Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          rC4ZSgwRk5Ezg/oHiPmpYp7CImBoyD8n0A8navWAZvU=
Subject key identifier:   85:FD:EB:66:17:92:5E:42:DE:AA:A9:05:5E:9B:42:89:75:9A:9D:17
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       07AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          0794
Signing time:             Thu 24 Apr 2025 21:10:21 +0000
Manifest this update:     Thu 24 Apr 2025 21:10:21 +0000
Manifest next update:     Thu 01 May 2025 21:10:21 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: rzLqZ/u/cuhFjvnKsnkDh1BHhhft/i2CsENypBjhHCg=)
                          2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: VacwFfXxfWfasplgXF9A1AX11wCHDuK5XANfDyd18Pc=)
                          3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: nh4OlofqMh099kYvPNfjQ05/jiIH5vP8fVdEV6he48g=)
                          4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: KuZID6pq906VPDfvmGsN77h7hBvEwQX/7r+oBn+hpC0=)
                          5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: MChKj8CysBVpKBL1Yc5KnUgJyLD5UeDlW+DQqjWmTk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: Apr 24 21:10:21 2025 GMT
            Not After : May  1 21:10:21 2025 GMT
        Subject: CN=680aa8bd-948e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:73:ed:88:e2:8a:a0:ff:7b:e8:87:ef:c7:
                    37:e6:40:51:95:4f:c0:a0:40:2d:94:4f:fe:ed:77:
                    04:ec:ca:4b:09:5d:6b:2a:14:79:34:aa:b1:4b:db:
                    0e:b7:cc:f7:41:8f:8f:97:f9:88:1e:3d:50:64:2e:
                    14:88:f4:00:af:db:01:37:cc:b0:a4:76:b2:1a:f9:
                    b8:fd:93:80:fd:85:60:30:c7:b1:cb:0b:5d:6a:3d:
                    db:d1:6f:ee:3c:3b:5f:7c:03:10:4e:e9:30:04:c1:
                    08:6f:3b:c8:51:14:40:c4:ca:86:bd:ab:7a:0a:a8:
                    7e:54:38:46:1d:1b:23:19:3d:57:c1:e3:c0:90:02:
                    59:5c:34:49:fc:1e:28:06:e1:21:29:38:b6:f0:6e:
                    50:03:0a:19:8d:a5:82:4c:17:07:e6:19:b6:7e:5e:
                    38:79:45:cc:3e:79:0a:54:41:e8:32:ca:9c:b0:3c:
                    3c:cb:3d:6d:b9:e4:f6:7e:e8:06:58:c4:07:00:58:
                    f3:b1:d0:d6:a4:3d:a2:73:49:16:d5:81:63:9b:7f:
                    7e:e2:79:15:2d:39:10:2e:f1:e6:72:17:ae:d4:b5:
                    be:d8:59:c3:78:d3:f9:f4:3a:34:18:68:b4:1c:eb:
                    fe:62:05:ea:4c:42:6f:45:fa:3f:28:53:35:78:78:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:EB:66:17:92:5E:42:DE:AA:A9:05:5E:9B:42:89:75:9A:9D:17
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:fe:09:fb:a3:d6:7d:7b:1a:0f:37:a6:1e:cc:b8:38:5e:
         5e:d1:b0:88:84:0d:78:5a:90:3b:99:09:22:a4:1b:90:e0:9f:
         38:b0:72:64:25:ea:8b:0e:1b:34:a0:28:71:bb:b0:c7:2d:5c:
         c1:62:06:b3:0d:77:3f:41:1e:b0:f1:f2:a4:40:cd:66:a3:83:
         bf:65:4e:5b:a1:78:62:08:6e:ef:1a:24:16:c2:d7:68:73:a1:
         64:76:43:0d:df:ac:ad:d3:4e:cd:9b:a6:fb:a0:4b:c0:49:ee:
         1a:47:d6:b7:ad:41:89:3a:be:08:90:05:fb:b6:be:17:3d:ea:
         6c:ab:0c:9f:0c:d5:11:eb:8a:0d:48:5b:da:82:70:91:e7:8a:
         d3:b4:89:c8:29:08:4d:9e:a0:a4:34:8b:0f:85:dc:f8:09:67:
         ae:94:39:e1:86:12:e3:56:12:3a:64:ae:f3:46:9c:ae:9f:a0:
         b8:c0:7b:20:b7:a4:53:0f:e9:5f:fd:b9:99:16:fd:b2:14:c4:
         03:ec:08:f4:68:41:4e:2b:72:fa:f5:e0:97:b7:0e:38:b5:0d:
         2a:1f:fe:61:bf:c6:4b:70:12:04:7a:cd:f6:9c:76:58:29:6b:
         38:d0:f4:77:9c:dd:2f:b5:6a:4a:63:da:56:2e:ec:3c:5c:ba:
         89:fc:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:34:51 2025 by rpki-client