Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File:                     OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier:          CpMDee4fzoTxcuCp7h0v6Ph1GdOf8XdjcSGmr5g1Brg=
Subject key identifier:   B0:8C:96:AF:B9:F4:CE:5C:2A:F3:BD:ED:3F:E0:1C:AE:39:07:E2:49
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer:       /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial:       1EC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number:          1EB8
Signing time:             Fri 08 Aug 2025 16:11:23 +0000
Manifest this update:     Fri 08 Aug 2025 16:11:22 +0000
Manifest next update:     Fri 15 Aug 2025 16:11:22 +0000
Files and hashes:         1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: /h3lyQWT+zGGdewIuadK7Y4AW4o342m9Ebiz3VyI1sc=)
                          2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
                          rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7876 (0x1ec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
        Validity
            Not Before: Aug  8 16:11:22 2025 GMT
            Not After : Aug 15 16:11:22 2025 GMT
        Subject: CN=689621ab-f434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:78:a7:bb:a8:e6:26:40:19:20:71:bf:2f:
                    cd:53:5c:bf:6d:68:5b:36:e4:bf:92:89:de:e6:6d:
                    dc:64:81:70:6c:e7:05:44:30:d6:01:40:27:3d:e7:
                    a7:00:8e:a1:95:da:36:a8:5b:21:00:fe:b6:9b:36:
                    69:cd:40:9d:94:22:dd:37:95:b8:3d:f2:1a:1f:04:
                    50:c3:d2:20:37:a2:3f:1a:73:09:53:45:cc:92:53:
                    ae:12:62:aa:5e:71:0a:44:d5:ec:6d:19:13:2f:37:
                    49:a2:99:7a:83:f9:e6:e7:b4:c0:9a:d8:82:87:1a:
                    12:f7:c9:63:60:61:29:f2:6d:b3:b4:e5:7b:95:66:
                    b4:05:19:1a:95:a1:3d:02:51:d4:07:49:bf:00:dc:
                    22:c2:16:f8:60:e5:17:6d:47:60:69:72:16:90:3e:
                    cd:4e:55:4e:f7:f3:23:d1:30:22:75:cd:d5:e0:cd:
                    31:e9:c9:ea:41:9c:66:1d:1f:99:8d:93:d8:07:57:
                    9e:b4:17:57:e5:2d:99:8e:26:6b:51:26:c1:8d:db:
                    e1:01:e2:8a:a2:71:c2:ff:95:10:50:c1:7b:54:4b:
                    ef:60:57:cc:f9:5c:a2:ce:17:09:de:d6:77:86:52:
                    09:7b:70:28:8d:90:20:3d:78:36:8a:52:12:53:ae:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:96:AF:B9:F4:CE:5C:2A:F3:BD:ED:3F:E0:1C:AE:39:07:E2:49
            X509v3 Authority Key Identifier:
                keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:dd:e0:21:4e:ca:11:5e:31:40:40:54:d1:97:3f:bb:5d:
         67:59:cd:48:db:a3:8b:83:4a:93:50:44:8a:b1:39:72:8f:e8:
         ce:4f:d9:e2:fd:7a:b1:05:87:7b:54:e7:04:61:94:f7:9c:68:
         0c:db:43:81:5d:54:fa:2e:09:5a:05:40:df:81:b7:0b:62:0c:
         da:e5:44:d1:04:1b:cc:19:2d:2a:16:9b:f0:40:b0:27:0d:8f:
         10:4e:f2:3e:32:d7:4b:9e:ed:4c:b8:04:f0:62:c1:dc:ee:6a:
         2f:7c:3f:a5:39:30:5d:2b:7d:c9:68:b0:e2:f3:36:63:0c:87:
         73:22:39:a0:6e:20:7a:72:ea:e2:c2:b7:62:e9:d5:24:88:6d:
         ab:2e:16:a5:35:33:2f:f0:f2:f0:d0:8f:ac:af:8f:fe:cc:3b:
         e1:15:5b:e4:f3:6e:36:11:b5:77:72:70:91:05:01:8c:cb:2f:
         1f:8d:4a:fb:a3:42:56:57:9b:4c:52:1c:e6:37:33:bf:c1:6c:
         52:d5:2a:ee:bc:3a:91:e5:2a:69:16:19:28:0e:20:13:23:b3:
         10:59:c3:ed:e5:e6:cd:48:fd:b6:10:7f:73:f1:7d:5b:ab:3e:
         fb:2d:59:4e:0f:df:bb:c7:3c:21:d2:49:34:23:ef:19:21:98:
         d3:f5:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:13 2025 by rpki-client