Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File:                     M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier:          +jgX9s93DwUTDnMf9szZ6XA8qQHwkLyQ0JRGLGwJYAQ=
Subject key identifier:   21:23:DB:F1:B8:8E:49:C3:74:B2:D9:DA:31:8A:50:F5:74:36:C3:31
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number:          0263
Signing time:             Sun 29 Jun 2025 01:19:11 +0000
Manifest this update:     Sun 29 Jun 2025 01:19:10 +0000
Manifest next update:     Sun 06 Jul 2025 01:19:10 +0000
Files and hashes:         1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: WijYCwO6yplmKzMhgw3bt5GOPeAu3go1FZI6mtkoS+Y=)
                          2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RW7mrI/X8sf61J1ueh+btyO6BZUeqCysdCPEaUN7lpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
                          rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 01:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: Jun 29 01:19:10 2025 GMT
            Not After : Jul  6 01:19:10 2025 GMT
        Subject: CN=6860948f-ea48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:f1:8b:b3:06:5d:5f:f7:f2:c1:05:e4:52:
                    54:9c:01:02:61:33:5f:19:3d:ea:7d:6a:62:a8:61:
                    87:e7:8a:02:e6:1f:4d:1b:de:1d:83:73:b2:67:66:
                    ed:ce:51:9f:9b:30:ec:e4:fc:37:3f:5a:7a:ce:a6:
                    a3:8d:80:0a:79:52:1d:29:43:f7:cd:72:33:2e:68:
                    1f:15:bc:d5:93:98:98:d2:26:ee:e7:23:9d:ed:e9:
                    0b:e3:29:a3:51:08:0f:e1:cb:db:39:86:0d:ba:2c:
                    2f:ab:cc:58:8e:ad:2f:8c:c6:28:24:bc:e2:3d:6a:
                    e3:20:f2:4c:1a:cf:9d:7a:b6:9c:b1:81:03:6a:ec:
                    15:57:65:0c:75:df:72:34:02:0b:4f:ba:7a:36:87:
                    de:f7:8c:aa:45:bc:a6:df:85:2f:78:bd:c5:65:a0:
                    d6:20:c3:b8:a3:17:5f:f2:00:f3:94:2e:c5:e5:69:
                    ea:4f:06:af:0e:fd:15:1c:49:7c:1d:07:37:61:4f:
                    79:5b:65:8c:af:b3:67:75:ed:36:60:5f:02:b4:a7:
                    59:ad:ac:cc:e9:40:c0:e0:f1:d8:b4:fc:2b:db:f4:
                    ad:a2:16:f6:36:c1:53:49:00:65:d7:7e:50:3b:b0:
                    28:05:10:c9:ef:59:60:28:a4:8f:89:40:a7:ab:ab:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:23:DB:F1:B8:8E:49:C3:74:B2:D9:DA:31:8A:50:F5:74:36:C3:31
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7f:0f:4c:5f:2f:17:9f:11:53:dd:d1:01:49:88:b6:f6:b7:
         b4:4f:c6:ae:ed:b7:9a:85:62:1b:a3:39:68:75:ad:c5:60:70:
         19:13:58:e6:c7:fa:e5:db:bb:61:34:d4:b8:c9:1a:9c:d9:34:
         71:ad:84:da:59:3c:e7:2d:23:ee:9c:84:3b:65:89:cc:b1:70:
         e8:c1:1a:d2:d4:e3:37:a2:70:ed:93:22:3f:a9:1a:5d:8c:8e:
         86:01:56:a4:34:a0:a3:bf:a2:a1:9c:34:1f:f0:db:65:b2:b8:
         2a:b0:b5:51:96:ae:32:59:f7:af:8b:45:a6:20:28:58:39:f2:
         11:ac:64:0d:11:ac:aa:2b:5a:ed:34:d8:82:e7:4b:d5:27:5f:
         2c:fa:12:44:c9:af:f8:57:33:a4:62:99:cb:d4:28:e9:ec:e6:
         69:e9:e7:93:3a:44:29:cf:75:f5:25:89:16:27:2e:1c:45:69:
         4b:3c:8f:d4:fa:94:c6:9d:2b:97:80:d5:54:e5:ca:a9:48:4b:
         e0:ab:62:7e:f1:8d:29:2a:d1:68:a8:28:79:fa:9b:10:b3:3d:
         e0:a9:dd:7b:61:68:af:d8:0c:c7:2c:07:1c:93:38:79:34:d2:
         d8:77:b7:21:3f:5e:86:dc:45:72:fe:2f:e0:6b:e5:77:55:84:
         5e:12:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:38:54 2025 by rpki-client