Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File:                     OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier:          hz40V9nncQLG1YN29S1jXGy6hweovfu7kxlBZIlGs7s=
Subject key identifier:   11:E2:5C:E5:48:17:9C:89:9D:5C:70:DC:9A:A7:E0:31:6C:AC:FA:A0
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer:       /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number:          C9
Signing time:             Thu 19 Jun 2025 05:05:42 +0000
Manifest this update:     Thu 19 Jun 2025 05:05:41 +0000
Manifest next update:     Thu 26 Jun 2025 05:05:41 +0000
Files and hashes:         1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: gzwnww1h8ZRod0gEyy/zmBw4xNaEyFtXliXWbKCCLo4=)
                          2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: TR/9w+oCqGCqjfN5wK6VX8rAdbT3DnBKMOm4/b1iJZA=)
                          3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: y9ipesVJF6530t8WVs2qEr0X7RGO4yWHPQGA3YKJeHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
                          rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
        Validity
            Not Before: Jun 19 05:05:41 2025 GMT
            Not After : Jun 26 05:05:41 2025 GMT
        Subject: CN=68539aa6-aae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:8d:9b:37:f2:9a:be:46:71:d1:14:d7:bc:
                    d5:ae:81:57:85:82:f2:64:e7:35:15:b5:d9:d6:8f:
                    bd:5a:06:c8:fd:98:bb:ec:b1:30:ff:24:1b:24:e7:
                    2d:5f:6b:cc:97:34:f1:66:7a:ad:47:df:d6:95:2f:
                    95:56:0f:75:31:23:f4:7a:68:e1:20:4f:6e:ce:2b:
                    44:46:f5:70:80:5b:53:e5:39:5b:d8:0b:e9:9c:6d:
                    f9:9c:1d:53:61:1b:86:b3:f3:70:5c:85:7e:13:7b:
                    11:fc:bb:21:7c:84:51:be:37:d4:4d:32:8d:c6:40:
                    56:8d:1a:d3:82:ce:59:de:5b:56:44:1d:28:4c:9f:
                    6d:a3:5e:3d:96:a6:4c:f0:27:27:20:94:47:11:d2:
                    c7:8b:89:bd:6e:e5:34:25:10:ae:5d:1a:20:63:04:
                    ac:91:ac:fa:73:f7:7d:8b:49:88:a6:d3:b5:17:5f:
                    c5:98:e6:9d:52:47:8d:d4:f7:aa:0d:34:76:f9:fb:
                    bc:0c:79:cf:fe:bc:47:19:aa:b9:55:65:29:68:c0:
                    3b:eb:ab:3d:70:3a:41:55:c9:74:6c:42:00:13:ef:
                    30:eb:f1:88:02:b2:24:71:dd:51:0e:59:3d:74:2d:
                    92:18:73:d0:c3:5c:22:56:96:9b:6b:6e:78:1e:89:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:5C:E5:48:17:9C:89:9D:5C:70:DC:9A:A7:E0:31:6C:AC:FA:A0
            X509v3 Authority Key Identifier:
                keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b7:8b:3c:55:89:45:72:62:0e:b4:2a:38:cd:e1:7f:c5:a9:
         8a:93:00:aa:7d:ad:2a:35:e1:35:6a:9b:d4:b7:59:37:5b:4e:
         7a:50:6d:21:17:fd:d7:18:44:0c:ea:f5:a1:d8:2b:10:f7:21:
         a6:87:e4:77:f3:a3:4d:ba:c9:7d:a2:0f:3a:85:66:da:99:71:
         bb:1e:df:d5:40:c4:c8:b7:cb:eb:1f:8d:3f:97:d2:ef:84:7c:
         9d:dc:16:99:e7:f0:e5:1f:d5:60:ae:58:5d:c6:4f:f8:ee:6b:
         f3:3c:cb:e5:9a:8f:97:23:03:90:54:ce:81:38:bf:11:17:dd:
         49:10:7e:cd:7b:ca:56:b0:8a:3e:97:4c:3b:5e:c4:68:d8:48:
         90:86:c4:c2:86:4c:b4:67:6c:78:71:18:03:41:97:21:49:51:
         0f:f5:c6:38:09:e5:cc:81:ad:bf:98:6a:ae:de:57:51:e8:c2:
         53:8e:75:6a:c1:fc:b9:2d:bc:f6:45:ce:e5:80:08:03:36:a6:
         74:36:af:f8:b5:99:7c:2b:15:75:52:72:1c:09:88:82:39:34:
         34:65:cb:bf:91:02:61:ac:8d:9c:cc:55:f4:4e:e3:81:4c:9b:
         55:47:eb:59:fe:b8:0b:01:04:88:7e:4e:0e:be:4a:98:3c:c6:
         f9:c6:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:56:02 2025 by rpki-client