Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
File:                     O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json)
Hash identifier:          SqlhVZNYKtgDrb33QN06ST4Gz9kAhv1xmg2l0FjU8kw=
Subject key identifier:   A9:86:43:D4:6C:70:17:CC:33:A9:6A:6C:89:59:12:4F:9D:DC:BD:91
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Certificate issuer:       /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial:       06FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
Manifest number:          06F6
Signing time:             Wed 14 May 2025 22:02:20 +0000
Manifest this update:     Wed 14 May 2025 22:02:20 +0000
Manifest next update:     Wed 21 May 2025 22:02:19 +0000
Files and hashes:         1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: pNsxbd1ROfBk8HdNoxROcythXEcg4rlM9afiCitaPpA=)
                          2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: WiTy8cm0FJ/aEESc91vlgZl0JT8P/pFPtZ2Ry9TBveA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
                          rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
        Validity
            Not Before: May 14 22:02:20 2025 GMT
            Not After : May 21 22:02:19 2025 GMT
        Subject: CN=682512ec-4b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:d5:19:3b:bc:1a:45:85:1d:8a:95:0a:39:
                    3d:46:73:9f:b5:57:1c:d1:a9:ef:d7:7a:7e:41:1a:
                    25:6c:0c:f5:e1:82:e3:c4:b6:49:c8:97:8d:7c:10:
                    09:6e:98:87:0d:d5:0e:9d:fc:12:01:d4:5e:c1:4f:
                    16:54:83:ee:23:6d:0c:08:ef:3c:0e:f5:0f:85:e5:
                    4f:06:82:32:4c:34:bf:bc:3b:d3:27:f0:83:9b:e4:
                    ab:a1:35:bb:80:9a:a3:5f:0c:07:ee:fc:80:35:31:
                    b5:b8:31:01:c8:8c:a5:ec:c4:8d:78:b0:fc:3f:e9:
                    65:8b:b1:b1:60:a5:93:05:00:9f:07:ce:ff:e9:4e:
                    6e:b3:da:bf:5d:1b:f2:74:97:f1:cc:c3:f8:8e:00:
                    17:b8:a7:88:ea:3b:a0:d1:9d:00:85:cc:70:0b:32:
                    67:73:8c:25:2b:73:ff:0a:3d:09:61:11:c8:d6:8e:
                    9d:60:09:5b:4c:a9:9e:bb:24:6b:b9:02:f2:a1:32:
                    7e:17:12:6b:56:82:21:c4:7f:7d:ee:e9:65:76:5d:
                    f7:f8:5f:c1:8b:9a:88:c2:2b:ff:af:90:f2:82:2a:
                    7d:b8:7c:31:3a:92:52:1e:ac:74:65:a5:23:fc:5f:
                    4a:44:fc:63:35:a1:3a:7a:4d:ba:51:e4:62:aa:4c:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:86:43:D4:6C:70:17:CC:33:A9:6A:6C:89:59:12:4F:9D:DC:BD:91
            X509v3 Authority Key Identifier:
                keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:98:95:68:67:bb:05:97:b0:bd:20:9c:24:78:88:e2:9b:6e:
         ce:95:2a:bd:ab:c6:9f:8c:c5:c2:4e:5c:ea:63:60:ed:7f:5f:
         98:c4:74:71:23:3d:e4:a7:6f:67:ec:7d:14:52:62:5c:3c:ff:
         fa:63:2b:b2:0c:0d:c4:ab:2d:cd:aa:34:d5:3b:b2:ea:93:18:
         f1:f6:22:73:ab:b9:2c:45:ad:58:52:36:d4:9f:d7:e3:d8:a9:
         1a:40:7e:ee:57:8e:65:83:2e:44:95:0d:31:d9:1d:c3:cb:00:
         6e:b7:fd:22:df:7b:c6:5d:e9:f0:92:4b:b8:c0:de:e5:d8:83:
         4d:0b:06:3b:a1:56:7d:db:d5:a5:60:9a:19:18:66:ee:52:f0:
         85:47:85:25:12:a0:78:a1:eb:e8:ab:9c:57:98:55:eb:86:9a:
         96:fb:c3:84:20:26:a7:d8:85:f7:35:83:9b:b9:d4:77:7f:36:
         50:dc:eb:b8:09:ba:f2:17:37:b6:c4:62:a9:b8:d5:4b:01:bc:
         47:4d:b5:bd:6f:07:69:3d:ff:78:62:41:4b:99:b1:e8:af:15:
         12:2a:db:eb:89:d5:55:de:99:8b:7e:4d:1d:d8:b0:4f:40:d5:
         c5:ff:26:86:05:97:42:31:de:9c:69:60:3e:3d:f7:d2:bf:05:
         6c:b0:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:59:04 2025 by rpki-client