Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File:                     Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier:          MDw3ey9IUgeiq/d8RVc8jJzZ8Ccp6Ic0cbYb0u3iWm0=
Subject key identifier:   AD:DF:C9:3B:5F:7F:E5:0D:78:54:39:6F:2E:61:8E:F8:D1:58:0E:E2
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number:          89
Signing time:             Sat 09 Aug 2025 07:02:10 +0000
Manifest this update:     Sat 09 Aug 2025 07:02:10 +0000
Manifest next update:     Sat 16 Aug 2025 07:02:10 +0000
Files and hashes:         1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: AVvuMs4faCf3/y33V9qLljHw6rvBQntG487/BLNi4uY=)
                          2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: Aug  9 07:02:10 2025 GMT
            Not After : Aug 16 07:02:10 2025 GMT
        Subject: CN=6896f272-9ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:d9:54:ea:77:4f:de:0f:8e:13:22:48:bd:
                    b1:fe:88:8a:5f:40:b2:54:c5:9b:d4:4f:3b:1b:54:
                    a9:da:6c:a4:1c:71:eb:5e:5b:dc:7b:01:6c:a8:96:
                    05:0b:70:9b:17:cb:57:e4:59:5f:80:92:89:fb:df:
                    df:5c:d7:e2:bf:5c:26:f0:37:56:a3:e6:d0:09:e4:
                    ff:40:bc:e0:02:16:5b:76:27:f0:a5:27:c4:15:bb:
                    00:6a:3b:43:7f:7b:01:95:07:48:80:fc:6a:18:cb:
                    d2:95:24:38:41:05:4b:f4:e1:0a:37:ff:f1:72:84:
                    bc:1c:00:c6:e9:43:64:ea:a1:89:c1:d2:5b:21:bd:
                    20:f6:84:f0:94:f4:fd:61:c6:3a:9a:ae:5a:8e:45:
                    b6:75:25:97:ee:0a:22:c0:a6:a7:de:da:ac:07:11:
                    95:63:f5:f0:78:b9:ec:fc:e4:44:be:3f:be:df:d7:
                    be:09:4a:ac:8e:a0:f2:40:d8:af:82:8e:0f:d6:62:
                    dd:ee:1a:fb:b5:3a:45:eb:db:2a:ad:71:ba:92:ad:
                    33:cb:52:f0:e0:75:dc:8e:cf:fb:ec:6f:bb:2f:e1:
                    7b:b4:bb:f4:83:20:a5:cf:3b:55:1f:02:16:09:46:
                    85:77:e1:8b:b3:43:d7:ee:ca:61:e5:da:cc:be:5e:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DF:C9:3B:5F:7F:E5:0D:78:54:39:6F:2E:61:8E:F8:D1:58:0E:E2
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:cc:1f:18:f6:67:23:32:ee:a2:be:de:68:a6:88:48:ab:
         86:a0:30:a6:7f:57:45:41:ff:9f:84:46:1e:17:b8:2f:b3:83:
         2b:32:d1:cf:10:71:c5:20:8e:13:6a:23:b6:21:8f:77:af:c3:
         cd:13:a5:9f:92:a9:5b:ac:e2:d7:4d:7b:e7:05:57:03:a5:8a:
         fc:fd:5a:7f:21:e5:ad:dd:f7:26:6a:46:38:6b:d6:a0:4a:8e:
         d4:4a:ec:c9:1d:46:b2:60:cd:de:1c:02:4d:d9:7d:7e:91:6a:
         61:67:ce:fd:75:a7:4c:40:dd:6f:db:97:b7:d9:c1:b3:59:29:
         17:29:dd:83:d0:5c:39:3c:aa:a5:42:5e:a2:b9:8a:87:8a:4d:
         86:9c:8a:6c:42:39:ab:5c:9b:70:e1:a9:13:6c:15:6d:51:c4:
         27:3d:8f:45:22:ad:9c:a4:50:8a:16:d6:8f:e0:c2:a2:7f:4e:
         0d:db:5c:70:cf:8a:e2:78:13:66:f4:47:23:cd:fe:39:a4:a5:
         e6:75:98:4a:9c:db:25:9e:1a:b7:de:02:d1:5a:89:87:b0:db:
         65:ae:ab:64:2d:fe:ca:16:99:c6:d3:a0:43:1b:b2:bc:b0:9a:
         92:5a:af:f7:ec:3c:f3:54:0d:72:60:a6:37:bd:ea:e5:19:b6:
         da:a1:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:19 2025 by rpki-client