Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File:                     dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier:          ZWnT9KL09WXsUxKpobCXHmX+LjOzn+YnxNfjV4ynPUo=
Subject key identifier:   1E:0A:6A:92:AC:01:F4:D1:32:9B:BB:99:E6:5B:A1:47:1B:A8:02:4B
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number:          016E
Signing time:             Thu 03 Jul 2025 04:00:53 +0000
Manifest this update:     Thu 03 Jul 2025 04:00:52 +0000
Manifest next update:     Thu 10 Jul 2025 04:00:52 +0000
Files and hashes:         1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: fOGbYgO0vtJBcmJ7XBq27AyKpTwlDQK48wleOnJ1UAU=)
                          2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: zJw8Qq8QUnGm1SovwMdlmkT9wmbsFtkZF4qsHtw/2sk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Jul  3 04:00:52 2025 GMT
            Not After : Jul 10 04:00:52 2025 GMT
        Subject: CN=68660075-d265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5b:be:8c:e5:fb:85:f9:ad:2d:80:67:74:cb:
                    ff:04:f7:57:91:b5:44:e0:37:4f:da:67:a1:af:c5:
                    c8:ce:a8:a2:ad:d6:59:e7:31:53:94:01:3a:11:e7:
                    a9:af:02:3d:88:c7:b8:7a:d2:45:bc:08:84:37:01:
                    c9:cb:e6:88:96:61:3b:02:f1:f3:4a:a6:90:e1:bf:
                    a9:0a:e4:08:a7:d2:d4:59:2e:cf:df:ea:cc:4d:b1:
                    fc:f4:53:ee:e2:11:a3:47:5a:54:34:bd:36:b4:50:
                    40:28:e3:67:65:f6:ed:49:cc:5a:cc:ff:90:d9:2e:
                    6e:49:c3:3a:1d:c9:6a:51:a1:ea:fc:d9:68:3f:ee:
                    51:f3:82:2a:bf:4e:ba:e4:5f:6f:cd:1c:9a:ce:48:
                    17:89:8f:12:0c:6c:a5:fe:20:74:8a:f3:c2:b8:27:
                    ec:e8:8e:bd:52:7e:2a:cf:e9:11:22:38:81:28:30:
                    e3:a4:d2:b3:17:29:d4:fe:a1:a8:ac:b9:13:62:97:
                    db:e8:96:b5:0d:58:17:fc:0a:2e:64:77:48:d8:a3:
                    30:ca:b9:b3:51:ae:c1:43:4e:58:a9:aa:59:ee:e5:
                    99:77:32:48:83:88:00:ab:ef:fe:58:76:32:dd:c3:
                    21:26:1f:5e:3a:0d:7c:74:08:75:d5:5f:cc:50:e6:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0A:6A:92:AC:01:F4:D1:32:9B:BB:99:E6:5B:A1:47:1B:A8:02:4B
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:e6:20:cf:da:3f:60:b9:a9:81:3d:60:94:42:93:88:60:cd:
         b9:e9:e0:fa:a1:b7:7a:f7:37:54:05:9d:f2:5d:cc:5c:b2:58:
         43:4f:f4:84:0d:fe:26:95:cd:c0:39:22:2e:5d:79:13:a1:b1:
         75:12:25:b9:ce:79:0f:6f:84:76:25:46:9d:c1:f3:4a:ef:0a:
         5f:ce:b6:47:00:46:6f:f1:01:68:3d:a6:f7:01:16:61:8a:e9:
         59:f7:3f:53:90:10:b9:c4:45:05:6d:40:b2:5e:33:0d:c4:b9:
         6f:ad:5a:d6:be:b4:cd:0d:37:d3:66:96:11:9b:b3:da:13:04:
         a6:89:73:1f:9a:e2:6d:80:d4:0d:f7:ee:04:c1:b0:47:eb:19:
         b4:d4:06:d4:7c:ac:b3:77:7f:d5:78:7d:6f:d9:87:8a:23:19:
         03:c8:f6:9c:44:0b:81:4e:f4:3f:4b:4f:6c:90:69:4e:43:23:
         c8:da:e3:ef:bf:0b:ec:ec:66:63:8c:7e:8c:36:c2:4b:f0:db:
         2c:16:22:d0:e5:f7:4a:1c:10:8c:f9:85:8e:1e:6d:ff:e9:c6:
         b7:0d:55:43:d3:59:74:25:c3:04:e8:aa:36:d2:54:7a:b8:44:
         7e:2b:a0:29:3c:86:85:84:e6:b0:93:54:c4:1a:c8:b7:89:bb:
         a2:dd:38:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQxQTkxMTAvBgNVBAUTKDc0MjE3NEYzMkU2Q0M2RThEMUY5NjVCRkExRDQwQTEw
RDZFM0U3QzkwHhcNMjUwNzAzMDQwMDUyWhcNMjUwNzEwMDQwMDUyWjAYMRYwFAYD
VQQDEw02ODY2MDA3NS1kMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Fu+jOX7hfmtLYBndMv/BPdXkbVE4DdP2mehr8XIzqiirdZZ5zFTlAE6Eeep
rwI9iMe4etJFvAiENwHJy+aIlmE7AvHzSqaQ4b+pCuQIp9LUWS7P3+rMTbH89FPu
4hGjR1pUNL02tFBAKONnZfbtScxazP+Q2S5uScM6HclqUaHq/NloP+5R84Iqv066
5F9vzRyazkgXiY8SDGyl/iB0ivPCuCfs6I69Un4qz+kRIjiBKDDjpNKzFynU/qGo
rLkTYpfb6Ja1DVgX/AouZHdI2KMwyrmzUa7BQ05YqapZ7uWZdzJIg4gAq+/+WHYy
3cMhJh9eOg18dAh11V/MUObeuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4KapKs
AfTRMpu7meZboUcbqAJLMB8GA1UdIwQYMBaAFHQhdPMubMbo0fllv6HUChDW4+fJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDFBOS84RjkxNjk0ODMy
ODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1alItV1dfb2RRS0VOYmo1
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RDRjA4eTVzeHVqUi1XV19vZFFLRU5iajU4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDFBOS84RjkxNjk0ODMyODgxMUVFQjI5RDMwNDJDNEY5QUUwMi9kQ0YwOHk1c3h1
alItV1dfb2RRS0VOYmo1OGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDd5iDP2j9guamBPWCUQpOIYM256eD6obd69zdUBZ3yXcxcslhDT/SE
Df4mlc3AOSIuXXkTobF1EiW5znkPb4R2JUadwfNK7wpfzrZHAEZv8QFoPab3ARZh
iulZ9z9TkBC5xEUFbUCyXjMNxLlvrVrWvrTNDTfTZpYRm7PaEwSmiXMfmuJtgNQN
9+4EwbBH6xm01AbUfKyzd3/VeH1v2YeKIxkDyPacRAuBTvQ/S09skGlOQyPI2uPv
vwvs7GZjjH6MNsJL8NssFiLQ5fdKHBCM+YWOHm3/6ca3DVVD01l0JcME6Ko20lR6
uER+K6ApPIaFhOawk1TEGsi3ibui3Thf
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:09:32 2025 by rpki-client