Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
File:                     dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json)
Hash identifier:          5PqwI7bZBGAt1E1lvf+wRqtHdrEWIHBMQruI0aCOjhM=
Subject key identifier:   92:72:15:A7:26:23:2C:D9:54:D1:FE:64:ED:8A:36:B8:35:43:49:9F
Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
Certificate issuer:       /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Certificate serial:       0FB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
Manifest number:          0F94
Signing time:             Thu 12 Jun 2025 17:26:47 +0000
Manifest this update:     Thu 12 Jun 2025 17:26:47 +0000
Manifest next update:     Thu 19 Jun 2025 17:26:47 +0000
Files and hashes:         1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: 1sQs8O8edmKzfl15Ba3xxMRiOCTkU9AYACvGZwwOxXc=)
                          2: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: Yxnc0WF7y7yG/Ke04997WUeH+aSKIu6WY3AiaujI7mg=)
                          3: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: fuYiIxAwDhO4bPXLu2NpIMN0ReUFHJNWZB+675RLxUg=)
                          4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: 7y8BRBcxLZCZTnPYfc6VfQnaG4bxPBMAZ7uJUfKAC/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
                          rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 17:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4022 (0xfb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
        Validity
            Not Before: Jun 12 17:26:47 2025 GMT
            Not After : Jun 19 17:26:47 2025 GMT
        Subject: CN=684b0dd7-5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:6c:d2:66:0d:5f:dc:fe:c8:df:11:57:f1:
                    ba:0c:ec:eb:a3:46:52:10:99:7c:13:33:04:1f:28:
                    b8:cc:bf:97:42:54:bf:e0:4c:bc:27:f1:77:ea:ed:
                    6f:ef:57:90:b4:9b:d4:3b:5b:74:4e:a6:50:61:d9:
                    cc:ab:e5:71:01:15:4b:ea:75:9d:ec:c0:da:79:3d:
                    dd:79:13:2d:f8:f1:f8:27:ef:84:e8:28:82:f7:b7:
                    31:e8:05:ca:c7:ba:5b:ef:31:7e:d5:dd:8d:bc:5d:
                    64:24:f7:e3:aa:72:b6:96:1a:da:15:34:7e:da:ba:
                    c8:4f:2d:95:47:f8:15:ed:30:0a:dd:48:df:cb:4f:
                    41:6e:c5:a7:67:ae:4d:23:d5:ff:8a:60:13:e6:17:
                    74:9a:ab:81:79:16:b5:fa:4e:5a:5f:eb:b4:5c:37:
                    59:46:b6:21:8a:64:72:22:f1:d1:6b:bd:c3:6f:ac:
                    6d:93:5b:28:d2:bc:c1:7e:7a:db:7c:8a:8e:5e:2a:
                    8f:25:31:9a:87:18:ad:43:b8:fd:d8:70:42:d5:8f:
                    5a:91:7a:ec:48:25:9b:97:7a:89:2e:cc:c3:23:0a:
                    dc:60:84:8e:14:fc:96:0e:c1:ac:7c:8f:e4:46:cc:
                    41:4e:5b:0f:e0:86:86:6c:1a:93:3b:26:09:4e:a0:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:72:15:A7:26:23:2C:D9:54:D1:FE:64:ED:8A:36:B8:35:43:49:9F
            X509v3 Authority Key Identifier:
                keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:56:d2:6f:68:ab:5a:0f:e2:ad:28:9d:a3:81:7d:46:f2:32:
         a5:8a:2e:a8:f7:b8:fa:35:0a:19:2e:bb:66:0d:05:fa:f8:47:
         de:82:a2:f3:44:13:4e:51:66:21:65:ef:b6:21:c8:b0:c9:c4:
         62:a6:ec:7d:60:3e:e1:d0:c0:19:62:4d:fc:06:ad:32:1c:65:
         de:62:ee:d1:20:6b:e7:c3:0f:b6:94:a2:7b:71:35:34:24:92:
         19:cc:d4:f9:da:92:8f:4d:ce:b1:56:b5:62:d3:f8:1c:ea:4d:
         16:d6:ef:f2:e9:41:a2:d6:34:09:30:c4:13:f2:c2:c1:4e:d3:
         23:21:09:f9:82:8a:e1:c9:d2:b4:2b:59:8b:3f:56:42:45:4e:
         e5:ee:6e:97:b6:10:2e:b8:03:80:19:78:ee:69:18:ec:69:28:
         e4:74:2d:c0:37:4a:02:57:5b:65:17:0e:7d:73:d2:84:63:c5:
         54:22:6f:96:d7:12:4b:14:fd:96:40:4e:50:0b:4a:06:4e:11:
         14:a1:f3:d6:4a:76:6c:02:b0:88:1e:a5:96:f9:f1:bb:d3:cb:
         4f:06:9d:8d:59:98:85:7a:7c:30:36:8e:13:a9:6d:18:0d:2b:
         2d:b8:dc:cd:ca:41:6d:1d:82:d7:f4:8d:3e:01:a3:db:4d:f8:
         f2:e4:31:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0
MDQ5MzgwMEYwHhcNMjUwNjEyMTcyNjQ3WhcNMjUwNjE5MTcyNjQ3WjAYMRYwFAYD
VQQDEw02ODRiMGRkNy01YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEps0mYNX9z+yN8RV/G6DOzro0ZSEJl8EzMEHyi4zL+XQlS/4Ey8J/F36u1v
71eQtJvUO1t0TqZQYdnMq+VxARVL6nWd7MDaeT3deRMt+PH4J++E6CiC97cx6AXK
x7pb7zF+1d2NvF1kJPfjqnK2lhraFTR+2rrITy2VR/gV7TAK3Ujfy09BbsWnZ65N
I9X/imAT5hd0mquBeRa1+k5aX+u0XDdZRrYhimRyIvHRa73Db6xtk1so0rzBfnrb
fIqOXiqPJTGahxitQ7j92HBC1Y9akXrsSCWbl3qJLszDIwrcYISOFPyWDsGsfI/k
RsxBTlsP4IaGbBqTOyYJTqAUsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJyFacm
IyzZVNH+ZO2KNrg1Q0mfMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx
MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjdEMS82Q0JDOUI0MDYxMUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdt
cGtsZGdTYWhPZnhBU1RnQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDVtJvaKtaD+KtKJ2jgX1G8jKlii6o97j6NQoZLrtmDQX6+EfegqLz
RBNOUWYhZe+2IciwycRipux9YD7h0MAZYk38Bq0yHGXeYu7RIGvnww+2lKJ7cTU0
JJIZzNT52pKPTc6xVrVi0/gc6k0W1u/y6UGi1jQJMMQT8sLBTtMjIQn5gorhydK0
K1mLP1ZCRU7l7m6XthAuuAOAGXjuaRjsaSjkdC3AN0oCV1tlFw59c9KEY8VUIm+W
1xJLFP2WQE5QC0oGThEUofPWSnZsArCIHqWW+fG708tPBp2NWZiFenwwNo4TqW0Y
DSstuNzNykFtHYLX9I0+AaPbTfjy5DFY
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:11:03 2025 by rpki-client