Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
File:                     DpNmGsFhVPZdKi94GgMfNckxAQM.mft (raw, json)
Hash identifier:          /i+4367LsvrhfBfXYr6zIgUxk94Y4r+FYJt8z82JbpY=
Subject key identifier:   D7:2B:1C:A7:AE:8F:74:93:CE:E7:71:27:62:1C:B3:E1:40:4E:81:2D
Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
Certificate issuer:       /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
Manifest number:          76
Signing time:             Thu 21 Aug 2025 07:01:37 +0000
Manifest this update:     Thu 21 Aug 2025 07:01:37 +0000
Manifest next update:     Thu 28 Aug 2025 07:01:37 +0000
Files and hashes:         1: DpNmGsFhVPZdKi94GgMfNckxAQM.crl (hash: eMHmtW1/h0qXyHPKmIaTCdVg7QGx3/nJcvVVpZl21IQ=)
                          2: B534A848E2CE11EFA7030E56C4F9AE02.roa (hash: IJazIyHIF44pTPxQ+ChMh4PrZ/qmLQRUwrJ830VYj78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
                          rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
        Validity
            Not Before: Aug 21 07:01:37 2025 GMT
            Not After : Aug 28 07:01:37 2025 GMT
        Subject: CN=68a6c451-a849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:c9:7a:08:4b:04:2a:00:67:9b:65:c2:61:
                    a6:ce:38:bc:6e:7f:32:b9:29:6f:a8:5f:48:0f:a2:
                    d1:f8:ad:dd:42:6f:28:03:9f:fa:6a:1f:24:9d:bc:
                    4c:74:1f:b3:6d:9e:11:82:9f:18:28:11:dc:80:3e:
                    bc:95:8c:58:8f:ff:18:24:48:ac:e8:39:11:11:97:
                    cf:d2:6e:40:6a:29:91:ab:d9:b5:fb:b5:c4:65:19:
                    31:c8:da:65:d2:3c:53:ce:39:27:bf:66:0b:e4:64:
                    82:1d:06:bd:64:16:bf:27:d9:48:c4:73:3f:e9:34:
                    ed:97:2a:ad:dc:fd:de:8e:a3:cb:92:15:e7:94:5d:
                    5a:5b:6a:ba:ba:50:9c:10:8d:ff:d8:64:b4:94:d9:
                    24:17:97:66:7f:3d:6f:bd:f7:ba:fa:da:bb:32:35:
                    ab:8e:f0:27:7e:65:60:65:3f:b6:db:6e:5d:a3:3a:
                    fb:12:06:ba:2f:77:bb:ec:57:92:67:26:28:59:df:
                    76:f3:4f:db:9a:a8:ce:19:27:66:16:ee:7c:34:c4:
                    65:f4:21:14:24:4c:4e:6f:84:4a:bd:80:c7:27:1e:
                    f2:2e:9c:78:26:14:cd:ec:c1:5f:24:5f:ff:68:2e:
                    7f:bd:7d:49:23:dc:6b:26:38:f7:bf:ac:57:bc:80:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:1C:A7:AE:8F:74:93:CE:E7:71:27:62:1C:B3:E1:40:4E:81:2D
            X509v3 Authority Key Identifier:
                keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2a:d6:e1:41:c4:c2:9f:a7:f5:1c:9f:25:85:74:31:13:d5:
         51:a0:4b:b2:58:a1:74:21:3b:46:19:58:2f:14:0c:e5:ef:49:
         da:89:40:d8:c3:85:e8:de:95:ea:66:6a:e0:d2:84:b3:5d:4c:
         ed:83:5b:6c:8d:75:39:74:cb:21:79:1c:cb:0e:2d:6d:5b:3a:
         ad:08:e5:79:b9:40:45:85:ed:75:50:fe:50:86:62:32:88:27:
         c5:d5:77:15:86:69:9f:d9:de:80:3d:02:8b:87:29:32:e8:56:
         0e:fe:73:f5:f9:57:a0:65:43:57:32:0f:6b:d1:71:59:c0:30:
         2b:cf:e4:3f:69:0d:d0:78:06:2c:27:fb:26:d2:e4:3e:07:e4:
         d9:c1:16:6f:49:c9:6b:12:dc:dd:1c:de:8f:c4:10:8e:c9:bb:
         0f:83:b4:16:d4:32:52:3c:ba:9a:c9:16:07:cf:a2:13:ad:d4:
         b7:aa:3e:7e:97:49:ca:44:49:58:53:6a:88:8d:75:c6:af:f2:
         71:9c:2f:ab:d6:39:35:59:f3:9c:60:94:86:b7:6d:95:db:d1:
         b0:10:f3:5e:41:f2:2c:23:9d:b3:d0:9f:d2:dc:b4:72:6d:dc:
         2d:89:38:a0:bb:d3:f4:45:51:91:c2:98:9d:61:8b:88:fc:f6:
         b0:a5:e7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:38:22 2025 by rpki-client