Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File:                     OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier:          tLLmwjRkoV/a6Un3E0OulsiwESN5OAPz+bAIBGMGXaw=
Subject key identifier:   30:18:0E:DE:C0:5F:F1:88:22:47:D6:39:A1:3D:43:58:94:1E:63:F3
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer:       /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial:       08B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number:          14A9
Signing time:             Sun 10 Aug 2025 18:45:39 +0000
Manifest this update:     Sun 10 Aug 2025 18:45:38 +0000
Manifest next update:     Sun 17 Aug 2025 18:45:38 +0000
Files and hashes:         1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: ZqaYDgp3U1xWvM+j7uMfdVtyqQJyH/jBLkPqUHw4D7E=)
                          2: F6EC251224E711F087B2F571C4F9AE02.roa (hash: ixwNvaFcfk2na9cvy/T/P4B71LV0FaS6LsHWYtDlPXs=)
                          3: C766E398C0EE11EA94A1F146C4F9AE02.roa (hash: 4Kv7xQwln4PVRYcYiLH9p6kQ8sftutG3ICgl5f6YZnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233 (0x8b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
        Validity
            Not Before: Aug 10 18:45:38 2025 GMT
            Not After : Aug 17 18:45:38 2025 GMT
        Subject: CN=6898e8d2-8e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:fb:18:ba:cc:9c:a3:fe:ec:6e:a7:43:4e:
                    94:2b:06:ff:99:ab:8e:e6:5d:c4:29:6e:14:ff:28:
                    51:a2:cd:ef:dd:17:5e:7a:26:31:24:c2:cc:8a:2c:
                    4b:c2:a0:a2:d1:d7:e1:88:09:17:e1:10:39:fb:3b:
                    c4:26:14:ad:99:a4:61:4d:45:3b:59:17:64:e1:af:
                    bf:28:08:59:72:1f:6d:da:d8:b6:ca:c5:17:9a:d8:
                    23:33:ce:73:b3:8d:81:f4:a5:b9:cf:fd:2b:23:a8:
                    32:57:26:3f:5b:c4:10:15:5b:ae:da:d4:46:90:5c:
                    f7:c6:3b:1c:49:04:92:52:fb:ba:5d:d3:22:ec:8e:
                    d8:82:96:36:e2:3a:14:cb:e9:17:97:8c:de:2b:6a:
                    f3:5a:09:a0:af:03:9f:ba:3f:fb:5f:ea:fd:77:cb:
                    8d:3d:e3:81:83:f4:ea:18:e1:d6:d8:9f:3b:a9:ca:
                    4d:e9:a2:8a:ea:c2:f3:ce:8c:92:d5:ca:70:bb:96:
                    81:4f:50:8d:10:dd:7b:1f:ca:fd:75:6d:48:fd:38:
                    8e:19:55:1f:1b:15:6e:be:bc:d7:2f:ab:be:57:bd:
                    71:4c:53:e0:cb:88:fc:eb:39:19:06:d4:05:b6:d5:
                    68:01:5a:55:93:07:ec:8f:75:29:b1:50:82:ec:0c:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:18:0E:DE:C0:5F:F1:88:22:47:D6:39:A1:3D:43:58:94:1E:63:F3
            X509v3 Authority Key Identifier:
                keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:45:39:40:aa:2b:f8:97:2d:56:f5:3d:1a:c5:65:68:e4:54:
         61:c8:1d:2a:53:c0:b8:2c:75:52:79:c0:d2:1a:e8:f4:e3:3a:
         34:6f:d5:d2:c5:f7:34:81:06:f2:74:54:0c:b4:5b:a6:6a:e9:
         fe:91:05:fb:34:25:52:a9:44:63:6f:c9:7c:93:58:ca:71:70:
         62:d6:d6:bf:24:29:6d:01:e1:b6:5a:ed:87:cb:3a:a2:11:3a:
         85:5d:74:67:b1:a8:34:5a:73:1f:74:cb:57:12:68:ed:fd:0a:
         4b:0f:d5:b6:58:b3:f3:7a:25:ff:16:b4:80:a8:cc:5e:ac:42:
         7a:fb:2f:b0:4b:a4:de:d0:c4:d3:9f:b0:a5:98:a9:d6:44:a3:
         1e:26:9f:10:e5:ed:6f:b7:60:13:37:0d:57:92:57:3b:25:74:
         c5:13:cb:ff:6b:dd:93:c1:a5:0b:cd:2d:eb:45:dd:95:da:2c:
         2e:05:a6:77:67:92:bf:96:36:88:bc:5e:14:24:26:3f:b2:40:
         b9:7b:c5:c5:52:97:65:fd:ad:fa:e2:f7:3a:13:e3:b9:e7:4f:
         84:c5:00:11:26:a4:6e:f6:0e:95:d5:f0:73:a4:81:96:21:99:
         93:5e:c2:38:ba:87:5c:f3:27:67:74:c0:bd:b2:00:fe:1a:28:
         31:4e:9e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:39:30 2025 by rpki-client