Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File:                     DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier:          4lCpL0qMjRIXfaSJFlDrYgxHafjCJ6ByEsukZR7JOJg=
Subject key identifier:   C1:E4:B7:28:63:98:36:29:16:69:D3:2A:16:02:83:08:68:E9:DA:69
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer:       /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number:          A5
Signing time:             Mon 21 Jul 2025 06:24:36 +0000
Manifest this update:     Mon 21 Jul 2025 06:24:35 +0000
Manifest next update:     Mon 28 Jul 2025 06:24:35 +0000
Files and hashes:         1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: Q/NIXHYpWl4TVrSQo+p7P+96iJz3MPiGmkoZXLYIHDY=)
                          2: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=)
                          3: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
                          rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
        Validity
            Not Before: Jul 21 06:24:35 2025 GMT
            Not After : Jul 28 06:24:35 2025 GMT
        Subject: CN=687ddd23-b146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:5b:56:34:24:ca:f2:fb:70:60:f7:de:3f:
                    b0:8c:3f:e7:91:86:e8:ed:7c:7d:1d:de:9b:c3:d5:
                    7a:2c:1e:79:6d:a2:07:fb:f1:f3:b6:55:d4:9e:e4:
                    e8:a1:ce:7d:0f:7c:e4:37:c1:0e:87:cc:c8:5d:27:
                    37:e8:c9:9a:66:33:65:20:ab:0a:be:9c:89:28:49:
                    91:3b:fc:10:cd:d4:65:a6:7c:80:a9:54:a6:d6:21:
                    af:1e:c4:24:d5:4a:8b:2c:c1:9b:70:d0:a6:7b:ca:
                    d5:24:d8:01:62:70:19:ca:cb:bf:51:8f:1d:db:23:
                    48:01:f9:c7:25:8d:d3:af:99:11:6a:66:3c:ca:a9:
                    79:06:c2:2b:4c:95:18:01:7f:0a:bd:c8:07:c2:70:
                    59:af:8d:eb:5f:8c:ed:d9:c9:5b:4f:9e:c6:29:5a:
                    bd:51:e3:d4:69:ba:aa:c1:c5:ec:45:c9:f6:f5:b9:
                    e8:49:b9:6d:a6:15:49:91:97:e9:4b:c0:6e:16:6e:
                    08:9c:19:fb:d5:57:e3:89:fa:70:1d:f5:97:ef:14:
                    f5:b3:d9:f0:63:ee:84:05:0c:88:f7:a3:ed:aa:46:
                    f1:3c:d2:47:b4:c5:25:0e:83:83:cc:b6:1d:29:bc:
                    c6:40:4c:7f:83:91:d5:85:77:8b:e7:f6:66:56:c7:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:B7:28:63:98:36:29:16:69:D3:2A:16:02:83:08:68:E9:DA:69
            X509v3 Authority Key Identifier:
                keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:07:99:53:f6:7a:c1:9c:a7:a4:e8:08:b1:f7:f9:f1:48:7d:
         95:ef:d2:8e:17:2e:2b:7b:d0:98:c4:b9:e0:7e:46:6b:c9:0f:
         17:2c:c9:fb:6e:83:33:60:13:41:7d:1c:1c:cb:cf:ef:59:95:
         71:c7:9c:9c:b9:0d:1b:6f:f3:59:eb:0b:0d:6b:09:1c:e4:05:
         ec:12:3e:dd:9e:c5:75:1e:af:9f:52:d3:0b:a6:8e:33:6d:ef:
         7d:64:7a:86:78:60:f8:9f:d5:c7:68:cf:9d:4d:53:b2:49:7b:
         3f:0b:33:f0:4f:a1:55:5e:f5:3c:10:40:9b:42:f2:5f:a4:06:
         7b:de:87:25:03:31:14:87:d4:90:93:a9:e6:b6:c9:3f:f8:59:
         36:f5:77:6b:35:c5:20:0b:78:51:54:69:e7:5b:ed:22:83:55:
         35:c6:60:f7:d2:34:9b:fd:ff:ec:2b:25:d9:3a:90:5d:b7:a3:
         14:8f:6e:ba:4b:62:3e:90:ee:d4:05:25:37:d3:dd:6f:eb:61:
         c1:28:61:32:ef:23:39:66:ad:df:10:3a:93:7f:ba:3f:2e:86:
         74:7e:63:8e:67:02:bb:76:17:d9:73:bc:28:5b:81:b1:f1:d2:
         12:81:fa:de:f4:41:e6:48:d0:e9:3b:db:e5:3c:f6:9e:19:9b:
         68:54:ed:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:22:10 2025 by rpki-client