Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File:                     dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier:          DN+rdmFKLiLQ3b9HdZW5UGwNvM+LDmxLp0e/qw72JMY=
Subject key identifier:   3F:DC:E4:EF:DD:C5:33:CC:DB:08:96:D4:2C:3E:DF:08:1D:26:2B:07
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       062D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number:          062A
Signing time:             Fri 08 Aug 2025 23:10:22 +0000
Manifest this update:     Fri 08 Aug 2025 23:10:21 +0000
Manifest next update:     Fri 15 Aug 2025 23:10:21 +0000
Files and hashes:         1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: NldeLnWGQJmNveWMYsX1xUbE5OPnyVIQd2W5B3wzoiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
                          rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: Aug  8 23:10:21 2025 GMT
            Not After : Aug 15 23:10:21 2025 GMT
        Subject: CN=689683dd-f406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:a8:ba:78:53:5a:2d:5b:ff:bd:23:18:b6:
                    70:84:35:9d:de:9c:02:86:1a:1c:af:82:e6:35:7d:
                    a5:4b:f0:0c:22:2b:1d:ed:39:c5:c6:42:16:07:37:
                    01:35:94:a7:d5:e0:e9:25:b2:90:dc:65:70:d7:92:
                    5b:c2:88:d1:eb:18:1f:08:b9:e4:4e:9a:28:9f:02:
                    6a:49:e2:a8:ed:56:10:b0:ec:31:e1:1a:07:86:56:
                    57:95:cd:56:ee:3c:00:2b:c5:0d:94:44:c1:94:27:
                    51:ed:2b:c2:5b:ba:d5:43:8c:66:17:7e:0c:1b:7c:
                    2f:c9:0c:12:52:3b:14:fb:59:ca:a1:7e:1b:5c:bb:
                    6d:7e:03:10:79:39:e2:45:3a:ea:fc:e7:e3:f3:63:
                    19:d4:7c:5c:1c:c5:0a:72:ca:20:88:e3:f5:90:56:
                    50:de:80:c0:e9:44:ee:cf:f2:eb:3b:19:16:f4:a4:
                    11:d8:c3:ef:d7:6e:d9:e1:38:16:d1:e1:fb:1f:6e:
                    d9:16:a8:ae:a9:f0:d3:0d:08:74:04:5f:10:d7:aa:
                    7f:52:54:d1:52:99:f5:7a:50:b1:9e:81:bd:f6:57:
                    f6:d0:3d:b1:ac:23:ba:ac:03:b8:0d:f7:a9:bf:97:
                    23:58:57:87:a5:00:1b:a5:b0:27:2d:c3:3c:69:71:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DC:E4:EF:DD:C5:33:CC:DB:08:96:D4:2C:3E:DF:08:1D:26:2B:07
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3e:ad:9b:16:e8:ba:4c:d4:65:26:f7:07:26:49:5f:86:b2:
         76:eb:ee:62:c3:1f:b2:16:26:d7:dd:fd:a1:e0:95:cd:b5:f7:
         61:6b:3f:9f:79:7c:8a:7d:02:bc:48:34:7e:0c:62:05:f4:f7:
         3f:01:a9:63:0c:d3:6b:36:22:f6:8b:ab:62:8f:b8:7c:d4:a0:
         e2:c4:ec:60:72:84:db:03:f0:db:ec:86:63:39:35:0c:3d:39:
         12:e0:6f:09:14:eb:19:65:c7:0f:18:b0:05:b0:13:6b:e9:86:
         a4:3e:97:07:69:8d:1c:d2:5f:0b:08:bf:82:b8:ca:8a:9f:e9:
         f6:a3:e8:71:9d:27:aa:a2:f4:cb:0b:df:b6:a8:5c:51:2c:b8:
         30:d1:03:49:2e:76:68:49:2a:ac:27:5c:dd:65:fd:ac:b5:d3:
         c0:0d:25:06:32:e3:21:b2:0d:79:3d:c5:83:ee:1c:f9:58:2b:
         b9:2d:2c:56:70:ec:28:c8:8d:fc:c8:f1:63:e4:d6:0b:3a:68:
         f0:60:85:5d:8e:af:09:6b:ac:94:bc:fe:eb:66:5d:ba:87:5d:
         18:2e:ca:af:bb:26:1b:7a:fb:bc:26:16:65:96:52:27:95:ae:
         7f:15:c9:15:a0:1e:de:2d:4f:3c:9c:ed:a5:9f:e9:9b:d5:00:
         5a:3c:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:46:57 2025 by rpki-client