Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
File:                     gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json)
Hash identifier:          56sOTPuUxDbkl+21H2FYInFnfktL5ceC3j0DdR3M7a0=
Subject key identifier:   A0:E9:C0:B9:46:92:6B:27:E6:02:3F:39:72:18:A1:1A:05:13:D1:41
Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
Certificate issuer:       /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
Manifest number:          DC
Signing time:             Sat 09 Aug 2025 05:55:37 +0000
Manifest this update:     Sat 09 Aug 2025 05:55:37 +0000
Manifest next update:     Sat 16 Aug 2025 05:55:37 +0000
Files and hashes:         1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: I58klRk3ojbanmXsy2Uoqjamy/MlMW0xAUO1VM1N5Io=)
                          2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
                          rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
        Validity
            Not Before: Aug  9 05:55:37 2025 GMT
            Not After : Aug 16 05:55:37 2025 GMT
        Subject: CN=6896e2d9-0746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:ff:ae:e5:7a:1e:df:c4:72:65:c2:24:fc:
                    d0:1c:c1:5d:a9:83:43:42:05:73:a4:99:54:53:ab:
                    09:1e:7a:4c:6b:93:21:49:27:f3:3f:d2:c6:2a:63:
                    3e:33:5a:c7:33:60:c8:3e:74:ae:dc:9a:9e:4a:29:
                    ac:98:31:86:d0:fb:39:d5:45:07:f2:0a:67:87:bc:
                    d5:af:1c:6a:42:5c:2d:03:bd:87:c9:98:be:57:ba:
                    f5:06:fa:a6:4f:34:fe:f3:f0:14:8b:35:f5:e4:fc:
                    aa:7b:e5:c4:04:66:b0:88:f9:10:57:19:81:c4:cc:
                    07:05:3a:62:35:1d:18:e5:19:0d:79:44:ff:29:0d:
                    34:d4:94:b8:d1:97:c5:87:74:d1:ba:c4:6a:ca:a2:
                    7c:92:55:5d:7a:02:02:67:8d:5e:f6:c4:ae:93:f5:
                    de:2e:cd:7d:04:48:51:96:ee:e6:b2:d3:a5:21:f9:
                    da:2f:34:17:20:5e:40:76:6c:c2:1e:1c:f4:67:aa:
                    23:4b:38:ed:32:68:15:d1:69:bc:f4:50:9c:a8:81:
                    d1:87:11:e0:f4:c1:e3:09:e7:8c:91:18:19:e8:5c:
                    3e:5c:93:78:97:85:14:df:1d:f3:d9:fd:4f:34:3d:
                    df:9c:07:d1:57:7a:4c:46:f1:af:95:3b:06:bc:d0:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E9:C0:B9:46:92:6B:27:E6:02:3F:39:72:18:A1:1A:05:13:D1:41
            X509v3 Authority Key Identifier:
                keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5e:7b:ff:4b:fa:62:68:51:f3:b3:82:12:96:6d:64:2c:02:
         e8:b9:52:36:ea:63:87:3d:36:a4:f9:cb:5c:10:62:45:2d:97:
         b4:4e:19:77:9b:4e:7a:37:da:43:10:36:66:39:fd:f5:0b:73:
         05:aa:9f:d2:2a:5f:68:00:e8:23:7b:d6:1a:9e:3b:76:06:d5:
         c3:40:37:7d:15:92:d0:d8:15:d5:32:c5:72:c6:12:fb:c1:ee:
         e5:5e:90:63:f2:ac:e8:6a:cc:91:61:a5:84:e4:c0:ed:16:9d:
         7c:0e:c4:cf:3e:31:87:1f:8b:b0:ff:1f:7e:3d:c5:5b:df:43:
         02:be:58:b3:3d:ed:fa:fe:38:16:3c:a0:67:84:bc:35:d1:03:
         c9:80:90:82:be:60:4b:03:af:d8:eb:15:7a:49:ae:24:60:fe:
         30:0f:7f:aa:27:9a:31:35:1b:3d:62:0a:ff:76:a7:15:f5:5d:
         1b:b9:42:37:0f:e0:02:4f:aa:2e:05:50:d8:08:b5:36:17:02:
         db:a7:0f:7d:db:04:ed:c2:b0:c2:89:8e:f1:f7:06:54:d9:58:
         08:26:01:a8:68:f4:55:3c:8c:44:71:5d:0b:03:c2:7e:a2:59:
         cf:a8:e7:ff:92:0a:f9:0b:42:48:c7:3f:a5:95:fc:d3:e4:40:
         a8:8b:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:50 2025 by rpki-client