Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
File:                     OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json)
Hash identifier:          6u3Dn1R3ik2lZB5ObyNMCMOqGUNQbB1scNTyPwkTZxk=
Subject key identifier:   59:A6:FF:39:D7:34:95:6D:B7:58:80:33:58:41:0F:49:CA:7F:20:DA
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0CD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
Manifest number:          0CA7
Signing time:             Fri 08 Aug 2025 18:30:16 +0000
Manifest this update:     Fri 08 Aug 2025 18:30:16 +0000
Manifest next update:     Fri 15 Aug 2025 18:30:16 +0000
Files and hashes:         1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: 7Osru5RBurpI/HYrlDNz3+lB2OYU3e/c35BNEDvNYr0=)
                          2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: TeIPGyGqDRDL84HA9NnAzVJOOMFf2EjmrKH/elumev8=)
                          3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: lRMtWT21HxefR8cIAkbesXguaIjwdfIuBa6XccIOgBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3284 (0xcd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Aug  8 18:30:16 2025 GMT
            Not After : Aug 15 18:30:16 2025 GMT
        Subject: CN=68964238-8d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:a5:8d:ff:a6:e9:98:d7:2c:74:a8:41:24:
                    ea:cf:cb:bd:56:d5:52:e3:f0:5a:db:b6:c7:ac:52:
                    c1:17:e3:0c:ce:28:a4:c1:2e:47:c5:18:10:1e:8a:
                    14:fa:99:10:72:85:bf:09:5f:f4:96:f2:b0:06:90:
                    97:76:1b:c2:a6:2e:99:01:6e:ea:a2:f3:0a:18:e0:
                    47:81:9e:e0:48:ba:24:7e:1f:76:73:8f:95:22:e1:
                    4d:a0:16:17:2b:eb:4e:29:fc:b3:70:ed:c1:24:86:
                    04:4a:05:04:01:72:a0:04:2a:18:fe:1a:f8:e2:0c:
                    ba:03:d1:87:bb:36:35:4b:60:a8:d0:54:1c:e0:ee:
                    e3:62:8c:92:10:58:53:8a:6c:fd:5a:cb:42:4f:05:
                    c8:49:9c:f5:b1:0f:e2:6c:f3:f9:73:8d:64:4d:81:
                    ea:43:9b:bb:6b:76:3e:61:06:fb:13:e8:2b:14:63:
                    e2:e8:82:87:ee:b6:b6:c6:85:aa:a7:26:97:d2:cc:
                    a7:4e:04:72:a5:6b:89:c1:fb:a4:de:ab:0f:df:02:
                    78:7b:6b:6d:66:1f:d3:68:a6:5d:86:4e:1e:b6:e8:
                    0e:f0:eb:67:64:ef:c3:ee:42:b8:97:5b:d1:25:0c:
                    95:87:b9:69:55:e2:7e:88:d9:3c:cc:cd:de:49:f9:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A6:FF:39:D7:34:95:6D:B7:58:80:33:58:41:0F:49:CA:7F:20:DA
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8c:6a:d4:1b:33:e4:01:6e:16:c7:67:00:d7:27:67:9c:e6:
         09:e9:85:55:23:f0:2b:1d:31:a9:70:6d:5d:63:d1:a1:bc:ac:
         76:b3:46:39:19:95:85:a1:de:10:8a:8d:e8:55:7b:7c:f4:9d:
         ed:b4:24:8d:7e:ce:8d:b8:84:80:13:68:e0:49:af:d0:9d:3d:
         bc:ed:e0:47:fb:a0:ec:bc:51:09:f6:8f:3d:5d:01:ec:22:e1:
         f4:30:79:c2:9c:a2:8c:a7:fc:46:f7:9a:9a:ca:f9:88:20:9b:
         b6:b0:02:b3:78:13:e6:4f:78:90:37:a0:b8:56:5f:c8:f6:a7:
         99:27:72:b6:32:b0:1f:6b:d6:c9:3d:f1:63:f7:43:3a:0d:dd:
         f5:1e:23:6e:31:59:99:dc:2b:03:47:d6:74:b4:97:c8:60:d0:
         94:3d:56:6d:51:40:54:86:b3:60:a8:dc:ca:31:d5:b7:69:e9:
         3e:05:f4:88:d8:f2:d6:a3:9a:40:b4:ff:6d:e4:43:5a:43:48:
         52:70:32:6d:d2:f4:9a:b2:1b:53:e5:e2:69:b9:9e:85:12:f3:
         ec:f8:46:52:9d:80:fc:56:6a:ee:f3:51:78:b6:95:41:96:89:
         d3:2c:28:bf:35:8f:6a:41:b9:bd:ca:6c:2c:88:18:4a:41:c8:
         77:f7:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:05 2025 by rpki-client