Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
File:                     DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json)
Hash identifier:          YVKScMlCBA1C5Pc0S9P1DNqyKWDtuQgmAb86GMAyzxM=
Subject key identifier:   18:1B:06:A0:8C:AD:33:CD:0C:B3:72:B3:FC:74:CD:A5:AB:7A:FD:3B
Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
Certificate issuer:       /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Certificate serial:       1051
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
Manifest number:          103C
Signing time:             Sat 14 Jun 2025 17:21:22 +0000
Manifest this update:     Sat 14 Jun 2025 17:21:22 +0000
Manifest next update:     Sat 21 Jun 2025 17:21:22 +0000
Files and hashes:         1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: jSXDHjinatcokV0eZE1m7G5omG9b8HgONdPkOdC3FZ4=)
                          2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: RQ9qhLaDGLXZG82auuWSpjUE055Bze4DBt1aGvXRSH4=)
                          3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: n6tSSqkwRgmQdmtW0qPK7myv2yYZQso++P1D8QIVPvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
                          rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4177 (0x1051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
        Validity
            Not Before: Jun 14 17:21:22 2025 GMT
            Not After : Jun 21 17:21:22 2025 GMT
        Subject: CN=684daf92-f8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:a6:25:6c:07:b2:7b:73:99:4c:59:3b:50:
                    6c:d9:ca:2a:27:6c:e9:35:60:de:21:eb:ff:f1:61:
                    c2:b4:1c:d0:14:a2:a3:e7:54:80:ed:16:95:4e:80:
                    cb:90:7c:c4:11:1e:4c:b5:9c:e1:eb:f4:c9:44:d0:
                    9c:69:99:7d:2e:85:0c:60:58:55:0a:19:5b:52:5f:
                    5b:1d:e5:17:89:42:da:fe:26:7b:c8:86:5b:69:e2:
                    d0:41:91:e5:6e:05:fa:7f:88:78:82:45:bf:01:01:
                    76:6f:4c:a1:ac:68:f0:eb:5c:a1:76:2b:93:61:c9:
                    69:1c:f9:e4:f5:8c:17:8e:73:17:27:e1:61:e6:c0:
                    c4:41:31:ca:ce:f8:45:cc:6e:ce:9e:48:5d:84:63:
                    e5:02:ec:66:3d:1f:7b:d9:85:28:e2:74:64:1c:98:
                    38:d1:66:4a:97:ca:ec:15:42:35:7a:5e:9d:3b:a2:
                    a8:d9:8c:57:9c:3e:e5:68:65:79:23:bd:a1:6e:90:
                    1b:bc:52:76:25:56:8f:6a:35:ea:08:b8:b4:c2:48:
                    b4:26:30:36:55:9b:21:0a:45:a4:55:67:df:51:77:
                    d4:04:56:b1:05:14:d8:dc:e2:9b:93:d2:26:aa:1e:
                    d5:c5:51:2f:8c:61:29:c3:59:fd:cc:e4:2a:8c:a8:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:06:A0:8C:AD:33:CD:0C:B3:72:B3:FC:74:CD:A5:AB:7A:FD:3B
            X509v3 Authority Key Identifier:
                keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:35:7b:01:40:76:f0:c2:cc:98:34:56:e8:5b:1f:f6:e9:39:
         da:c8:09:86:65:df:dc:6c:21:aa:f6:0d:dd:a8:3f:3e:ab:67:
         65:d3:26:c3:56:bc:61:b1:b2:48:c0:b3:49:a0:3b:55:3e:5e:
         9a:7c:0d:9e:1c:d8:d5:6d:f9:63:ba:2e:cb:6e:1c:ef:13:df:
         d6:29:e3:eb:67:80:6c:dd:1d:20:c2:fc:a4:9d:1f:f5:c7:78:
         28:09:4d:4e:db:c2:c9:94:5d:73:b3:f6:88:42:3e:4e:b8:98:
         25:c8:f4:8e:dc:53:09:1e:52:18:63:40:a1:ec:be:2a:df:81:
         b8:a1:23:b2:ba:40:39:a3:1f:fd:a3:04:ee:8f:ca:2c:88:c2:
         bb:95:b6:9f:5c:2c:ff:7c:4f:ae:96:b8:cd:32:a5:ee:f2:e5:
         21:ea:79:3b:a3:9c:3f:23:2a:cb:a2:da:ed:17:6e:52:81:44:
         b4:f3:91:38:2c:24:f2:7b:b7:e0:bc:56:8f:82:ba:c6:ca:6e:
         c0:17:9d:e2:1f:2d:7e:39:07:e8:9a:23:6f:76:42:7c:66:63:
         f2:9d:39:64:fc:5a:90:80:dd:fd:88:a8:03:58:77:f6:6d:b0:
         84:60:5d:00:d4:c1:47:50:6a:d6:fc:94:f2:ca:c0:52:39:fd:
         16:98:e2:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD
QTNCQzgxOUIwHhcNMjUwNjE0MTcyMTIyWhcNMjUwNjIxMTcyMTIyWjAYMRYwFAYD
VQQDEw02ODRkYWY5Mi1mOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3PqmJWwHsntzmUxZO1Bs2coqJ2zpNWDeIev/8WHCtBzQFKKj51SA7RaVToDL
kHzEER5MtZzh6/TJRNCcaZl9LoUMYFhVChlbUl9bHeUXiULa/iZ7yIZbaeLQQZHl
bgX6f4h4gkW/AQF2b0yhrGjw61yhdiuTYclpHPnk9YwXjnMXJ+Fh5sDEQTHKzvhF
zG7OnkhdhGPlAuxmPR972YUo4nRkHJg40WZKl8rsFUI1el6dO6Ko2YxXnD7laGV5
I72hbpAbvFJ2JVaPajXqCLi0wki0JjA2VZshCkWkVWffUXfUBFaxBRTY3OKbk9Im
qh7VxVEvjGEpw1n9zOQqjKipIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgbBqCM
rTPNDLNys/x0zaWrev07MB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG
RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct
cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7NXsBQHbwwsyYNFboWx/26TnayAmGZd/cbCGq9g3dqD8+q2dl0ybD
VrxhsbJIwLNJoDtVPl6afA2eHNjVbfljui7LbhzvE9/WKePrZ4Bs3R0gwvyknR/1
x3goCU1O28LJlF1zs/aIQj5OuJglyPSO3FMJHlIYY0Ch7L4q34G4oSOyukA5ox/9
owTuj8osiMK7lbafXCz/fE+ulrjNMqXu8uUh6nk7o5w/IyrLotrtF25SgUS085E4
LCTye7fgvFaPgrrGym7AF53iHy1+OQfomiNvdkJ8ZmPynTlk/FqQgN39iKgDWHf2
bbCEYF0A1MFHUGrW/JTyysBSOf0WmOJF
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:51:46 2025 by rpki-client