Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File:                     dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier:          nJU4Yw5RNpMQk4+wOHK1Vp8fcXYNkLzSU5pF6E1fpik=
Subject key identifier:   BD:57:43:55:52:D8:71:29:14:DE:A1:FD:F7:F9:47:68:8F:12:2C:77
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number:          0177
Signing time:             Mon 21 Jul 2025 03:53:08 +0000
Manifest this update:     Mon 21 Jul 2025 03:53:07 +0000
Manifest next update:     Mon 28 Jul 2025 03:53:07 +0000
Files and hashes:         1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: 04Xt2OgeWo9D7nBZjHGW7Z8qJ7Q27F6RWinxwToDNKU=)
                          2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: zJw8Qq8QUnGm1SovwMdlmkT9wmbsFtkZF4qsHtw/2sk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 03:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Jul 21 03:53:07 2025 GMT
            Not After : Jul 28 03:53:07 2025 GMT
        Subject: CN=687db9a4-bb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:74:0a:78:f8:13:54:35:0b:d5:6f:7f:13:66:
                    a0:59:08:b3:ad:6e:55:2f:b3:f4:c7:da:d2:0a:7b:
                    8f:f8:9a:3d:21:28:ce:81:29:c4:87:d5:36:aa:48:
                    a1:ee:e6:dc:e5:b3:b0:91:84:62:4e:cd:fa:4f:38:
                    cf:7b:f1:c3:66:a0:c6:4e:25:92:30:7e:60:2d:13:
                    86:c8:10:c5:51:fe:f4:d9:45:23:ae:3f:07:c0:9c:
                    cf:d0:49:bd:ea:39:60:b2:44:d3:f8:77:4a:4c:8e:
                    59:09:c2:ba:ac:af:9d:1d:6e:1d:5e:d3:02:fa:8e:
                    30:3b:c1:e9:88:ac:e3:26:a8:3f:f5:f4:a2:13:c2:
                    e1:7b:3c:a6:d1:25:db:3c:00:99:f8:0a:58:9f:51:
                    0f:7b:8d:41:fb:c7:d6:c3:ce:15:08:e3:8a:6f:27:
                    6f:6c:7d:ad:31:27:76:d1:18:61:4d:cd:83:9c:42:
                    c3:9c:70:eb:b5:f2:b2:a8:17:1d:7a:02:8b:0e:5c:
                    02:d4:40:a2:c0:e7:b0:6e:be:3b:bc:15:f5:fc:a6:
                    e5:73:c0:d7:dd:b8:f7:c9:c5:7f:58:2c:ab:5c:ce:
                    63:c1:fc:46:55:da:53:0d:5f:38:30:e1:5a:55:b6:
                    90:f6:8f:65:b6:2c:16:83:fd:ee:e5:93:fd:3d:eb:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:57:43:55:52:D8:71:29:14:DE:A1:FD:F7:F9:47:68:8F:12:2C:77
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:25:6d:b1:a3:fb:74:3e:e0:fb:13:e8:14:42:ef:a6:00:
         1b:17:93:7d:35:0d:5a:76:a6:f0:54:72:5f:e4:d0:a0:3c:bb:
         dd:b9:a4:2a:e8:4a:de:91:05:85:7f:f4:cb:3d:6e:35:ef:fa:
         a8:72:35:b2:d2:e2:c4:54:16:8f:3a:da:7a:ef:32:a9:bb:7e:
         9a:59:14:66:5f:d1:cb:05:3f:6b:90:ff:69:00:74:89:4d:83:
         ac:34:4d:5a:4c:58:dc:1e:3e:75:7f:77:62:c2:73:57:6e:8e:
         82:32:3e:4d:55:1f:c3:34:2d:e4:ad:1e:8e:2e:50:f9:a3:de:
         50:57:90:bd:65:3b:76:9e:93:42:71:c8:fc:70:a8:34:87:0d:
         c2:98:f5:4f:73:82:c6:1d:9d:64:79:6c:35:c0:7c:0e:29:d0:
         a9:da:34:00:4b:33:5b:28:cc:5c:e6:91:1f:83:ed:8a:86:90:
         4d:e3:28:a5:a7:56:fd:b9:e4:3c:8f:45:95:4b:2c:ec:08:a5:
         2b:cd:d1:e5:1f:67:ce:3e:5d:8d:fd:f6:d8:62:76:e5:86:b6:
         a5:55:dc:fa:4b:4c:1a:b9:ef:91:02:3a:eb:c7:c2:ef:9f:8f:
         40:6f:29:be:2d:8d:4e:54:92:9a:7d:aa:3e:7f:bc:7c:71:6f:
         76:8a:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:43 2025 by rpki-client