Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File:                     DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier:          zVG3JjBCUsYSqY69ffcqOWlDlgb3++tALsZP4Rx3cb0=
Subject key identifier:   E8:B7:4B:64:0C:4F:E3:DE:D9:90:45:CE:14:E8:8C:79:2A:AC:B3:9A
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer:       /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial:       114A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number:          1140
Signing time:             Fri 30 May 2025 17:26:15 +0000
Manifest this update:     Fri 30 May 2025 17:26:14 +0000
Manifest next update:     Fri 06 Jun 2025 17:26:14 +0000
Files and hashes:         1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: ZSqriqbFQVofxFp1bo3e/3pk4VaOqlvgqR5a3wEpc04=)
                          2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
                          rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4426 (0x114a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
        Validity
            Not Before: May 30 17:26:14 2025 GMT
            Not After : Jun  6 17:26:14 2025 GMT
        Subject: CN=6839ea37-21a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:43:31:75:17:1e:31:5d:9b:ff:04:eb:0b:
                    09:a5:9a:37:b0:91:9e:11:32:fa:ce:85:b5:82:c2:
                    da:4f:2d:d2:17:56:8a:63:30:6c:0b:da:e5:54:fd:
                    93:3e:00:5e:aa:ee:41:39:7c:ec:e6:cf:36:0a:d9:
                    fc:5b:45:e6:85:8e:82:80:53:a0:a8:f0:9f:34:60:
                    d2:27:96:34:df:f9:af:9e:8f:37:65:79:cb:89:df:
                    6d:3c:55:22:38:b5:1c:91:61:9e:4f:a6:c4:1a:eb:
                    e7:97:c7:8a:94:cc:b6:a9:98:07:7d:8a:75:c3:ea:
                    4b:1b:41:d2:c7:bb:6c:80:6f:86:61:81:38:39:ba:
                    bb:af:65:f6:fa:ef:a8:ed:cc:ab:37:d0:b9:f2:70:
                    17:1c:08:26:10:11:ed:34:2c:ab:39:22:4b:e1:71:
                    cb:27:37:49:6b:c0:fb:bd:f8:ac:ee:32:9c:1b:d7:
                    d0:43:45:a6:52:26:92:76:05:e0:62:16:c7:8b:5d:
                    8a:00:c1:5b:1f:64:35:31:34:74:c9:45:88:06:4f:
                    5f:c6:f0:00:df:94:cc:d6:24:1e:5a:ce:16:5a:7c:
                    5c:7b:f1:d6:9c:2f:a1:23:8d:9f:5f:41:19:b2:f0:
                    4b:9c:a2:9f:c7:d3:1e:bb:e2:70:be:06:f2:94:97:
                    65:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B7:4B:64:0C:4F:E3:DE:D9:90:45:CE:14:E8:8C:79:2A:AC:B3:9A
            X509v3 Authority Key Identifier:
                keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:d7:0f:e5:59:32:69:4a:e3:2e:b3:d9:45:f3:f5:5c:84:
         ad:b3:62:c1:f9:07:10:c2:8a:0e:5e:00:f9:aa:62:4b:89:7b:
         dd:4e:f9:4e:02:d3:38:fb:93:bb:e5:cb:67:a8:13:f7:41:1b:
         21:cb:99:bc:ee:33:5b:8b:54:61:0a:e9:98:76:43:da:29:29:
         6d:b8:52:35:36:63:b5:78:c1:aa:4d:75:88:8b:f1:e9:25:0c:
         84:b7:bd:1a:92:c1:80:14:5c:e3:47:f1:61:fc:d8:0f:51:d9:
         f9:7d:47:e7:43:c8:fd:42:ad:f7:94:bd:b9:9e:43:d1:2a:ef:
         6a:d9:b0:10:0b:38:88:4d:6e:06:62:88:69:0d:d0:7d:ca:8f:
         cb:dc:e3:c3:40:8f:f9:ef:61:99:96:37:02:50:12:18:cb:76:
         90:e2:16:b9:97:6b:8c:15:76:68:79:a3:8a:bf:37:9c:3d:c2:
         f2:07:f9:af:ff:64:2e:74:e5:07:88:ec:27:b9:14:24:35:f0:
         ba:99:b9:f7:d0:11:e2:27:bf:84:e5:22:c3:2d:48:40:38:50:
         7e:64:bb:2a:3a:a3:b3:00:de:c8:05:cb:e7:ae:2c:d8:3e:31:
         9b:a5:72:3f:a1:15:2b:a0:d3:f5:fd:68:25:d4:a6:e9:2d:ab:
         1c:e1:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:32:52 2025 by rpki-client