Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
File:                     OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json)
Hash identifier:          Dr5t4Kk0oA25A6r9sdw4LfoZ4okJ2nDIX1POIE8ElzY=
Subject key identifier:   21:B6:6F:44:F1:55:1D:C0:3D:13:34:B0:53:F5:C3:59:05:ED:2B:AD
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       08E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
Manifest number:          08D8
Signing time:             Thu 12 Jun 2025 20:11:59 +0000
Manifest this update:     Thu 12 Jun 2025 20:11:59 +0000
Manifest next update:     Thu 19 Jun 2025 20:11:58 +0000
Files and hashes:         1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: SqfMqUFTFz9O5pE6CTMhWHv2OwfXJ6k4Lkkn5uffNLY=)
                          2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: OW9lsUV5oixQaepXd0o9wvP+ydFKTMRn+aOMtcrsIqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
                          rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: Jun 12 20:11:59 2025 GMT
            Not After : Jun 19 20:11:58 2025 GMT
        Subject: CN=684b348f-32b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:d3:b1:cb:d7:ee:8d:da:df:dc:b9:00:b1:
                    ec:59:42:58:71:28:70:1a:84:b3:40:54:f9:c1:d1:
                    6d:3c:95:29:81:bf:72:a0:7a:a5:b7:53:d2:9c:09:
                    5d:a9:30:6a:a5:55:a0:f8:cb:85:64:f3:9d:cb:0d:
                    48:30:a2:35:2b:db:a7:d3:b0:4b:a8:6f:90:a1:8b:
                    03:50:23:50:8b:71:39:e8:29:ea:85:e4:4a:01:fb:
                    81:b1:2e:82:8d:44:92:39:6e:62:16:90:f0:70:cc:
                    ca:25:9b:0b:7f:d0:dd:e1:64:f0:32:d8:3e:24:00:
                    36:77:e1:e4:10:85:a7:9c:84:b5:1c:19:c1:34:e6:
                    ef:0b:95:34:e5:80:77:75:8e:87:c2:0f:58:cd:f1:
                    2e:3e:e1:bd:24:6f:b7:17:c9:84:f4:40:a1:0f:59:
                    c3:e4:25:a1:26:1e:bf:36:3c:9c:65:87:d4:8d:9d:
                    fe:40:70:f2:d2:da:11:1e:5d:41:2f:01:e3:cc:36:
                    fa:fa:bc:6d:15:30:6c:37:5b:ac:6e:a2:6f:8f:f8:
                    98:6b:88:ff:b3:ec:3d:ef:2e:22:85:6f:af:80:57:
                    b7:14:8f:75:0e:6c:d0:b5:8a:7e:b4:8e:3d:47:dc:
                    e7:23:66:80:26:05:a4:e9:97:a7:f8:b0:d1:a7:dd:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B6:6F:44:F1:55:1D:C0:3D:13:34:B0:53:F5:C3:59:05:ED:2B:AD
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cb:6a:79:4d:5a:44:89:cd:dc:f3:5e:29:da:dd:79:4a:0d:
         56:5c:c9:4b:15:e3:75:32:49:67:72:0f:ef:d6:39:43:82:6a:
         88:ff:31:c2:9f:bd:9a:ed:07:51:ae:57:4d:2a:10:67:2c:39:
         7b:cd:a9:a0:09:87:ee:30:30:36:e9:20:f9:ce:a5:ce:11:09:
         41:79:35:65:d0:a8:fb:9c:bc:01:13:30:59:ee:ee:f7:26:30:
         b4:1d:4e:6f:27:e5:b6:d3:ad:f6:d2:06:82:95:b1:de:b9:7a:
         be:a6:53:da:3c:64:80:c7:43:ce:5e:e6:ca:58:63:fd:8f:a7:
         66:14:26:2c:cc:8f:c8:04:f8:3d:27:c4:91:4a:0a:42:95:17:
         8e:b5:99:e1:c0:38:eb:fb:b0:0c:49:d9:fd:0f:0b:3f:28:84:
         83:68:b1:f3:68:69:18:9d:de:2e:47:00:e9:f9:d9:ad:e7:5d:
         c9:a2:9e:68:d8:60:23:77:7a:38:f4:9d:26:55:09:6f:03:89:
         81:cd:d2:5a:35:c6:af:e1:ba:9b:13:d4:e7:dc:25:af:b9:99:
         4c:be:08:8a:28:28:53:95:de:ed:54:82:b4:bb:95:0e:37:96:
         87:61:d8:22:e3:9a:0b:ca:d9:63:d2:b1:a2:e3:cc:b1:98:9e:
         24:00:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:37:19 2025 by rpki-client