Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
File:                     pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json)
Hash identifier:          tt1wjeEyZB0ogy8fNVvSly5/fU1I7BiudO9o7apL43w=
Subject key identifier:   F0:63:5A:F3:C0:71:74:82:CF:B5:71:2F:24:69:A5:20:D9:7C:B6:47
Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
Certificate issuer:       /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
Manifest number:          0167
Signing time:             Thu 03 Jul 2025 04:09:16 +0000
Manifest this update:     Thu 03 Jul 2025 04:09:15 +0000
Manifest next update:     Thu 10 Jul 2025 04:09:15 +0000
Files and hashes:         1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: c85RkW8ZVff/fsxfEfTHe2YKR2leVgG9pgx+sP62ZhY=)
                          2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: dRIa1L+Dk+ECeqLpFjf2uz44Cfej3F1HAm+B1Eo0OQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl
                          rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
        Validity
            Not Before: Jul  3 04:09:15 2025 GMT
            Not After : Jul 10 04:09:15 2025 GMT
        Subject: CN=6866026b-dab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:0b:2b:06:8b:5e:b9:5f:ec:45:62:b0:1a:
                    75:e9:50:3b:64:15:a7:f2:34:36:70:a2:e5:54:6e:
                    8b:9c:23:6b:27:28:9f:56:49:b9:fe:e8:24:ea:4b:
                    cd:f4:cc:78:d8:6a:ad:9c:cd:ab:ad:91:2e:de:6c:
                    e7:04:9c:de:c8:c3:f6:ff:06:d1:bd:1d:1b:6a:1f:
                    e0:3c:e7:d5:a6:bd:e4:96:f7:c6:f2:97:84:c4:d4:
                    3c:75:b1:5a:b1:4e:6e:8e:5a:fa:e3:97:d7:7c:73:
                    d4:9a:f1:7c:d2:06:f7:34:06:f7:bf:db:06:55:c1:
                    23:84:1a:0a:ca:32:53:17:72:2b:78:76:1f:2d:c3:
                    b0:92:15:81:f7:af:b5:78:1d:8f:6a:96:3c:20:e8:
                    d3:71:89:e4:9f:77:c1:f0:28:8c:0d:0b:3e:2c:b9:
                    97:68:a6:49:d8:17:d9:45:6b:c7:cb:e9:77:fc:28:
                    bf:35:48:a2:a2:1f:c0:9e:50:9a:64:ee:39:1d:d8:
                    f3:4b:c5:a2:58:8c:90:fc:fa:cc:c6:1f:5c:95:b8:
                    8f:70:40:cf:53:18:98:fa:58:8e:33:47:e5:11:e5:
                    8d:31:6b:80:f8:5b:c4:0a:c3:59:78:65:d1:d7:41:
                    24:99:9e:19:02:4a:e8:54:fe:d6:51:91:31:67:c8:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:63:5A:F3:C0:71:74:82:CF:B5:71:2F:24:69:A5:20:D9:7C:B6:47
            X509v3 Authority Key Identifier:
                keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:bf:b1:90:bf:fd:45:c2:8b:ab:e3:53:b2:52:e1:25:d5:
         08:24:a0:17:da:64:2f:c0:57:2a:80:c4:21:7b:d4:9f:53:ef:
         2d:f7:52:60:2c:80:67:e9:25:42:23:52:b8:52:bd:2a:d0:98:
         fe:92:99:f8:0e:a2:ce:7d:cd:17:44:e2:74:e5:20:d1:d2:04:
         37:7a:92:38:53:bf:00:8b:05:bf:43:c6:70:04:3a:2b:6c:27:
         61:54:cc:b0:69:8b:de:df:c8:16:30:2d:eb:10:b3:9a:ca:09:
         fb:f1:7e:f1:5c:e7:d3:cf:8f:25:24:09:75:b8:4d:75:7a:d8:
         37:2d:ba:5d:5d:2e:b7:e4:95:23:70:73:e3:5d:2f:fa:48:bb:
         d5:df:9c:f2:0d:19:99:de:13:3a:30:fd:17:f9:cd:6c:b9:85:
         11:fe:7f:4b:ad:fa:25:dd:01:14:fe:c8:80:60:a5:b1:1e:b1:
         0f:ec:1f:2a:9d:2b:7c:0e:f6:c8:84:d3:56:fa:4d:f3:80:bd:
         b5:a5:b2:f0:4e:5f:fb:5e:28:6f:55:9c:00:75:3e:54:62:76:
         83:a8:eb:e7:6d:ad:e3:b1:6b:33:fd:1e:f3:6f:c5:dd:fe:04:
         d2:6d:76:c3:4b:dc:9e:71:55:9d:fc:5e:83:c9:32:ec:c9:bf:
         b7:37:01:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz
QjcyMjM3QUYwHhcNMjUwNzAzMDQwOTE1WhcNMjUwNzEwMDQwOTE1WjAYMRYwFAYD
VQQDEw02ODY2MDI2Yi1kYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5s8LKwaLXrlf7EVisBp16VA7ZBWn8jQ2cKLlVG6LnCNrJyifVkm5/ugk6kvN
9Mx42GqtnM2rrZEu3mznBJzeyMP2/wbRvR0bah/gPOfVpr3klvfG8peExNQ8dbFa
sU5ujlr645fXfHPUmvF80gb3NAb3v9sGVcEjhBoKyjJTF3IreHYfLcOwkhWB96+1
eB2PapY8IOjTcYnkn3fB8CiMDQs+LLmXaKZJ2BfZRWvHy+l3/Ci/NUiioh/AnlCa
ZO45HdjzS8WiWIyQ/PrMxh9clbiPcEDPUxiY+liOM0flEeWNMWuA+FvECsNZeGXR
10EkmZ4ZAkroVP7WUZExZ8gmtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBjWvPA
cXSCz7VxLyRppSDZfLZHMB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3
MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV
ekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM8L+xkL/9RcKLq+NTslLhJdUIJKAX2mQvwFcqgMQhe9SfU+8t91Jg
LIBn6SVCI1K4Ur0q0Jj+kpn4DqLOfc0XROJ05SDR0gQ3epI4U78AiwW/Q8ZwBDor
bCdhVMywaYve38gWMC3rELOaygn78X7xXOfTz48lJAl1uE11etg3LbpdXS635JUj
cHPjXS/6SLvV35zyDRmZ3hM6MP0X+c1suYUR/n9Lrfol3QEU/siAYKWxHrEP7B8q
nSt8DvbIhNNW+k3zgL21pbLwTl/7XihvVZwAdT5UYnaDqOvnba3jsWsz/R7zb8Xd
/gTSbXbDS9yecVWd/F6DyTLsyb+3NwGh
-----END CERTIFICATE-----
Generated at Thu Jul 3 21:54:38 2025 by rpki-client