Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
File:                     dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json)
Hash identifier:          ZNOTcPWhRyQszpxl+Pr69ll+GM61jfESyWJfXyoz+hg=
Subject key identifier:   75:78:60:B7:F1:47:37:94:DC:09:FF:AD:DB:EF:CF:E0:27:AD:66:2F
Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF
Certificate issuer:       /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
Manifest number:          43
Signing time:             Sun 15 Jun 2025 06:30:37 +0000
Manifest this update:     Sun 15 Jun 2025 06:30:36 +0000
Manifest next update:     Sun 22 Jun 2025 06:30:36 +0000
Files and hashes:         1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: EchxkHkSZzXE5MhhzEe9xA9aUBO2KY3Q6WS5QarpzYQ=)
                          2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
        Validity
            Not Before: Jun 15 06:30:36 2025 GMT
            Not After : Jun 22 06:30:36 2025 GMT
        Subject: CN=684e688c-568a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:83:f0:16:ed:b5:ba:9c:c9:92:97:81:90:
                    41:d8:3a:e3:ef:1a:a9:15:ea:ee:81:28:c6:d4:4f:
                    e3:85:24:a9:2c:8c:ce:74:91:80:f0:72:23:1d:fe:
                    0c:20:be:9b:a6:2e:17:6b:42:87:8d:f0:e2:ee:99:
                    e9:bd:b1:8a:28:12:37:c8:39:f3:d4:34:ad:19:aa:
                    6c:7e:5c:fa:df:9a:ba:f3:7b:21:97:1a:75:66:56:
                    d2:09:35:79:48:cc:46:db:c3:cf:08:86:82:e0:d0:
                    8b:4b:e2:b9:dc:66:60:0d:62:36:39:a2:43:2e:28:
                    62:5b:e1:96:e7:92:9b:bc:16:19:de:8f:67:7d:60:
                    a6:7b:b4:c6:da:0c:0e:5e:54:bb:dd:cb:dc:71:b4:
                    be:d6:77:5d:8e:92:9f:56:8e:69:9c:74:a8:5e:80:
                    6f:1f:cc:e8:7d:6c:4e:37:7b:d1:4e:fc:3a:30:ec:
                    52:e4:4b:5c:79:01:22:36:84:44:e2:59:66:6f:0c:
                    14:48:56:38:4d:0c:15:cc:5a:5d:5e:ad:c5:94:cb:
                    7e:b8:c8:c4:eb:4c:19:90:44:e8:67:6f:8c:bd:2f:
                    73:54:17:9b:64:e3:b4:66:f3:fc:1c:a7:ab:64:da:
                    39:db:48:ce:dc:b6:25:dd:31:44:54:b3:58:91:41:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:78:60:B7:F1:47:37:94:DC:09:FF:AD:DB:EF:CF:E0:27:AD:66:2F
            X509v3 Authority Key Identifier:
                keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:e3:7f:4b:65:dc:28:df:30:db:a9:e9:90:08:ef:89:bd:
         92:4e:25:c5:fb:c8:96:7f:42:3e:da:61:8d:0e:1a:62:ed:16:
         1f:28:49:c3:26:fc:9e:f7:75:71:2e:4f:d5:32:e2:cc:f4:81:
         33:3e:2c:83:65:7b:55:2d:91:17:f9:9c:3d:de:83:ac:cb:62:
         42:09:e5:8e:59:c3:60:c5:2e:f4:eb:e0:5b:86:38:ea:95:8a:
         90:fa:3e:74:ff:96:6a:64:0e:d6:f0:9e:c3:b3:3c:30:6e:1c:
         b7:4a:49:a2:3c:bf:ac:88:a5:42:21:5f:70:e1:0f:02:fa:4a:
         a2:16:72:2e:50:a8:96:da:3e:83:71:e4:f5:3d:46:d2:a2:a2:
         aa:7f:9d:7f:95:79:6a:69:47:f7:19:5a:6c:bd:1d:55:50:8e:
         86:91:a5:57:04:a0:7f:29:34:ca:8a:9f:38:81:43:61:bf:0e:
         1e:66:d6:b1:e1:39:59:62:11:ee:1f:6e:67:6b:f3:df:95:fb:
         e9:4a:15:54:7c:0d:d4:1a:df:d5:7d:e2:30:d8:bb:56:9f:e5:
         56:2b:38:16:77:56:85:0c:1b:0d:2b:fc:00:4a:41:90:da:a2:
         42:d5:17:48:61:4c:ea:d6:48:56:5f:59:a5:dc:8b:71:41:4b:
         59:f1:5b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:46:42 2025 by rpki-client