Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File:                     DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier:          Lm/JUSfyBsBv5QJNaXAlaHAuv89jv8WSpoi7nqkiIMc=
Subject key identifier:   52:56:3F:47:FC:89:AA:61:5E:42:4A:EC:CC:4B:12:07:2A:D2:04:B5
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer:       /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial:       116F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number:          1165
Signing time:             Sun 10 Aug 2025 17:14:30 +0000
Manifest this update:     Sun 10 Aug 2025 17:14:30 +0000
Manifest next update:     Sun 17 Aug 2025 17:14:30 +0000
Files and hashes:         1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: ggDsNBSA4suTy9L3nSWDlAmP3+5JieDicfr9Ni1hlIw=)
                          2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
                          rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4463 (0x116f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
        Validity
            Not Before: Aug 10 17:14:30 2025 GMT
            Not After : Aug 17 17:14:30 2025 GMT
        Subject: CN=6898d376-06a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:68:c9:14:38:5e:81:9e:dd:63:b9:fd:15:
                    cf:b3:0f:60:a0:3e:73:4f:97:cd:5c:c5:87:b9:a3:
                    58:b0:67:5b:d6:96:b1:74:1a:16:b3:9f:d9:91:5a:
                    d1:5a:ec:21:05:d3:2d:0c:50:9e:b9:20:f9:b0:fc:
                    cd:4c:20:d0:c5:2b:a2:b4:34:8d:c4:57:3e:70:6d:
                    5f:46:a2:a9:df:7e:f0:4f:8e:03:df:7e:ea:95:15:
                    c0:6f:ac:12:76:00:85:6f:d1:a3:a2:5a:65:6d:41:
                    b1:a0:4a:4c:dd:72:5c:8b:d6:c5:3a:18:13:17:98:
                    94:6e:a5:d6:dc:40:55:2a:f1:f9:76:e4:66:0a:c1:
                    ca:c0:42:47:3d:2e:4f:27:ac:0d:28:a3:70:93:5d:
                    d5:3e:02:14:20:6f:31:2d:b6:8b:cf:e0:87:a6:3e:
                    cb:c4:cf:eb:eb:5b:1b:51:30:65:59:d9:14:da:26:
                    4d:1c:82:e9:2e:b2:dd:d0:50:97:b2:1d:d6:f3:3d:
                    74:21:60:34:c6:c2:fe:66:02:b0:cf:0d:5c:14:6a:
                    40:91:bd:8f:6e:72:1b:d4:ea:19:50:07:46:cd:31:
                    b2:b3:37:1c:63:cd:fe:e5:d3:2f:93:ac:32:01:3b:
                    85:18:bc:f4:1f:c2:c3:1f:5c:d0:00:06:50:4c:3d:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:56:3F:47:FC:89:AA:61:5E:42:4A:EC:CC:4B:12:07:2A:D2:04:B5
            X509v3 Authority Key Identifier:
                keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:4a:f0:23:b1:9d:ea:7b:9a:79:3e:4c:31:9b:a5:2b:4b:
         db:d9:c4:92:5c:d9:39:de:29:85:57:13:42:05:0d:ad:9b:c7:
         e8:6d:f7:ad:fe:fc:e4:55:a6:3d:3a:41:12:7d:ee:5b:70:ac:
         f2:bd:4f:56:ba:10:a5:b6:a2:07:64:f8:46:56:79:cc:fc:49:
         7a:19:1c:21:75:5c:e0:1f:6d:31:a9:5e:38:83:f1:b0:82:9b:
         92:f5:56:55:07:ff:40:8b:5f:56:6c:91:de:18:f6:c2:72:55:
         b6:d9:2d:41:15:98:fd:5a:91:ec:8b:b4:06:1d:ba:a6:b1:f4:
         5e:5c:37:9f:fd:8d:40:3f:77:c9:e4:d8:1a:20:40:54:2d:59:
         8c:8d:92:e2:d6:8a:35:dd:db:b3:cf:aa:49:73:b8:73:7e:fc:
         cb:4a:bb:b0:9f:7c:ed:0a:cc:11:46:e4:97:ca:96:02:f6:0c:
         7b:69:6c:fc:61:54:27:51:1a:20:5a:72:f3:28:f5:8d:e3:3f:
         f8:a6:6e:1d:82:4e:82:0e:d6:42:0d:53:1f:bd:2b:88:91:de:
         b9:fc:c2:a3:fd:ce:44:0d:90:ef:f5:ab:52:c9:16:bb:da:a5:
         2d:e4:88:2e:74:4a:26:4a:12:04:40:f1:5a:6f:bb:b5:62:a3:
         32:b7:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:42 2025 by rpki-client