Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File:                     8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier:          DyHO9Dqz/3Ha01CUjRju3JxHh6pK04UlMA0bo9uMjNs=
Subject key identifier:   9D:19:B5:B5:84:0A:FF:AC:D9:AE:56:E0:0C:2F:FE:9B:48:74:E3:21
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer:       /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial:       098A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number:          097F
Signing time:             Fri 08 Aug 2025 20:27:37 +0000
Manifest this update:     Fri 08 Aug 2025 20:27:37 +0000
Manifest next update:     Fri 15 Aug 2025 20:27:37 +0000
Files and hashes:         1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: KnPSXRscow8BB2sv9LWNImrSdAeirZcpl78fVDMvAdA=)
                          2: 81FC4E285E4211F086D4C383C4F9AE02.roa (hash: Mf2+h64oIkKVCrmHAT8VYLEu5usAeOj24IncTZPlL1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
                          rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
        Validity
            Not Before: Aug  8 20:27:37 2025 GMT
            Not After : Aug 15 20:27:37 2025 GMT
        Subject: CN=68965db9-bffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:82:88:32:b6:68:36:43:7f:9e:9d:d8:d0:c2:
                    04:10:6c:ae:33:94:81:9c:3e:22:90:e4:47:80:08:
                    34:56:11:54:f7:2f:8c:0c:56:21:43:6d:63:d7:cb:
                    2f:5d:2e:72:39:bd:72:cf:25:d6:f0:71:cb:20:96:
                    49:d4:4f:a6:4b:1d:20:6a:24:f7:c4:f6:de:92:89:
                    92:54:c3:35:ce:b0:49:ba:ce:76:9e:31:5a:56:26:
                    bb:0f:cb:f2:8f:cd:66:90:3f:b4:0f:23:09:7c:d5:
                    e0:38:f7:63:cf:c7:3a:06:84:c8:bc:a0:0d:2d:58:
                    89:97:c2:1f:49:27:1d:4e:91:c8:b7:06:18:13:30:
                    05:4a:81:26:d6:00:38:93:ee:5c:f0:8f:b4:83:53:
                    5c:37:8f:85:bb:0a:b7:63:4d:51:02:ba:a7:f8:01:
                    3e:46:07:52:31:40:db:25:1c:30:cc:d0:a6:bf:c2:
                    89:a9:4a:25:30:2e:f2:4a:9f:93:85:a9:bf:56:98:
                    a2:00:1e:58:27:d5:bf:a4:e7:46:36:81:ae:91:79:
                    b0:6d:76:c3:7c:d8:4a:74:68:a3:f8:8a:a1:bb:52:
                    1c:0a:25:72:03:a0:9a:f8:72:9c:80:aa:fe:bd:21:
                    a8:4e:a3:31:19:2b:55:29:1e:65:56:81:00:9f:54:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:19:B5:B5:84:0A:FF:AC:D9:AE:56:E0:0C:2F:FE:9B:48:74:E3:21
            X509v3 Authority Key Identifier:
                keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:65:24:ad:aa:79:1b:50:41:7c:c4:b1:b0:08:1b:7a:86:60:
         73:68:7f:4e:db:c1:7d:b5:03:19:b0:0e:4b:58:af:fd:0c:36:
         3b:72:a9:de:7e:4f:b8:57:c9:d1:d7:9f:9f:60:3c:41:c1:46:
         97:8f:06:fc:3e:5c:05:a5:94:5b:a3:5c:d5:12:6e:ef:76:40:
         d1:be:f2:4a:ed:7f:37:eb:79:64:33:62:12:66:a7:fe:b7:03:
         12:50:bd:0c:ae:11:72:37:b5:87:f3:b4:17:b4:13:c6:f4:2e:
         8d:9b:a2:e6:b4:70:e1:6b:90:7f:0b:f4:17:b1:54:5c:6e:8a:
         e9:14:38:d8:39:93:1b:a4:67:56:85:4c:31:b8:f8:dc:7a:16:
         19:b6:7b:78:63:93:bb:f2:8d:cf:ae:63:e8:2b:0a:fe:41:98:
         56:0d:ce:67:af:76:6e:c8:cb:32:57:bf:4e:1a:b9:39:6f:1e:
         3b:51:24:ab:cb:6d:b3:93:1a:28:a4:d7:22:19:34:bd:b9:8f:
         8f:c0:c6:84:a5:95:f8:03:a6:65:24:a7:ae:84:92:5f:57:a7:
         58:d7:4c:85:d1:90:eb:e8:42:f0:72:9e:e2:75:1a:f8:79:cd:
         9e:e5:66:22:9c:67:00:71:59:47:76:0e:1e:3c:28:86:36:a4:
         a7:8a:e7:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYzOEQxMTAvBgNVBAUTKEYwRTc2NkZCMzE5MjI0ODIzQ0E3OUQzNjcyMEM1MUVE
RkNBRENGRTYwHhcNMjUwODA4MjAyNzM3WhcNMjUwODE1MjAyNzM3WjAYMRYwFAYD
VQQDEw02ODk2NWRiOS1iZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1YKIMrZoNkN/np3Y0MIEEGyuM5SBnD4ikORHgAg0VhFU9y+MDFYhQ21j18sv
XS5yOb1yzyXW8HHLIJZJ1E+mSx0gaiT3xPbekomSVMM1zrBJus52njFaVia7D8vy
j81mkD+0DyMJfNXgOPdjz8c6BoTIvKANLViJl8IfSScdTpHItwYYEzAFSoEm1gA4
k+5c8I+0g1NcN4+Fuwq3Y01RArqn+AE+RgdSMUDbJRwwzNCmv8KJqUolMC7ySp+T
ham/VpiiAB5YJ9W/pOdGNoGukXmwbXbDfNhKdGij+Iqhu1IcCiVyA6Ca+HKcgKr+
vSGoTqMxGStVKR5lVoEAn1Q2MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0ZtbWE
Cv+s2a5W4Awv/ptIdOMhMB8GA1UdIwQYMBaAFPDnZvsxkiSCPKedNnIMUe38rc/m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjM4RC8wMjU5QjYxRTk3
QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJSThwNTAyY2d4UjdmeXR6
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhPZG0tekdTSklJOHA1MDJjZ3hSN2Z5dHotWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjM4RC8wMjU5QjYxRTk3QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJ
SThwNTAyY2d4UjdmeXR6LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMZSStqnkbUEF8xLGwCBt6hmBzaH9O28F9tQMZsA5LWK/9DDY7cqne
fk+4V8nR15+fYDxBwUaXjwb8PlwFpZRbo1zVEm7vdkDRvvJK7X8363lkM2ISZqf+
twMSUL0MrhFyN7WH87QXtBPG9C6Nm6LmtHDha5B/C/QXsVRcborpFDjYOZMbpGdW
hUwxuPjcehYZtnt4Y5O78o3PrmPoKwr+QZhWDc5nr3ZuyMsyV79OGrk5bx47USSr
y22zkxoopNciGTS9uY+PwMaEpZX4A6ZlJKeuhJJfV6dY10yF0ZDr6ELwcp7idRr4
ec2e5WYinGcAcVlHdg4ePCiGNqSniucI
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:25:53 2025 by rpki-client