Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
File:                     DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json)
Hash identifier:          AU4rrNP++hDz/FMhZAGzhE9Bj3hcrVN7xlgh/wJ/8Og=
Subject key identifier:   83:33:6B:55:F0:F8:60:1B:4F:A8:6F:9E:D5:1E:A9:56:6F:53:18:BF
Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA
Certificate issuer:       /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
Manifest number:          13B2
Signing time:             Fri 08 Aug 2025 19:52:49 +0000
Manifest this update:     Fri 08 Aug 2025 19:52:48 +0000
Manifest next update:     Fri 15 Aug 2025 19:52:48 +0000
Files and hashes:         1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: eW9Ez7TR+kz6F7Jd+SrnHS4mf7Xl/EnSZ+MMCaN6Fy4=)
                          2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: /dfKSmCCPzovaQnLyJDXl3OjPhb/TsvQWem8YYEiMIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl
                          rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA
        Validity
            Not Before: Aug  8 19:52:48 2025 GMT
            Not After : Aug 15 19:52:48 2025 GMT
        Subject: CN=68965590-c9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b1:c1:de:1c:f9:80:85:32:5d:ad:08:c1:48:
                    5b:4f:71:58:43:cc:43:7e:4c:70:80:70:9e:ac:bb:
                    a4:14:97:66:ee:31:1e:0d:4a:87:2b:85:e6:08:0b:
                    82:94:94:a0:e3:bc:bd:c9:11:af:ac:00:44:83:51:
                    35:04:17:0d:0c:ea:3e:80:6d:10:17:3d:b3:23:94:
                    ba:81:db:ea:59:d5:d9:53:da:0c:67:20:32:c4:35:
                    f3:06:4d:e9:cd:4c:49:bf:3e:68:dc:c6:34:ea:b5:
                    5d:fe:fd:cf:86:be:e5:8f:af:49:06:38:b0:54:e7:
                    9e:a9:bb:aa:ed:69:ef:75:6d:77:38:7c:63:cf:e6:
                    3e:47:f8:40:99:ca:0f:02:98:a6:ed:0a:23:61:ba:
                    b7:a2:29:a6:d1:a9:d3:f4:11:8a:fe:ed:99:40:6c:
                    c6:ab:da:df:08:d8:dc:89:12:3f:61:b7:34:c1:78:
                    94:e2:ca:21:ef:3f:61:29:8c:8e:fd:09:6c:d5:71:
                    83:54:be:27:b2:35:11:9c:8d:bb:82:04:da:ea:1b:
                    98:1a:c9:e4:90:92:6f:ea:90:eb:e8:c2:4b:65:7f:
                    e6:41:6f:36:80:01:75:a9:39:6b:22:28:3c:a3:ad:
                    e1:69:61:77:bd:9c:a6:fa:19:8f:bd:a0:44:3a:75:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:33:6B:55:F0:F8:60:1B:4F:A8:6F:9E:D5:1E:A9:56:6F:53:18:BF
            X509v3 Authority Key Identifier:
                keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f0:26:5a:13:c1:a2:ba:f6:fa:68:95:63:68:c3:f8:db:28:
         a1:7c:1c:6b:8f:27:4a:40:41:9d:ff:b1:71:89:a4:93:50:e0:
         a6:ca:80:01:ee:78:90:e6:7b:bc:3f:fd:0a:47:3b:7c:3d:9b:
         f5:5b:b2:29:ad:c6:2c:6f:5d:7b:fe:04:ca:5e:fe:60:b9:8e:
         20:b0:a0:1e:b5:b9:57:71:df:e5:93:00:2e:a0:5c:c7:3d:b3:
         d9:6e:86:38:dc:66:5b:d6:b1:ac:12:ee:05:79:d3:5a:3e:9a:
         27:e3:f5:1f:83:b5:bd:37:f2:59:32:d7:fe:e9:fb:58:a6:f8:
         20:32:66:ca:1d:54:19:8e:b6:37:6e:3a:2a:f8:f4:a8:54:c4:
         5b:c5:91:de:7e:a0:80:9e:0a:8b:cb:91:6d:a0:12:1b:f9:d0:
         f7:1d:00:90:60:51:69:6a:dd:f9:db:43:5f:09:ff:ac:79:52:
         0a:df:a8:c9:47:ea:cd:04:95:ed:26:fb:dc:97:f1:05:39:e0:
         f2:43:1a:31:bc:59:cb:7b:cc:29:47:f8:12:22:aa:1e:c5:d6:
         9c:6d:fc:0d:71:06:c2:03:14:3e:47:ef:ab:f7:16:56:23:c4:
         f5:ff:89:f9:24:ac:ff:bb:f1:52:4e:ca:06:63:82:7d:a4:10:
         a7:66:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:32 2025 by rpki-client