Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File:                     dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier:          Rd4cn3Isjd4VBJ6ygkX/8fRIehfz7vqO63oqhxqX2fk=
Subject key identifier:   CC:64:4F:46:8F:20:E0:FE:65:3A:B3:4B:AA:39:0F:0D:C3:CC:E9:19
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer:       /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial:       03C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number:          03BD
Signing time:             Thu 03 Jul 2025 01:03:45 +0000
Manifest this update:     Thu 03 Jul 2025 01:03:44 +0000
Manifest next update:     Thu 10 Jul 2025 01:03:44 +0000
Files and hashes:         1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: 3qIx/z/mig/O6bVTOHRBgMpgHuR3TVPYDbiAEYqZ9sI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
                          rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C86, serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
        Validity
            Not Before: Jul  3 01:03:44 2025 GMT
            Not After : Jul 10 01:03:44 2025 GMT
        Subject: CN=6865d6f1-9712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:cd:1f:bb:b7:cd:27:45:12:d3:fb:9a:c9:
                    24:d6:5b:07:77:c5:a9:e9:cb:bc:ca:37:cd:7e:4e:
                    5b:85:12:28:57:2a:a9:e1:f5:5e:2d:9d:55:63:46:
                    c8:8f:08:84:45:d3:9c:c0:28:ea:67:5c:d4:e8:07:
                    c8:19:21:00:88:eb:55:e3:cf:14:93:cb:3b:6e:6b:
                    cc:5c:53:4d:d1:7a:e3:0f:77:87:6c:c9:a7:79:80:
                    c0:04:cf:27:ba:bb:b0:09:bf:b2:1a:b2:02:6e:2b:
                    52:24:6f:34:89:db:ca:27:84:9c:a5:5e:3d:87:04:
                    4c:7a:c0:81:e4:99:ab:4c:c5:ef:e0:b8:20:da:07:
                    66:98:eb:e3:25:16:b2:cf:45:81:37:01:10:52:3f:
                    25:68:5c:e2:a1:6e:b2:e2:1b:db:a8:b7:46:fc:50:
                    1c:73:2f:92:ce:ae:5d:5f:b0:4a:c7:c9:6c:b5:8d:
                    19:9b:92:2f:1a:d5:e0:73:53:18:0e:ff:20:6b:0a:
                    0a:f8:0e:59:ef:0e:47:cb:8d:65:64:46:ff:b0:a1:
                    38:2c:58:e2:4f:d1:34:bb:bd:b9:75:e4:61:da:09:
                    dd:de:c5:1b:bf:40:ad:43:b5:33:6d:09:40:8f:f5:
                    1f:1a:be:f4:18:ae:b9:0e:10:87:5a:95:eb:8e:ae:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:64:4F:46:8F:20:E0:FE:65:3A:B3:4B:AA:39:0F:0D:C3:CC:E9:19
            X509v3 Authority Key Identifier:
                keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:d4:9d:1d:cf:da:80:66:f8:53:4b:21:8b:31:05:c4:32:2b:
         b4:57:ba:48:d7:12:b2:6b:72:e5:8a:31:35:50:b9:7b:7c:fa:
         69:12:a0:8a:bf:6d:11:31:f1:91:6f:e4:28:97:91:21:41:78:
         09:e9:30:58:35:6d:f1:8a:01:8e:16:eb:a5:29:c1:b9:df:05:
         88:db:f5:65:a2:05:f8:3c:d0:3d:16:05:ba:ea:65:df:b5:f1:
         4a:2d:b3:d5:40:7c:9c:95:86:3a:f3:b0:f3:ea:89:c9:90:29:
         c7:35:70:92:bf:54:34:59:36:df:26:1a:5b:71:e9:51:d6:74:
         7b:ff:aa:8f:7d:56:ca:75:b3:9a:0d:8f:5e:2f:3e:dd:48:06:
         aa:41:46:3b:8c:bc:4a:74:6d:92:e8:2f:51:b2:56:d3:ff:60:
         20:08:bb:28:cb:15:45:8c:4c:53:bc:fc:7e:ae:c4:51:6b:fe:
         22:44:21:8e:77:51:bc:0f:15:7b:1f:02:0e:1c:dd:86:9d:94:
         4b:c7:d0:64:d7:55:7a:23:d5:2f:46:1c:aa:09:9a:b9:68:ab:
         01:c2:70:fd:5f:5f:10:4b:44:df:14:39:f9:a8:9b:98:3e:9a:
         4b:26:9c:a2:88:46:de:f1:f3:6f:b8:31:83:ea:42:f5:97:71:
         58:84:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:52:15 2025 by rpki-client