Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
File:                     OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json)
Hash identifier:          vxwAjYwuE1ayja1wO+CRtiE5o3To+SOqxyXMrdbjC5c=
Subject key identifier:   58:63:E1:AA:16:11:B6:64:E6:95:38:BD:1B:3E:85:D8:B0:9A:56:BA
Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
Certificate issuer:       /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
Manifest number:          EE
Signing time:             Thu 07 Aug 2025 05:49:07 +0000
Manifest this update:     Thu 07 Aug 2025 05:49:07 +0000
Manifest next update:     Thu 14 Aug 2025 05:49:07 +0000
Files and hashes:         1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: AkUORok5yenYMZrlrrpPFyMgUd0yOjqEbIuG9WYWU/Y=)
                          2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: g7/I1107TKCwjJnWd7arEQMGj8EBr7MRJOF1ZUaFXNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
                          rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
        Validity
            Not Before: Aug  7 05:49:07 2025 GMT
            Not After : Aug 14 05:49:07 2025 GMT
        Subject: CN=68943e53-fc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:0b:2d:43:b1:34:94:02:43:95:ee:61:c4:
                    22:a8:19:91:ae:65:96:31:0b:b0:89:98:07:91:d2:
                    aa:2e:87:48:ec:18:cc:da:8e:64:5b:94:27:4c:cf:
                    64:12:3b:6d:d6:c7:6a:b7:d3:59:56:37:f2:3d:b0:
                    ae:b7:49:cf:a0:a2:80:53:77:02:c6:71:0b:d1:f2:
                    9d:e8:a4:85:8a:c6:e1:9f:31:27:0b:82:4a:a1:00:
                    dc:a9:7d:19:0a:9b:8d:49:b1:62:de:8f:01:80:5b:
                    de:bd:16:bc:ac:57:c0:b6:be:7b:1f:a5:61:f6:56:
                    06:63:0f:08:ee:16:9d:da:25:c8:df:c0:b5:fc:18:
                    da:b1:de:e0:ed:8b:da:59:e8:c9:dd:d0:8b:ab:de:
                    6f:c2:e5:25:bc:bc:f6:c1:43:da:93:86:76:55:cd:
                    de:13:9d:b9:7b:b2:85:ba:01:19:ed:94:ee:d1:23:
                    3c:39:00:38:8b:f2:c8:7c:16:de:89:e2:49:97:3c:
                    37:fb:1b:7f:10:4d:1c:6b:e8:bf:f0:b5:5b:65:a5:
                    7d:1c:53:23:1b:4f:7c:ae:a3:ae:c1:9a:fc:97:5f:
                    aa:ef:2c:e1:71:25:c1:e4:83:fc:d6:f7:97:96:b5:
                    38:05:5c:51:2d:a7:9e:aa:68:ae:90:f4:df:64:11:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:E1:AA:16:11:B6:64:E6:95:38:BD:1B:3E:85:D8:B0:9A:56:BA
            X509v3 Authority Key Identifier:
                keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:e4:49:62:f6:30:ec:52:9a:aa:e8:10:c9:84:c5:c5:62:
         48:a4:23:37:b8:d6:be:66:bf:8c:70:72:e7:19:97:a9:53:27:
         20:32:d3:94:71:c8:58:2e:68:7c:aa:96:5b:55:e4:7d:be:65:
         0d:99:f8:3c:0d:02:ed:55:b1:84:f7:d1:86:a4:20:bf:8e:b5:
         15:b1:5b:c8:1e:3d:85:85:b3:47:e3:be:d1:8e:4d:b1:ab:ba:
         2c:a1:d3:94:b9:79:29:f9:8c:3d:07:f9:85:63:69:0a:17:b8:
         04:c6:5f:ce:e7:ae:71:4a:05:f8:d1:c7:e8:b4:94:56:a4:84:
         9e:bc:56:78:5b:8f:b5:c8:58:9e:8d:b8:90:b3:d2:2b:64:2e:
         ff:b2:3d:8f:28:5d:aa:a7:81:86:58:d1:ad:8b:c7:77:69:73:
         c3:cb:a2:d2:0b:7e:52:88:e0:ae:80:f8:f6:9c:46:3b:13:5a:
         58:9e:ef:41:10:63:ec:9d:41:50:88:2d:12:e0:5d:f5:4d:5a:
         20:ed:c4:26:74:bf:e8:f6:3c:2c:8d:37:fb:f4:31:43:eb:67:
         ca:32:ea:96:26:0e:51:6f:be:c8:b1:29:04:11:49:56:b9:24:
         cb:53:f5:e7:e8:d1:72:b9:77:c0:d5:de:a0:c4:b6:b8:4b:0d:
         c6:6c:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:13 2025 by rpki-client