Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
File:                     dKGUOXIqgzAE05VKV4ToXm6ZvME.mft (raw, json)
Hash identifier:          XfBjh55WowTsrKInrdyMasspLQzSxyE2OhYuiKDJpjg=
Subject key identifier:   1C:A5:00:91:D0:7F:36:40:7C:28:CC:64:6C:19:E7:76:D0:97:47:ED
Authority key identifier: 74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Certificate issuer:       /CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
Manifest number:          0885
Signing time:             Fri 08 Aug 2025 20:56:39 +0000
Manifest this update:     Fri 08 Aug 2025 20:56:38 +0000
Manifest next update:     Fri 15 Aug 2025 20:56:38 +0000
Files and hashes:         1: dKGUOXIqgzAE05VKV4ToXm6ZvME.crl (hash: KuzfWdBfKmd7vBvI+Ha5Q6xN6p612Zk9LmHV2mwJ2Cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl
                          rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914454E, serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
        Validity
            Not Before: Aug  8 20:56:38 2025 GMT
            Not After : Aug 15 20:56:38 2025 GMT
        Subject: CN=68966487-f4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:97:e4:36:8b:45:1b:d1:3c:66:cd:05:41:
                    b5:67:f7:27:8e:01:bc:58:4c:93:ce:b5:62:4a:de:
                    00:f6:21:78:b0:8b:5b:ba:45:b4:89:77:1f:7e:28:
                    4c:0c:47:23:f9:fd:1c:58:c4:25:42:d7:ad:5a:f2:
                    64:d7:5f:bf:6f:2b:b4:19:2d:aa:e4:23:90:78:78:
                    3d:42:dc:36:35:e2:db:cd:1a:da:3b:a0:0a:e5:12:
                    0f:6d:15:e7:97:b1:00:0b:b8:fd:16:71:af:00:6c:
                    2c:40:c9:e0:36:81:49:7c:5f:01:27:88:07:40:c2:
                    98:d1:c0:7d:7c:07:53:4f:5d:05:80:20:d7:ab:f4:
                    6d:c1:b6:81:9f:3f:4e:fa:dd:7f:0d:e3:46:7a:69:
                    7c:b9:51:42:3b:10:d7:6d:d7:23:ca:ef:5c:39:b1:
                    a9:b1:7e:83:26:23:7f:cc:e7:1d:e2:78:ee:75:76:
                    dd:78:ce:09:79:5a:c5:ae:d2:81:40:1f:80:26:8e:
                    bf:cf:d8:7d:05:4e:6c:f7:32:81:ea:14:9a:44:87:
                    8a:24:bc:9f:e1:ad:98:bb:d5:de:e6:7a:8a:4f:3b:
                    5f:b8:45:81:b0:42:58:14:f6:1d:3a:78:d4:8c:46:
                    cc:7a:f3:96:f1:f5:9f:58:4f:fc:3c:44:d6:b5:84:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A5:00:91:D0:7F:36:40:7C:28:CC:64:6C:19:E7:76:D0:97:47:ED
            X509v3 Authority Key Identifier:
                keyid:74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:41:2c:ca:cf:3f:b2:e6:79:ec:ea:88:5c:3e:3a:b0:d3:f1:
         ea:ba:a5:6c:9f:a7:0e:9b:ae:de:3c:f0:ca:6c:50:3f:a4:fc:
         aa:17:95:28:d5:ca:72:03:24:d3:ab:65:a1:f4:f8:90:c1:e1:
         a2:be:b8:e5:73:5c:d4:e1:e6:54:b2:99:5f:ab:f9:bd:b0:ad:
         b0:82:71:fb:f2:27:07:e0:f5:23:cd:37:61:51:d6:6e:dc:96:
         be:4f:c6:fe:66:90:c7:40:9e:7e:1d:9e:f5:0a:d3:71:73:b9:
         39:56:c5:e9:c9:4f:5c:06:0a:9a:ce:f3:25:27:b4:6c:cb:7f:
         51:55:b5:7c:1a:e0:73:fd:78:bb:35:77:8b:a7:c8:4d:bc:c2:
         4a:eb:1c:9c:ce:1a:83:5c:7d:c9:ea:e7:99:bb:f2:b4:6d:e8:
         bf:da:0b:8a:b2:4f:cf:f6:9e:79:16:3f:35:06:48:cd:c6:e2:
         16:6c:f3:0a:cb:d1:66:78:84:3d:74:6c:31:85:a7:28:11:49:
         24:71:1f:5a:b7:73:e6:56:c0:2c:93:90:c7:f9:42:46:ef:46:
         4f:12:a9:f9:46:82:72:31:cb:dd:ef:72:57:a6:3e:76:a2:bf:
         52:6c:7f:e8:cf:f2:50:8a:b9:0d:c9:bd:63:c8:69:7f:7f:00:
         8a:82:0c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:07:09 2025 by rpki-client