Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File:                     DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier:          vUvndNV0FkCg+VqX7KaNTKzdQzb3cTAFHBEYNNmbydk=
Subject key identifier:   86:CD:6B:EE:13:A4:C9:FF:1C:F7:4E:88:25:A3:0D:FA:EF:22:CA:D5
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer:       /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial:       117D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number:          1173
Signing time:             Sat 06 Sep 2025 17:20:34 +0000
Manifest this update:     Sat 06 Sep 2025 17:20:34 +0000
Manifest next update:     Sat 13 Sep 2025 17:20:34 +0000
Files and hashes:         1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: Jc/p1JeQFcym1XUBr+EplNvrj/JxCJ3Z/Nfr5kHmwz0=)
                          2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
                          rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4477 (0x117d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
        Validity
            Not Before: Sep  6 17:20:34 2025 GMT
            Not After : Sep 13 17:20:34 2025 GMT
        Subject: CN=68bc6d62-8649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:26:ee:4d:ae:e0:f8:81:26:0b:d2:90:f9:
                    18:72:ac:99:3f:ca:51:19:d4:d1:b2:21:39:fd:c5:
                    48:84:a1:b9:cd:87:5b:84:45:d7:83:d4:19:c2:13:
                    aa:f4:52:86:b6:38:5d:a1:52:48:8b:db:6f:6f:3f:
                    9f:ad:5d:35:e7:ba:28:77:d7:1f:06:5b:d5:b5:d7:
                    8e:b7:0b:aa:bb:18:66:da:11:e5:18:8f:0d:20:0c:
                    57:63:58:8f:8e:61:9c:ab:9e:65:a2:a3:df:6e:77:
                    04:7a:fa:2f:59:0d:b3:b5:15:c9:12:a4:de:d1:f3:
                    9f:9c:b0:d9:82:24:93:0b:bb:02:79:ef:32:14:48:
                    a0:91:93:79:73:a6:9e:9f:c6:9c:be:9e:83:e8:6c:
                    53:9b:2e:a3:e9:aa:e5:9d:64:be:3b:a8:81:35:c3:
                    8e:9b:c7:ff:34:d7:fd:7c:37:d3:60:e9:03:aa:c9:
                    66:ac:34:e2:43:9b:01:3f:9b:a1:1d:b2:bb:37:8c:
                    e8:ab:07:4a:cf:a6:1a:f6:51:49:67:3b:51:bd:46:
                    23:11:84:cc:b8:15:5d:52:29:99:53:bb:14:2c:0d:
                    cc:72:3d:f9:af:cd:a1:02:6a:ec:f8:58:21:9b:fb:
                    09:01:2f:f0:40:90:d3:9c:2d:2b:67:bb:04:00:53:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CD:6B:EE:13:A4:C9:FF:1C:F7:4E:88:25:A3:0D:FA:EF:22:CA:D5
            X509v3 Authority Key Identifier:
                keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7b:d3:ac:c2:2e:1c:ad:bd:37:23:5c:26:d5:4a:f6:bd:c0:
         32:d6:86:35:6a:f7:8a:3d:12:59:8d:cd:86:6c:80:5a:3c:5d:
         e9:40:bf:e5:4e:79:de:f2:3e:8c:07:0b:d9:f7:7e:a4:e3:9c:
         e9:00:b9:53:68:b1:13:e1:a5:77:39:82:9f:88:aa:76:3a:5b:
         3d:78:73:1b:c4:ec:ad:72:04:8a:fc:e9:0d:76:bc:1f:67:e9:
         ed:fb:f6:95:67:c4:d9:80:fb:25:85:fd:eb:83:4e:74:5a:76:
         48:79:21:14:93:b4:bb:05:bb:ff:44:ae:09:ef:2c:3d:cc:eb:
         7d:f9:e4:4a:08:61:57:a0:41:03:60:4a:2f:64:97:5b:7e:0b:
         70:c1:21:2d:1f:86:8c:df:46:07:4d:f7:9a:e0:89:fe:56:e6:
         cc:c3:6e:2c:06:11:66:6d:b8:31:83:5b:e6:16:79:e8:2c:bf:
         ef:86:bf:f8:24:56:a8:de:95:79:0c:e8:1c:6d:ca:ae:08:74:
         8d:38:5e:f8:c2:5f:ec:4b:15:7c:03:6d:bb:f5:3a:e0:fa:1e:
         b4:b7:e4:77:4e:e9:4f:d9:d2:89:6f:52:c5:59:51:62:8f:69:
         91:3a:cf:86:a1:08:e2:6e:b5:05:61:ee:fe:99:8c:78:a6:da:
         77:25:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:35:35 2025 by rpki-client