Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File:                     ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier:          3Rjny+sJOOycGioCWxAogKX1LpkvIL8mgo6LQjI1/58=
Subject key identifier:   74:9B:76:6C:00:C4:D2:2A:D7:92:50:2C:E0:3A:0F:1A:6B:6C:30:52
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer:       /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number:          0137
Signing time:             Thu 03 Jul 2025 04:39:12 +0000
Manifest this update:     Thu 03 Jul 2025 04:39:11 +0000
Manifest next update:     Thu 10 Jul 2025 04:39:11 +0000
Files and hashes:         1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: aqNucbuKn803oia0Ajyp1oi2w2+UZrllvAMYgpUjFuc=)
                          2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: gchZs9w0rw9TlztTLiN3YxQhLwyUQamaOc4Ws69TNxo=)
                          3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: PlPXvige1wM44fDKeXBrjYCBTjGnK3s8s01Ti3fCICQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
                          rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
        Validity
            Not Before: Jul  3 04:39:11 2025 GMT
            Not After : Jul 10 04:39:11 2025 GMT
        Subject: CN=68660970-1634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:23:ac:f7:fd:25:15:ae:2f:01:3e:4a:52:
                    98:4d:04:3b:95:72:cb:67:4d:e5:de:21:da:13:66:
                    4b:58:a2:67:cb:54:53:f5:70:5d:a7:d9:c8:6b:77:
                    4d:28:a4:d9:1e:b1:d8:d7:d4:c8:5c:d3:05:49:a5:
                    31:94:d4:5a:8b:0f:89:6f:86:de:88:d5:b7:df:dd:
                    bb:3c:86:a0:86:2f:36:57:dc:92:1b:9a:28:f6:c6:
                    f9:a4:f6:cf:fc:23:49:26:25:8f:72:cd:8e:9b:03:
                    51:01:ca:4d:39:93:13:bd:54:f3:77:30:87:2d:8c:
                    f6:83:33:23:bc:90:5f:a2:9d:67:0c:e0:21:4e:2b:
                    be:64:83:b3:90:50:e2:49:24:f0:29:3c:d9:e3:42:
                    5d:d8:77:c6:be:af:2c:e7:db:3e:2c:13:9c:21:69:
                    b3:21:bb:22:17:fe:2c:3c:26:9f:e6:69:91:f2:9b:
                    e3:1a:8b:f4:b0:e0:47:1c:0f:96:94:b6:2d:53:a8:
                    39:a3:37:e4:db:38:81:ee:8a:58:87:51:27:69:9b:
                    31:7f:19:dc:9f:b9:d2:90:82:26:ac:13:73:a1:81:
                    50:57:3b:4b:25:63:1f:10:04:66:7c:4b:66:c7:a8:
                    e2:d1:93:4e:c3:93:e3:4f:4a:38:36:26:64:fd:0a:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9B:76:6C:00:C4:D2:2A:D7:92:50:2C:E0:3A:0F:1A:6B:6C:30:52
            X509v3 Authority Key Identifier:
                keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:14:9e:a1:dc:1e:1d:98:bf:36:43:d5:cc:bb:fd:17:ed:9b:
         95:19:fd:a0:0c:2f:4d:94:17:f0:38:4f:26:19:1a:51:31:39:
         ed:f8:e0:7c:4d:b3:97:23:2a:4e:e4:d6:a4:0f:d3:63:af:5f:
         ef:de:bb:39:ce:18:59:0d:a8:af:0f:e2:f5:a1:f6:49:a8:0a:
         66:3f:0d:22:b4:5f:0c:04:2b:ed:44:15:a8:00:34:26:8d:26:
         65:3d:8b:8a:39:ba:d8:a7:f1:de:f6:3e:28:06:06:be:97:02:
         8c:16:12:0c:ba:81:cc:04:4f:2b:50:b0:60:3b:76:ec:97:0d:
         61:2a:a7:4f:85:21:9f:3a:3c:88:58:eb:6d:5d:d0:6f:5f:d0:
         64:f5:1d:3e:4f:52:20:3d:e1:47:f6:1e:f3:40:be:1c:8b:be:
         87:09:8a:57:a8:aa:6f:45:4d:6f:ed:3a:58:23:fd:40:4b:1b:
         8e:4d:ed:92:e8:e7:ee:f3:c9:28:48:89:ac:3b:aa:95:e5:23:
         8e:37:25:74:0c:ef:bb:7a:24:2b:e4:e8:0c:0c:0b:00:2e:36:
         9c:cc:86:ca:88:66:9e:72:46:d4:b8:84:6a:c5:11:bf:aa:36:
         64:c7:eb:b4:d8:13:b8:e3:7e:2a:f4:83:d7:d4:1a:8c:ce:62:
         70:b6:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:19:38 2025 by rpki-client