Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          b7KtxPj0DIRUsICVBbaIh1GGG8bM0MTIl83GokS0SX8=
Subject key identifier:   3E:FC:F3:E4:A8:DB:F1:2B:C9:12:B5:0F:91:D5:19:F4:E5:77:F7:0D
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       07DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          07C6
Signing time:             Sat 02 Aug 2025 21:32:35 +0000
Manifest this update:     Sat 02 Aug 2025 21:32:35 +0000
Manifest next update:     Sat 09 Aug 2025 21:32:35 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: qRVcVjnPzkeKOyP/lgGD2lmyuav6evPrBYCzXAS5fmk=)
                          2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: VacwFfXxfWfasplgXF9A1AX11wCHDuK5XANfDyd18Pc=)
                          3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: nh4OlofqMh099kYvPNfjQ05/jiIH5vP8fVdEV6he48g=)
                          4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: KuZID6pq906VPDfvmGsN77h7hBvEwQX/7r+oBn+hpC0=)
                          5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: MChKj8CysBVpKBL1Yc5KnUgJyLD5UeDlW+DQqjWmTk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 21:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: Aug  2 21:32:35 2025 GMT
            Not After : Aug  9 21:32:35 2025 GMT
        Subject: CN=688e83f3-ad01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:15:05:06:f9:1e:29:e7:b0:a3:aa:af:9d:
                    cd:75:12:9f:fa:a2:0a:15:ca:6c:5e:55:a0:61:18:
                    5e:a3:a2:d4:fa:2f:94:82:a1:1b:9d:04:06:5d:57:
                    69:39:dc:28:9d:e6:24:08:69:c9:b1:59:a2:4c:52:
                    66:79:24:ed:19:86:74:3d:cd:fa:17:93:65:ec:0e:
                    75:fd:df:dd:49:63:63:6f:6a:4a:a1:89:7e:0c:68:
                    07:8c:87:3f:f3:35:c3:d5:21:1c:9e:6d:12:6b:af:
                    e4:8a:63:98:d7:bb:f0:d7:92:21:ba:6e:95:80:81:
                    2f:47:10:66:00:73:48:9f:b2:b2:39:d6:cb:3e:71:
                    05:02:c7:1e:ba:76:d8:dd:f2:38:de:ef:0d:80:ac:
                    d3:13:d0:42:33:35:23:cd:79:16:c8:33:98:f3:e9:
                    5d:30:4f:d0:51:e3:b0:22:c0:38:4b:d2:66:e3:c7:
                    62:bc:18:60:2b:eb:12:0a:51:fa:b3:53:f1:52:9c:
                    b4:29:af:c7:f0:cb:3f:50:9c:cf:b5:7b:25:14:77:
                    ac:7c:69:dc:2d:1a:17:a2:af:9b:21:10:f9:8f:52:
                    b5:46:c6:f2:94:cd:1e:50:a9:14:7f:93:21:43:e0:
                    c6:aa:aa:65:c9:0f:70:f8:65:7f:4c:c8:44:2f:97:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FC:F3:E4:A8:DB:F1:2B:C9:12:B5:0F:91:D5:19:F4:E5:77:F7:0D
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:67:4d:c7:6c:ad:41:16:af:02:99:5b:51:91:ca:65:63:
         16:8f:03:f4:c9:b2:50:8d:5b:30:ee:aa:07:7d:61:3e:b8:33:
         52:c5:d3:bb:1d:8e:09:f7:ea:cc:f4:72:78:93:7b:38:88:c0:
         e8:fb:f2:c3:c6:4d:f8:69:b4:c4:c5:43:71:ca:42:80:b7:7b:
         73:b3:02:1e:42:78:ae:bf:db:79:1e:f2:71:0d:e9:82:4f:7e:
         d4:f8:94:a3:f8:e8:ff:95:4b:8d:49:c1:25:e1:6a:2b:c9:7e:
         77:91:f0:0d:a3:74:7a:50:96:f1:f3:80:01:0e:4d:69:f1:03:
         3b:9c:da:53:8d:8d:5e:8e:6e:a5:32:c8:ad:b1:c7:2a:0f:d8:
         aa:5b:09:4f:9c:34:96:a2:41:3d:f0:fc:a6:53:e7:80:4f:fc:
         58:1d:1e:13:0a:e0:1b:58:7c:12:89:b3:bf:39:03:1d:07:6c:
         59:bb:c5:2c:14:28:23:9d:e1:1b:eb:aa:d6:7d:63:78:4f:4a:
         2c:89:31:6c:98:9e:f2:0c:ae:0c:bf:16:9c:1d:22:5e:d5:6e:
         55:f8:75:02:98:08:a8:5c:7c:38:a5:cf:3b:b9:0a:25:be:09:
         c8:00:c8:4d:b4:d2:e5:bf:db:8e:44:39:64:fd:67:c0:b7:c9:
         c4:8a:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 04:13:51 2025 by rpki-client