Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          p6wzvVQj22UDdTxMpV4yasdnS+LCVD6jDpsjWo3KWCM=
Subject key identifier:   E2:D9:40:34:06:11:21:CB:09:99:06:3A:4E:2D:CB:88:3C:5A:C0:B5
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          0242
Signing time:             Thu 19 Jun 2025 01:48:15 +0000
Manifest this update:     Thu 19 Jun 2025 01:48:15 +0000
Manifest next update:     Thu 26 Jun 2025 01:48:15 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: A16UC7RZzz8MfgHpkWkRwlQRmiGjGYvpCC8ARRfVnIc=)
                          2: 73FB6A56C81111EF84B47370C4F9AE02.roa (hash: rLG/37V+Ay9Dg6BnPVD6CJi+pJih1xEKl0lgY1diAvI=)
                          3: 4A82F578377111EDA5C68B0DC4F9AE02.roa (hash: crvAWfSU4cUDblQBIJE2EpNRvqCqivyWgcP1Unt1EK0=)
                          4: 49CA1D50377111EDA5C68B0DC4F9AE02.roa (hash: FxlXMb1VDjKPp2gvaZUru1qfhHQyZGjKWzaIqCuCA0o=)
                          5: 1E5E9AEAC81211EFB612B471C4F9AE02.roa (hash: ta3kqZ6slZkLymJ1Y+FGbOuuzC0KBODU2j3d2RnD6NM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 01:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Jun 19 01:48:15 2025 GMT
            Not After : Jun 26 01:48:15 2025 GMT
        Subject: CN=68536c5f-8cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:a9:72:65:e1:e9:0b:f7:13:df:a9:43:b2:
                    68:6b:02:42:8e:79:9b:17:65:a8:7f:a8:24:65:2d:
                    20:b4:2a:b1:82:90:63:cf:d9:63:13:07:86:c1:c6:
                    30:47:fe:ac:45:a1:d1:6b:92:ac:d2:72:b2:ef:37:
                    72:4f:ac:f0:d1:49:ff:d1:ef:2b:89:10:cf:60:19:
                    69:4c:bc:09:6c:1b:b1:56:5c:07:0d:ac:72:c2:79:
                    c9:04:a4:ad:3d:ca:ac:a5:19:67:94:7e:1b:dc:3c:
                    51:37:24:e1:14:75:9a:fa:d7:ff:ab:16:4b:f3:88:
                    f8:ea:92:5d:ca:2b:4e:f5:93:47:4e:88:f0:cc:03:
                    78:82:8e:0d:2d:b9:92:e1:49:20:a9:3f:3e:f7:01:
                    ae:68:9b:4b:c2:26:ab:68:67:fd:7f:7e:fa:07:23:
                    98:fc:34:3f:6e:98:86:60:b4:65:a5:21:b0:be:a4:
                    1e:03:b9:8e:31:c8:3a:ac:d2:51:29:c0:69:4a:5c:
                    98:0d:20:94:ba:21:de:3c:1b:9e:43:45:8b:18:3e:
                    41:e9:13:2f:9b:4f:c0:97:a1:6c:7c:72:d7:95:48:
                    e6:44:26:9a:17:e6:9d:30:b2:ee:ca:c2:75:56:ce:
                    70:a3:55:0f:fe:03:9d:99:3c:f8:03:25:05:94:78:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D9:40:34:06:11:21:CB:09:99:06:3A:4E:2D:CB:88:3C:5A:C0:B5
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:73:d0:fb:96:2b:84:58:5c:92:59:53:2f:33:76:69:3b:
         f4:fa:9c:ee:35:63:8e:48:18:ee:8b:cb:d2:d4:60:31:7a:c2:
         fd:13:fa:fe:ca:a3:ac:52:b3:e6:c3:cb:c1:81:d8:2d:f8:9a:
         48:a6:4e:e8:dd:73:e1:8c:71:db:73:79:80:e6:68:a3:9c:df:
         63:37:dd:20:8b:1b:fa:b5:70:d8:27:49:98:92:cc:ba:63:cb:
         3d:72:bf:3b:05:ac:2f:c3:b7:b1:2b:a3:cf:aa:91:fb:a8:10:
         e0:c4:db:8f:4d:94:f4:99:13:c1:d9:a9:8f:59:90:54:d1:d7:
         11:30:e7:dd:68:c2:88:1c:bd:f3:a8:e2:f9:2f:ad:a7:71:aa:
         86:10:93:41:d4:60:07:59:20:8a:86:69:32:a9:0f:d6:d0:c2:
         2a:e7:d6:12:76:cd:03:e4:fe:9a:7c:77:66:f8:61:e7:bf:a0:
         6e:c1:47:02:23:3a:c1:f6:e6:86:31:be:37:a1:33:db:e9:d8:
         ce:98:1e:0f:ca:14:d3:11:bc:77:7f:19:6e:01:db:a6:fc:08:
         ba:f4:d7:b8:23:5f:67:ac:1e:4e:2d:75:2c:59:95:6a:8b:63:
         f4:5f:0b:83:95:8a:16:10:bf:b1:cd:64:b8:9a:6d:4d:ca:9a:
         b9:9c:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:07:49 2025 by rpki-client