Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
File:                     9ouGJos33oELlo2481f3c-mDv20.mft (raw, json)
Hash identifier:          ma1LQmhmHdRtecrn7aV8N3MMrIWKy/0E2OrnfAnTbDE=
Subject key identifier:   76:CF:06:C6:00:44:23:FA:2E:EF:8C:87:08:2F:56:31:A4:00:98:CD
Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D
Certificate issuer:       /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
Certificate serial:       0A90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
Manifest number:          0A80
Signing time:             Mon 16 Jun 2025 19:27:37 +0000
Manifest this update:     Mon 16 Jun 2025 19:27:37 +0000
Manifest next update:     Mon 23 Jun 2025 19:27:37 +0000
Files and hashes:         1: 9ouGJos33oELlo2481f3c-mDv20.crl (hash: nUc3udQZVab/Z2WapqufLugw0qLD0w1FVT4uZSdzmWU=)
                          2: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (hash: hPcGjX6pod1mQjVuO2fta8f52KKrIcQ5XI+2+yM8wXY=)
                          3: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (hash: FEaiMi5+ZViFMZcOI+52QVvWi5kkjXKoDrc8FS7/m2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl
                          rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 19:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2704 (0xa90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
        Validity
            Not Before: Jun 16 19:27:37 2025 GMT
            Not After : Jun 23 19:27:37 2025 GMT
        Subject: CN=68507029-89fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:12:1c:f9:dd:68:81:c5:2c:40:a0:6c:d3:
                    d6:f0:1a:46:00:77:19:d8:40:bc:e6:36:cc:13:08:
                    51:85:f2:b0:eb:c8:a1:b5:e3:1a:be:c7:ae:66:31:
                    b6:1a:59:2d:d6:82:d9:ac:68:d9:e9:f6:66:c9:fa:
                    f2:56:0f:cd:a1:cd:c0:94:68:2a:b3:81:7b:4a:22:
                    14:aa:53:37:26:29:d9:a7:23:ad:ac:74:2d:e5:3f:
                    6e:31:c0:c7:ec:0b:bf:0b:99:6b:e1:3a:f8:c1:e5:
                    71:dd:9b:96:6f:76:43:b5:6b:94:81:15:3b:b4:6b:
                    ab:5e:76:8d:74:ab:40:83:57:9d:c5:a7:cd:14:30:
                    e1:d9:fb:a8:06:fd:e3:6e:ae:4f:05:84:c2:fd:c8:
                    d8:64:f8:d3:eb:0d:2e:cb:5b:06:a6:d8:8f:76:14:
                    1c:db:58:12:cd:a8:d1:5f:4c:b0:00:32:03:28:ab:
                    2c:44:d8:18:68:ed:51:ed:67:f4:fc:7d:36:28:ed:
                    65:35:b2:99:11:34:da:68:44:55:0b:32:fd:81:fb:
                    80:ef:4d:8a:3b:f0:ef:e7:6e:67:f9:52:0f:35:91:
                    e4:9f:9c:5c:c7:a2:dc:c4:47:fb:36:73:84:76:34:
                    87:db:9f:d0:df:4c:7c:34:d7:7e:d5:94:81:38:5b:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:06:C6:00:44:23:FA:2E:EF:8C:87:08:2F:56:31:A4:00:98:CD
            X509v3 Authority Key Identifier:
                keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:be:a9:49:c4:e1:9e:b7:0b:06:23:44:23:ef:a8:ad:c7:
         f3:4d:45:66:d2:d1:89:34:c3:04:9c:21:19:d0:b7:ae:2a:5f:
         ca:ee:2e:7a:5f:76:ea:48:8a:ce:01:42:50:84:19:7a:c8:f8:
         b0:b2:a0:a1:62:c5:92:3b:9b:f4:68:1d:42:15:6f:94:38:41:
         be:18:9a:31:d1:69:f3:14:11:26:ad:03:5d:8e:33:af:8e:6d:
         27:ee:11:97:73:af:7c:67:f4:b5:93:7d:54:47:46:cf:f5:ce:
         e6:93:c5:04:57:ac:9c:c8:54:a0:09:f4:11:c8:f4:32:02:e5:
         29:f1:8b:12:20:d2:b0:2f:4e:63:41:58:58:f8:b1:7b:3e:f3:
         3d:a0:e6:34:79:5c:ee:a7:c0:80:e3:d8:b4:87:21:a4:75:39:
         74:69:f6:02:8e:7a:d5:e8:d6:9c:da:8f:5b:68:3b:b2:5b:ce:
         d3:0b:71:62:63:c0:61:54:a3:ab:2c:cf:97:77:77:89:12:4d:
         ca:4e:b7:8a:fb:76:91:52:0f:23:8b:a8:8e:c7:07:0d:87:b4:
         3a:33:b2:0c:ca:db:1b:a4:fa:28:57:cd:7c:d9:71:98:12:3a:
         f3:a1:e2:c7:49:24:9b:e1:33:84:44:cf:60:e6:1d:08:6b:f0:
         78:7d:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:37:46 2025 by rpki-client