Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
File:                     dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json)
Hash identifier:          qaHc050I9Bq3rYQN63k/8bsOxPNpvmplU7UtL1BC0Ns=
Subject key identifier:   D5:55:B4:1E:E5:79:3F:7A:0C:A1:2E:F0:19:60:B7:F2:18:CA:FE:83
Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C
Certificate issuer:       /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
Manifest number:          0CBB
Signing time:             Fri 18 Jul 2025 19:23:09 +0000
Manifest this update:     Fri 18 Jul 2025 19:23:08 +0000
Manifest next update:     Fri 25 Jul 2025 19:23:08 +0000
Files and hashes:         1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: HmAyuqYQIFMxyj8dFFS8DltbD+iGhL7MKASgTE2P7C4=)
                          2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: EII0j0htPqZRd+8Muval63G6bvgUY1532bbGJQef7wo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl
                          rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150733, serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C
        Validity
            Not Before: Jul 18 19:23:08 2025 GMT
            Not After : Jul 25 19:23:08 2025 GMT
        Subject: CN=687a9f1c-444c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:2c:0e:d6:ea:3f:47:4e:9e:f2:1b:69:af:
                    dc:4c:43:e5:9e:ac:ac:eb:66:95:ef:1a:54:35:d7:
                    95:54:ee:b7:4f:97:60:e2:f8:52:a9:95:74:82:5e:
                    b7:98:97:31:41:3c:83:80:80:13:24:f2:33:0c:96:
                    3e:6e:5b:e3:15:fe:12:46:b1:ad:d8:cd:d2:0a:c8:
                    ab:61:4e:40:ee:59:33:51:ee:66:71:f8:a4:0b:41:
                    84:ca:d5:29:34:6a:6e:83:31:ba:6a:e2:20:7c:e7:
                    61:e7:fb:4c:ae:cf:71:10:a4:ed:f5:b8:05:9b:84:
                    d6:5f:9f:a8:1a:08:5a:97:48:b3:93:26:93:df:e9:
                    5b:03:43:a4:02:94:8b:59:6c:6b:bd:a6:b8:0a:d8:
                    0c:fa:88:90:07:dc:6d:b0:37:22:4a:4b:67:4a:29:
                    45:76:7e:3b:ce:ad:8d:b6:f0:3c:8d:4c:92:99:a2:
                    c5:44:01:62:40:f7:ed:37:e6:09:b9:f2:d7:0b:9a:
                    ec:68:f2:df:ba:f0:c3:12:a5:96:2a:f9:59:4d:84:
                    01:ae:20:3b:de:03:75:79:71:31:82:1b:7a:f3:8d:
                    2f:f4:7e:cf:84:c3:b5:b4:19:85:75:eb:e4:cc:dc:
                    c9:e4:66:83:30:a0:8d:d7:28:9d:f3:cb:ef:14:cd:
                    62:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:55:B4:1E:E5:79:3F:7A:0C:A1:2E:F0:19:60:B7:F2:18:CA:FE:83
            X509v3 Authority Key Identifier:
                keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:b5:00:7d:d8:06:c3:b4:be:ee:bc:f5:b8:c0:d8:fc:bd:
         f0:8e:50:b7:cc:b5:2c:ec:12:0d:fd:89:63:46:e4:a8:d5:67:
         7b:3a:3b:42:a8:c4:a5:f0:c1:ac:ae:7f:a8:c2:23:9c:c1:c0:
         3e:fe:76:6a:f0:be:bc:8b:0e:da:b3:a1:e0:57:a4:de:14:ce:
         0d:77:8a:d4:d5:38:d5:df:e3:99:df:45:ec:bb:99:56:4e:67:
         24:7e:ac:3d:09:84:c7:38:cd:29:be:1e:90:2f:36:94:0d:cf:
         fd:98:79:30:0b:c4:ee:bf:b0:fc:c2:9e:c7:87:72:ea:85:76:
         ee:fd:1f:3c:da:bf:2b:ab:ec:42:69:62:25:82:01:2e:64:fc:
         ad:94:77:3b:2b:fe:89:cf:22:a7:9e:9d:f4:01:f9:2d:4f:42:
         2c:85:45:3a:1a:77:90:f1:2f:50:ec:50:79:ab:25:12:29:6f:
         06:63:90:7c:8d:fe:ac:a5:dd:4a:1d:81:bb:2b:49:a9:ec:6e:
         b5:01:e4:60:5e:63:3a:56:c4:d0:e7:36:7e:70:ff:f0:6e:19:
         14:14:93:f2:7f:e5:15:f2:3e:8f:19:ec:eb:35:95:68:7b:b1:
         54:9f:ec:6b:7b:e5:4b:dc:d0:67:a7:b9:37:09:c6:22:cd:d3:
         dd:6c:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:29:53 2025 by rpki-client