Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File:                     dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier:          Dv/vNN5W6DkB+HgzRgm2FCLh0IFqtSq5Wx5nvA+f6GM=
Subject key identifier:   55:F9:AB:77:AB:5C:6D:20:1E:19:15:DC:35:F5:82:DF:1B:12:AF:9E
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       060E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number:          060B
Signing time:             Sun 08 Jun 2025 22:28:46 +0000
Manifest this update:     Sun 08 Jun 2025 22:28:45 +0000
Manifest next update:     Sun 15 Jun 2025 22:28:45 +0000
Files and hashes:         1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: OrWE5DnXSEIqJ1XFEmHsVVtnNAskfwGJK+sRv2SDj1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
                          rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 22:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550 (0x60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: Jun  8 22:28:45 2025 GMT
            Not After : Jun 15 22:28:45 2025 GMT
        Subject: CN=68460e9e-2822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:80:5d:1e:a7:12:03:3d:de:9d:55:a7:5e:
                    fe:55:09:d2:59:1d:ef:07:8a:59:48:c0:7e:75:e4:
                    f0:6b:de:08:8a:69:14:2e:16:4b:b0:b8:71:13:d6:
                    d3:29:c9:79:50:2b:1a:f6:47:14:db:7f:f3:24:ab:
                    b2:81:07:b8:95:4c:9c:27:3c:fb:10:c2:f1:58:43:
                    be:25:db:b4:3f:bc:b9:d0:a5:80:8d:ae:9e:5b:47:
                    3e:7b:d0:24:2f:0a:a5:7f:f8:8a:0e:bb:1e:f2:68:
                    4f:c3:5b:7e:bf:a8:e3:03:97:f3:ab:3a:39:ac:0a:
                    a0:c0:1d:5b:1c:6c:5a:7e:9b:16:75:df:db:3c:e0:
                    2c:20:62:1b:f3:a7:c1:ef:dc:f1:03:bb:ed:0a:51:
                    f1:de:94:d1:8e:8e:3f:c9:25:5b:4c:ce:f3:ac:e9:
                    0a:db:ae:de:ee:37:a8:f3:6b:97:b6:18:2c:e8:cf:
                    f9:2e:b8:4f:0c:e4:8d:f7:a8:40:44:78:4b:3f:03:
                    85:33:1b:85:94:50:6f:c4:f1:95:c0:dc:9d:d2:a9:
                    06:af:be:7e:8d:f5:05:a7:68:c4:65:40:96:76:9c:
                    ec:b4:ca:36:be:48:5a:a7:a5:d2:e2:5a:ff:d7:8e:
                    5b:f4:4a:d8:c0:80:c2:31:2b:86:16:b4:7e:9d:23:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F9:AB:77:AB:5C:6D:20:1E:19:15:DC:35:F5:82:DF:1B:12:AF:9E
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:bc:20:12:6d:6c:c6:ce:8c:ce:d8:e7:66:52:da:c3:62:b1:
         f5:d6:53:7c:f7:01:ac:1e:1d:1d:99:88:a6:4e:68:95:5c:46:
         ab:57:e1:f7:5f:ba:f0:44:35:a2:c8:a2:57:27:0e:23:3e:d8:
         02:b7:e8:2a:fd:3f:b9:89:f1:08:6d:6c:1a:07:df:aa:c3:c5:
         72:93:b6:e2:d6:27:3a:0d:c5:a7:c0:8b:e2:e2:98:cc:54:9f:
         bb:f4:26:48:c1:5a:32:cb:51:1f:03:57:c5:1e:25:c6:75:94:
         be:fb:d1:db:e6:33:97:bb:47:96:a9:d1:ad:d7:f5:c7:24:c5:
         02:2a:7c:be:bd:43:cb:31:a3:f4:ea:25:8f:c5:fc:c8:5d:d4:
         1d:60:7c:34:18:f0:2a:1c:ef:4b:ab:c9:f7:b0:e1:89:29:66:
         07:76:d2:4c:30:c1:33:2a:cf:72:be:bb:8f:d5:2c:68:8d:b4:
         5d:be:d0:42:bc:ec:fc:38:bf:55:95:94:46:cd:ce:a1:58:a6:
         92:99:3e:da:23:a7:a9:65:85:fd:39:d8:f9:f7:07:67:b7:5f:
         91:66:24:35:cc:79:0f:f4:4c:b6:d9:fd:64:45:21:83:9b:1d:
         8a:07:04:81:13:f1:1a:65:62:65:05:18:d0:93:1e:b1:1a:c1:
         40:56:f3:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBERjUxMTAvBgNVBAUTKDc2Nzg2MjVEOTE1NEZDREYxQjAwMEE0M0QxRjg5MkZC
MUQ1ODgzNjkwHhcNMjUwNjA4MjIyODQ1WhcNMjUwNjE1MjIyODQ1WjAYMRYwFAYD
VQQDEw02ODQ2MGU5ZS0yODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6WAXR6nEgM93p1Vp17+VQnSWR3vB4pZSMB+deTwa94IimkULhZLsLhxE9bT
Kcl5UCsa9kcU23/zJKuygQe4lUycJzz7EMLxWEO+Jdu0P7y50KWAja6eW0c+e9Ak
Lwqlf/iKDrse8mhPw1t+v6jjA5fzqzo5rAqgwB1bHGxafpsWdd/bPOAsIGIb86fB
79zxA7vtClHx3pTRjo4/ySVbTM7zrOkK267e7jeo82uXthgs6M/5LrhPDOSN96hA
RHhLPwOFMxuFlFBvxPGVwNyd0qkGr75+jfUFp2jEZUCWdpzstMo2vkhap6XS4lr/
145b9ErYwIDCMSuGFrR+nSN7UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX5q3er
XG0gHhkV3DX1gt8bEq+eMB8GA1UdIwQYMBaAFHZ4Yl2RVPzfGwAKQ9H4kvsdWINp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERGNS9GNEZEMjI3QUE2
MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9OOGJBQXBEMGZpUy14MVln
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RuaGlYWkZVX044YkFBcEQwZmlTLXgxWWcyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MERGNS9GNEZEMjI3QUE2MzIxMUVCQjNFMTc5NjlDNEY5QUUwMi9kbmhpWFpGVV9O
OGJBQXBEMGZpUy14MVlnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBevCASbWzGzozO2OdmUtrDYrH11lN89wGsHh0dmYimTmiVXEarV+H3
X7rwRDWiyKJXJw4jPtgCt+gq/T+5ifEIbWwaB9+qw8Vyk7bi1ic6DcWnwIvi4pjM
VJ+79CZIwVoyy1EfA1fFHiXGdZS++9Hb5jOXu0eWqdGt1/XHJMUCKny+vUPLMaP0
6iWPxfzIXdQdYHw0GPAqHO9Lq8n3sOGJKWYHdtJMMMEzKs9yvruP1SxojbRdvtBC
vOz8OL9VlZRGzc6hWKaSmT7aI6epZYX9Odj59wdnt1+RZiQ1zHkP9Ey22f1kRSGD
mx2KBwSBE/EaZWJlBRjQkx6xGsFAVvPC
-----END CERTIFICATE-----
Generated at Mon Jun 9 15:49:59 2025 by rpki-client