Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File:                     M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier:          6oKHm3o7m8U7uz7naBfYU9RK86I0MHaNvNJ2W7uaAaA=
Subject key identifier:   FA:0E:75:F3:F3:90:2D:83:E5:95:3F:2A:D6:93:9E:44:43:E7:96:52
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number:          026D
Signing time:             Sat 19 Jul 2025 02:11:33 +0000
Manifest this update:     Sat 19 Jul 2025 02:11:32 +0000
Manifest next update:     Sat 26 Jul 2025 02:11:32 +0000
Files and hashes:         1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: 4Ojb2PR2WqLRiS7aVx6+pLJ6OLLj5Mt1RoPipDQlIgk=)
                          2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RW7mrI/X8sf61J1ueh+btyO6BZUeqCysdCPEaUN7lpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
                          rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: Jul 19 02:11:32 2025 GMT
            Not After : Jul 26 02:11:32 2025 GMT
        Subject: CN=687afed5-85c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:75:1a:91:1a:ad:15:d2:44:67:0e:34:49:
                    dd:35:bd:77:80:08:dc:fc:48:88:99:5a:27:b8:7e:
                    3b:6d:34:4f:e1:b8:d5:ef:cc:bb:72:28:9f:6b:4f:
                    fd:d0:f9:03:ce:97:c0:5c:76:62:e4:9b:af:e2:5b:
                    42:04:53:a0:0d:c8:0f:50:53:0f:08:cf:ce:8c:6b:
                    26:af:0c:0a:e0:e3:c3:5c:84:97:03:a0:94:5d:55:
                    b2:f0:8b:7e:55:e0:5c:df:76:0d:36:eb:10:53:06:
                    69:15:54:21:08:85:69:52:6a:0c:2e:39:3b:24:c7:
                    d2:86:7e:f5:f9:91:00:00:32:13:d2:ad:84:e9:bd:
                    36:af:5d:f2:d3:53:48:93:0d:2c:df:be:de:df:19:
                    b8:15:67:ee:3c:0a:e9:82:5b:69:bb:85:9f:a6:67:
                    ac:9f:23:80:4d:43:cf:e1:64:f4:24:3c:18:d6:01:
                    3b:00:d6:d0:71:71:2e:0c:65:33:6c:28:87:a3:71:
                    af:27:1a:d8:0b:de:4e:77:fc:93:8c:24:8d:c2:a1:
                    10:6f:e7:e1:ad:1c:55:1f:68:ac:f1:b6:11:56:44:
                    91:cf:42:14:df:1c:67:b5:17:b5:23:0f:6f:93:58:
                    ed:2f:ef:da:38:29:31:67:85:b8:1a:3e:a4:09:08:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0E:75:F3:F3:90:2D:83:E5:95:3F:2A:D6:93:9E:44:43:E7:96:52
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:e8:1d:ea:1a:57:82:ae:73:43:6f:d5:01:a8:56:bb:bc:
         4a:b1:08:bc:98:c6:db:53:68:cd:94:23:1a:13:79:42:fe:7e:
         e2:4f:cd:0e:4a:60:ac:fc:92:76:c2:a1:4b:d2:36:42:3a:3f:
         d8:79:01:39:29:ce:39:7c:d2:1b:a0:c1:43:cb:68:84:5a:a6:
         cb:22:bd:c6:68:43:fd:b4:e0:ff:4c:e8:ff:21:92:e7:d6:11:
         a0:5c:e1:76:83:2e:66:66:57:17:a6:7e:ed:52:ab:84:53:41:
         1f:83:2e:82:cb:28:44:ec:66:b8:4f:2d:b0:28:34:ab:08:d6:
         f0:a7:f8:cf:7e:68:59:9a:9f:d5:e4:6d:73:39:96:d8:9d:5c:
         65:5b:ab:c6:43:d7:e6:8f:46:73:3f:01:9f:38:c9:af:11:83:
         b5:fa:51:d9:5b:26:8d:eb:89:5a:e4:36:bb:dc:4f:a2:37:ae:
         a6:95:6f:19:8d:ae:f8:5f:ec:d8:07:0d:79:7f:d0:78:b2:b6:
         64:65:b0:b1:7f:ea:44:ff:2f:f1:4e:44:9f:3a:04:30:ed:80:
         c3:e9:bb:8e:40:f8:28:cb:6c:f4:5c:06:c1:0e:b3:02:9b:be:
         b7:65:b7:21:82:d5:22:5f:a4:ec:e4:e8:e9:e3:41:a0:91:43:
         92:9f:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:30:10 2025 by rpki-client