Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
File:                     oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json)
Hash identifier:          w2joN26Yh7Y+SrxVC4j7AW9wUzzc7eEAT4V2Hw7EpEs=
Subject key identifier:   82:25:2C:5A:F9:4D:89:53:C1:3F:82:5D:DA:87:40:4D:44:CF:F3:85
Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99
Certificate issuer:       /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
Manifest number:          0175
Signing time:             Sat 09 Aug 2025 04:08:22 +0000
Manifest this update:     Sat 09 Aug 2025 04:08:22 +0000
Manifest next update:     Sat 16 Aug 2025 04:08:22 +0000
Files and hashes:         1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: 4GnvNeNRwftEg9jmKs0AOYgg5M5r5nafU2bQ2UqavB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl
                          rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399
        Validity
            Not Before: Aug  9 04:08:22 2025 GMT
            Not After : Aug 16 04:08:22 2025 GMT
        Subject: CN=6896c9b6-1126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:c4:fc:ed:ad:10:5d:55:1c:f1:37:92:62:
                    de:34:5f:12:da:89:30:50:17:fd:29:ab:26:cd:40:
                    0c:e4:09:be:ed:a8:8b:e6:61:57:47:16:cc:b3:19:
                    fd:e2:d0:02:1d:5e:c0:d8:40:ef:ab:1b:a3:bf:fe:
                    ee:4b:11:8c:77:e0:a5:74:0e:3d:66:06:2c:bf:53:
                    0b:59:6f:b5:29:0d:8f:6d:16:82:ef:5d:9a:5a:c9:
                    e9:0e:70:63:61:2b:87:79:98:9a:c2:7a:91:d9:7c:
                    8d:e5:d0:62:8b:8c:2e:1e:93:d9:f5:04:61:af:5e:
                    b3:7d:3e:07:a5:9c:a2:83:f4:b1:d5:41:b1:ff:5d:
                    85:c7:58:66:1f:27:ac:0a:86:83:2f:ac:da:86:9f:
                    97:b4:ac:3f:b0:ff:83:30:a1:28:f1:70:22:0f:ca:
                    d5:e1:46:d5:d6:af:ce:de:d8:08:3d:88:e4:43:e2:
                    b6:53:44:b4:4f:47:bb:23:af:60:c3:94:11:d5:c5:
                    b2:e3:ff:b7:28:77:59:70:41:13:84:25:fb:23:13:
                    44:1b:14:7c:4b:42:c0:c7:7a:79:48:b5:4b:f5:ce:
                    08:4a:b6:7c:1b:6c:31:cc:5f:96:07:54:9f:79:b7:
                    bf:88:4e:b4:52:46:f7:43:82:65:4b:cb:81:38:ab:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:2C:5A:F9:4D:89:53:C1:3F:82:5D:DA:87:40:4D:44:CF:F3:85
            X509v3 Authority Key Identifier:
                keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:96:0b:30:40:31:c7:88:70:e1:2c:c8:75:b0:ae:46:f8:c5:
         b4:5e:11:76:5a:52:63:89:af:c4:8f:4d:45:25:73:a7:81:ff:
         0d:a5:88:c5:ff:6a:3d:91:01:19:eb:57:dd:bf:7d:d7:26:4d:
         04:2e:e3:51:5f:e1:78:e4:fb:94:63:0b:76:1c:54:8b:ac:4e:
         fc:c2:6a:3f:8e:3e:c9:a9:34:b6:5b:a8:bd:a5:e9:be:db:7a:
         fc:63:71:ae:81:f8:1f:92:40:fc:1d:5e:cb:44:25:a4:ef:49:
         30:43:d1:64:8e:38:38:f7:7d:20:29:8c:53:6d:f8:d6:51:d1:
         51:db:c9:15:62:68:94:2f:2b:0b:1f:70:54:c7:45:47:3d:b3:
         10:94:bb:63:c0:12:0d:71:27:0e:0e:46:de:85:98:0a:34:c2:
         d4:75:5a:45:c2:97:1d:c3:d9:15:5a:ec:d9:db:73:eb:81:61:
         a7:26:25:ca:18:d9:51:8f:58:78:3b:b2:f6:99:b8:b0:88:c0:
         a6:0f:c0:f0:5b:91:14:aa:3a:c3:8c:66:82:f2:45:55:10:f7:
         35:21:e6:f0:1a:94:e5:1f:50:19:0d:96:32:4b:38:8f:a9:ba:
         6c:24:85:4f:7a:d2:49:ea:d8:b8:77:c7:c8:49:97:cf:70:03:
         d5:0e:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:49:17 2025 by rpki-client