Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File:                     dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier:          sLzWcHUFaJY7CbJxb9oDTCvKU+A9mVCjy0nEJhW6Qi0=
Subject key identifier:   97:46:E2:AB:9E:BA:80:C4:E0:B6:E2:4D:E2:08:CF:ED:CC:86:43:10
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer:       /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number:          D4
Signing time:             Sat 23 Aug 2025 05:45:21 +0000
Manifest this update:     Sat 23 Aug 2025 05:45:21 +0000
Manifest next update:     Sat 30 Aug 2025 05:45:21 +0000
Files and hashes:         1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: hFJloxS60hVagkFfw7XxJPhU3ElFdVvFw35elw3CIGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
        Validity
            Not Before: Aug 23 05:45:21 2025 GMT
            Not After : Aug 30 05:45:21 2025 GMT
        Subject: CN=68a95571-a99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:78:0d:be:09:f9:44:c8:ff:cf:2b:ca:fd:
                    6a:fe:3f:a4:74:6b:49:86:5e:fe:c9:bf:2c:01:fe:
                    c0:24:2a:74:c0:a3:87:e8:77:c9:8c:19:16:d0:10:
                    89:9b:32:0c:0c:1f:80:ce:78:c7:58:ee:7e:45:6f:
                    48:80:f9:4e:e0:2c:ce:f5:36:ba:2b:be:dd:15:43:
                    f8:2f:8a:35:0a:9d:77:ac:fc:f3:7a:29:44:8a:9c:
                    ab:9c:bf:ff:33:07:93:d0:00:21:03:3a:14:b1:f6:
                    cc:7b:5f:46:e4:cd:e4:d8:54:ef:62:55:72:9f:93:
                    dc:be:ec:5e:af:c9:76:62:93:5b:27:1b:f0:cc:27:
                    d8:57:cc:c2:a9:88:94:12:60:95:88:90:21:ee:8b:
                    54:c8:b7:6e:e3:6b:ed:29:02:af:9c:48:8a:13:0d:
                    c1:68:a1:01:0f:c1:07:df:e5:9d:b4:b0:28:bf:3c:
                    2e:0d:cd:99:3a:a0:ee:cf:24:a4:f7:60:89:9e:5e:
                    3b:9d:32:b0:6a:43:c4:7d:bf:37:39:28:2e:b1:a2:
                    9e:1b:ab:4b:a8:60:7d:9f:c2:a1:74:d0:7c:c1:ea:
                    10:10:80:70:3a:b6:ab:a9:63:fe:78:ab:c2:77:c7:
                    56:04:27:cf:65:79:2c:c4:af:95:12:fb:c0:ae:e2:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:46:E2:AB:9E:BA:80:C4:E0:B6:E2:4D:E2:08:CF:ED:CC:86:43:10
            X509v3 Authority Key Identifier:
                keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:15:ad:d5:7d:92:02:ea:30:f9:68:8a:2b:75:52:c9:37:
         47:0a:3d:0d:b8:81:46:6f:ae:37:73:ec:ec:86:8f:ab:14:0a:
         01:91:4c:5c:10:c0:95:bb:03:81:dd:f0:8b:9c:91:f5:bc:45:
         29:df:50:32:01:5a:9b:27:7b:3e:ce:3f:6a:fd:24:31:1f:79:
         aa:69:d9:02:d0:44:5a:3d:93:b7:81:99:0e:a9:d8:2b:b1:e9:
         18:92:35:0a:e9:64:0a:d2:fb:34:68:1f:88:60:8e:5b:1b:af:
         3f:59:ea:f0:3d:33:26:99:dc:28:c7:53:c0:10:16:ae:c4:85:
         be:fc:8d:23:23:5a:d2:a2:08:51:ee:13:2e:09:7b:9a:01:96:
         31:41:da:3c:5b:c3:d3:78:50:f8:ef:20:c3:85:24:4c:e4:59:
         23:1b:1e:80:a6:0a:2c:ed:7b:b0:77:b6:a1:4c:d1:6e:07:95:
         eb:00:50:ae:5b:3e:75:f7:16:51:ec:9c:ba:e9:58:48:d2:65:
         93:97:af:fc:31:27:d9:db:73:cb:7e:f2:e9:a1:1a:1c:2c:d2:
         86:5a:57:9a:3d:18:48:fc:bf:cf:9f:78:53:46:5f:05:02:90:
         40:ff:8e:e8:af:45:76:4e:b4:84:8b:7c:21:b8:64:be:3c:55:
         e7:74:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:40:56 2025 by rpki-client