Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
File:                     DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json)
Hash identifier:          FCMWCoSy9avKcr180LHOvHqvh0yxU/7NLtKFnjg9Ni4=
Subject key identifier:   08:F0:7E:0A:96:5F:86:27:98:7A:AA:6E:15:83:F7:5F:23:04:95:83
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Certificate issuer:       /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
Manifest number:          73
Signing time:             Mon 11 Aug 2025 06:10:28 +0000
Manifest this update:     Mon 11 Aug 2025 06:10:28 +0000
Manifest next update:     Mon 18 Aug 2025 06:10:28 +0000
Files and hashes:         1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: N1FmoNe382E6MCIr931uXeMuewvMXpvxBKxFLWR1YXM=)
                          2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: 4UcuR0Va16pIipTBZBi5kSdFR7fOLDQRz2cgCZTL1W0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
        Validity
            Not Before: Aug 11 06:10:28 2025 GMT
            Not After : Aug 18 06:10:28 2025 GMT
        Subject: CN=68998954-9ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:29:bc:f0:60:2e:51:4d:96:94:61:14:eb:2f:
                    2c:d0:86:d9:18:ea:31:c1:c0:94:e0:3c:d4:28:ad:
                    4b:96:05:73:2b:4f:3b:74:df:94:72:3f:f8:d4:2c:
                    55:3a:9f:74:bd:48:cc:e8:74:10:a4:5d:12:4e:8c:
                    78:f8:5d:2e:c4:13:d7:fb:82:ba:17:ff:96:c2:e0:
                    92:a2:6f:49:11:dd:d6:1b:ae:a0:92:e3:6b:0d:81:
                    4e:49:dd:66:19:5a:d6:c9:0e:80:74:1a:d4:40:dc:
                    75:f7:cd:64:68:41:1c:1b:ff:7f:f4:89:d6:f1:8c:
                    60:bc:53:a4:ab:24:d6:3f:36:a5:54:87:9e:34:44:
                    e3:f2:1d:39:89:00:5f:14:50:3f:29:f3:9b:2f:26:
                    91:99:4d:ca:0d:04:f5:39:67:51:37:5c:04:bb:0a:
                    c8:09:4d:c7:c0:c1:91:e9:67:a1:ae:7e:1c:11:3d:
                    b4:41:55:d6:ba:60:84:b6:5d:2b:ca:6b:10:58:9f:
                    f3:88:cf:86:28:61:4a:e5:e9:62:80:10:3b:e1:5f:
                    2d:2d:32:fe:75:18:6a:6d:c7:80:61:17:04:9b:e7:
                    ee:25:74:f5:a9:a0:aa:40:d6:98:13:d3:60:82:4c:
                    8b:5f:0e:b6:3b:eb:52:9c:fe:da:33:8e:28:c5:c7:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F0:7E:0A:96:5F:86:27:98:7A:AA:6E:15:83:F7:5F:23:04:95:83
            X509v3 Authority Key Identifier:
                keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:94:0b:20:06:13:4f:aa:77:37:05:4d:a8:ac:1f:de:4f:35:
         85:17:f6:39:10:0f:5c:de:1a:a6:22:63:9d:73:4e:1c:79:7a:
         32:8a:7c:7d:55:a8:08:ee:cc:94:1e:0e:70:b8:ce:53:cf:3e:
         ca:73:c6:9c:36:bd:0d:4d:55:2a:8a:17:7d:a0:7d:96:e3:b1:
         a1:cf:8f:b3:30:a7:79:54:21:75:a4:73:4b:e6:c1:89:85:43:
         68:a8:5c:fb:be:11:ef:fd:66:4d:92:f8:0c:09:7a:26:43:a1:
         84:02:45:d8:39:b0:9d:83:5f:6f:a9:a5:a9:9a:d2:2c:f4:d4:
         10:6e:d3:db:26:c9:f4:18:44:79:13:bb:7d:fd:d3:22:f2:18:
         4e:31:83:67:64:57:64:43:04:21:e2:91:5b:1d:c5:1e:36:3b:
         d7:28:cc:3b:9f:7f:25:6b:d8:06:07:84:82:3e:1a:d0:5a:02:
         59:ac:6b:93:62:82:af:3d:96:fc:10:d4:e0:6d:20:47:cc:0c:
         2d:94:a4:1c:22:14:40:a3:6b:5b:e6:2a:9b:fb:22:36:b7:60:
         b9:ee:ea:29:0c:e6:a8:1e:4b:14:13:81:9f:6c:42:48:bc:8a:
         f0:07:07:92:a5:61:f3:4d:ab:5d:28:46:cc:97:f8:2e:64:99:
         34:33:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:35:16 2025 by rpki-client