4lNExqG9q5nc5nTEaQHAON/7QrSdN2UwLNEO8=
Subject key identifier:   56:2B:9A:B2:DF:82:28:6C:6E:D9:05:4F:8B:24:74:11:1D:23:42:86
Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
Certificate issuer:       /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Certificate serial:       0671
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
Manifest number:          0652
Signing time:             Sat 02 Aug 2025 23:06:23 +0000
Manifest this update:     Sat 02 Aug 2025 23:06:22 +0000
Manifest next update:     Sat 09 Aug 2025 23:06:22 +0000
Files and hashes:         1: DVAomGo1a2m0r30vZknWu9y-i-0.crl (hash: IP1u3MCf4/zy5rVftmYB+Cie3lsuY0fYjKaSMfJL+5A=)
                          2: 2A44713C67EE11F0BC703D32C4F9AE02.roa (hash: BpDeUNsAVXhQcFIvYpQWRoffbAEHqNSC31GWxr+1Y+s=)
                          3: F3ABAB8E67B811F0976F6A50C4F9AE02.roa (hash: uRR/m+p39oHAi/sHNgk1sFfUujjCt9edvKbA8+8v5fk=)
                          4: 288F0B4A67EE11F0BC703D32C4F9AE02.roa (hash: naiZaIG3326aGab3zoF2f9J2xFvwxuYgd3e4+MUeJA0=)
                          5: 17FCD734563A11EE89046132C4F9AE02.roa (hash: nBLvVbNoZBHwgAUG7CrVbHtaE204SRQMJIPFLqxYQG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 23:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D4, serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
        Validity
            Not Before: Aug  2 23:06:22 2025 GMT
            Not After : Aug  9 23:06:22 2025 GMT
        Subject: CN=688e99ef-1da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:22:98:0a:ad:e7:1e:c4:98:31:4f:f4:15:1d:
                    00:b8:81:ba:1b:12:4e:be:d8:73:f3:d3:d8:e6:1a:
                    3b:7c:ae:36:ea:d4:86:61:61:56:76:95:f5:92:65:
                    3f:e0:d9:12:5e:52:19:c9:51:9e:0d:dd:9e:61:38:
                    a5:1c:a5:d8:79:8c:0f:1a:93:90:19:43:f2:f2:99:
                    1d:b7:32:39:a1:73:58:28:98:d2:f5:13:84:0d:18:
                    79:72:d4:6b:3e:33:7e:d3:6e:a9:b8:68:f0:f2:26:
                    e8:94:bf:2a:b7:8a:f5:ed:bc:4b:8a:61:a2:92:2a:
                    23:74:bd:44:df:ed:1c:33:7d:81:a9:d3:56:de:da:
                    63:0a:84:9f:29:4b:4c:a1:c4:ab:3e:53:a4:b6:ff:
                    0d:8a:91:80:6a:17:6a:f6:26:23:a1:2b:fe:e5:4d:
                    1f:99:80:45:58:b7:d4:c6:19:46:36:58:57:37:5b:
                    02:1c:f5:23:34:4c:d5:71:46:7a:b1:4c:94:26:97:
                    46:51:1f:44:fc:db:34:79:0e:dd:b1:f7:f2:99:ee:
                    b9:54:47:dd:9c:22:f6:36:86:c7:85:94:f7:2c:96:
                    11:e1:6b:05:23:41:76:55:27:94:3b:b4:5f:56:0d:
                    e9:ee:1b:3f:e3:f6:70:2e:94:cd:c4:3b:f3:62:b1:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2B:9A:B2:DF:82:28:6C:6E:D9:05:4F:8B:24:74:11:1D:23:42:86
            X509v3 Authority Key Identifier:
                keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:68:9d:59:96:f2:f5:14:ca:b4:1c:34:0e:4c:c3:fe:e4:09:
         70:d5:66:e2:86:90:bd:2a:c0:93:e3:d9:e6:b0:53:ef:68:70:
         41:7b:d5:b1:74:d3:b9:4f:e4:b8:79:7c:74:0a:38:6a:f5:9a:
         54:cf:12:1f:b9:a5:7e:c8:96:63:7a:9d:fa:d0:e6:11:b6:6c:
         2b:01:75:fc:da:ca:0f:a3:c0:fe:50:1b:c9:2e:18:03:fd:c7:
         3d:50:79:b6:00:b5:b4:6e:3c:ec:b7:27:c5:b3:31:37:74:20:
         e1:16:51:a1:55:0b:f0:79:93:6c:6d:26:ee:00:95:79:18:6a:
         25:a7:d2:df:a2:fe:3d:98:a5:9a:cb:46:71:50:b8:f3:e1:61:
         b1:6b:8e:3d:19:44:33:de:2a:04:34:3a:db:6b:96:2f:7b:7b:
         79:66:fe:e9:12:f7:6f:bc:df:e8:9a:e9:51:93:41:86:53:fb:
         c0:cd:78:40:80:c7:f0:e8:86:0a:36:38:e0:ee:d6:df:0f:b3:
         52:5d:ad:72:e9:23:f5:8c:1e:95:b4:5a:54:22:0a:c7:f4:d0:
         c5:d9:7c:97:f8:cb:51:36:eb:f6:4d:5e:e3:08:29:7c:4d:32:
         26:e2:43:8f:aa:c7:2b:a1:6c:10:d9:de:04:3c:0a:8b:00:5e:
         80:ea:17:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:38 2025 by rpki-client