Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
File:                     dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json)
Hash identifier:          jpKHpVhh4585uUBp1UgGLaKFNLg95Hs+mlMCYelwL/M=
Subject key identifier:   02:18:79:BC:0E:A4:FE:ED:38:1F:3E:54:32:F8:6A:E1:F1:9F:C2:ED
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Certificate issuer:       /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
Manifest number:          0796
Signing time:             Tue 12 Aug 2025 21:45:17 +0000
Manifest this update:     Tue 12 Aug 2025 21:45:17 +0000
Manifest next update:     Tue 19 Aug 2025 21:45:17 +0000
Files and hashes:         1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: /GsmH3HStBuM0QqgzthhVfxOsHFEnod7wjNb0h4s1Xs=)
                          2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: pSgSIQQUaLX2o2nTmQmGl/Qpmc9pAZuJpTvLRIL92IA=)
                          3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: 00f5UezOFyyqRBMxbkiUS7o0hS0GGG4xnKYK/4mdm8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 21:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
        Validity
            Not Before: Aug 12 21:45:17 2025 GMT
            Not After : Aug 19 21:45:17 2025 GMT
        Subject: CN=689bb5ed-fee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d3:cb:30:d9:c7:c0:62:83:c2:8c:eb:c3:fb:
                    fd:80:7d:7c:8b:6f:e3:38:d2:df:81:52:7c:ed:67:
                    08:b0:12:0f:d2:ce:f1:e7:70:b7:03:8a:45:13:ae:
                    85:42:c9:57:2a:c2:52:c6:91:17:eb:86:e7:dd:85:
                    21:1b:e5:a0:78:8d:5c:1f:28:33:59:6c:40:8e:50:
                    da:f5:f3:1a:6d:e4:ae:59:65:fd:d2:80:09:06:5f:
                    95:ae:d0:48:02:71:d8:10:f6:aa:42:7c:dd:b7:97:
                    1e:f0:0c:52:c4:e1:58:0e:7c:7c:2c:b3:82:43:1f:
                    cb:2a:9b:34:19:57:62:33:76:51:af:05:52:d4:40:
                    c3:b7:1e:d9:27:7b:eb:63:52:ed:19:35:4d:2c:89:
                    e7:41:f3:f5:a2:b0:50:66:da:56:48:51:40:e4:17:
                    7c:90:11:7a:b6:75:1b:3f:8b:be:c2:89:64:b7:e2:
                    4e:04:2b:60:ab:54:e2:ea:4a:77:43:99:c8:bb:e8:
                    c7:b8:26:81:e5:ee:f6:d2:91:52:22:bc:8e:e8:ac:
                    e4:ff:52:44:ac:33:9d:d6:41:8b:01:83:68:57:9d:
                    47:9c:c9:c5:5d:e3:c7:57:c6:24:8a:22:50:5a:ce:
                    a2:6e:e4:dc:b8:30:84:fe:ed:30:1c:d4:9b:36:06:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:18:79:BC:0E:A4:FE:ED:38:1F:3E:54:32:F8:6A:E1:F1:9F:C2:ED
            X509v3 Authority Key Identifier:
                keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:40:bf:c0:3d:ac:7c:12:d9:57:c4:b6:d1:7c:5d:14:12:90:
         d6:a9:32:bc:e1:54:c5:5b:bd:b8:ed:a8:61:49:68:81:3b:b0:
         15:c0:f8:07:e9:b9:8a:88:11:fd:08:cc:15:c0:01:1b:b4:8d:
         c5:28:af:fc:4c:93:2f:5f:23:b6:70:1f:c3:10:b1:d3:aa:6a:
         9b:ff:2d:b2:50:27:9d:5c:03:9e:ab:0d:1e:bc:84:f4:07:a1:
         a6:72:cc:be:de:7a:02:e0:dd:a8:35:cc:e9:65:b0:10:fa:81:
         09:ea:56:b0:2c:46:7b:45:3b:2d:27:95:06:32:d7:1a:82:f7:
         df:e9:d2:5e:15:96:0e:7c:db:99:b4:b6:00:16:04:8a:09:29:
         90:af:68:99:a5:9e:25:0e:88:b1:f4:50:80:1e:59:d3:a6:03:
         fe:f4:14:e7:a2:9a:3e:cc:9e:35:01:c6:d3:2a:2c:fe:e3:f0:
         ca:8e:fa:4b:cd:b3:37:c3:b0:ba:d0:eb:3c:60:03:2b:47:fc:
         8b:db:4b:10:59:a7:80:93:7c:73:07:2c:94:39:e5:19:fb:4f:
         b8:c6:d9:e0:a1:ee:8a:40:fd:a3:9e:44:16:b4:07:90:6c:fe:
         e2:db:05:0b:31:90:3a:dd:35:51:f1:92:43:d1:be:fd:d9:0d:
         c7:eb:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:33:19 2025 by rpki-client