Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier:          LCl3LWr1HCjv2GU9bq4KSy9sbVy0hrol/wCQ3uCjvIE=
Subject key identifier:   EC:51:F7:2F:B7:E7:1B:25:29:EC:3D:FC:63:CB:61:45:30:80:8F:33
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       0303
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number:          02D9
Signing time:             Sat 23 Aug 2025 01:41:55 +0000
Manifest this update:     Sat 23 Aug 2025 01:41:54 +0000
Manifest next update:     Sat 30 Aug 2025 01:41:54 +0000
Files and hashes:         1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: MQ7h8jhNOGxk1Q0nw2fJF9Qtg+fd/NXF3sv4o7yvk2I=)
                          2: C7C081641C2411F0AAC7CA1EC4F9AE02.roa (hash: XydeZPWKtG1etOuPzQDEhVL2WYamD3gJgaFCyMqQRnA=)
                          3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: pVHrgOFKFC07D4oFMxsUE21iWBEjMFIznwU/76ruSbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: Aug 23 01:41:54 2025 GMT
            Not After : Aug 30 01:41:54 2025 GMT
        Subject: CN=68a91c62-2fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:79:a1:d5:98:ae:1d:09:09:8c:18:e1:79:
                    51:f4:91:2f:f3:e9:70:d1:39:fd:c4:61:10:06:b9:
                    9f:b4:23:d1:bf:c2:54:32:b6:26:da:e2:0d:4f:e5:
                    cd:d0:50:85:52:be:c1:fd:26:4f:60:0c:3e:a8:6d:
                    5d:22:d7:f6:33:7f:b4:2d:6c:f3:41:54:de:67:40:
                    15:3d:c7:ff:76:95:bd:7e:47:09:37:be:f6:20:ae:
                    fb:60:c5:5b:22:3d:74:9b:c9:8b:f5:83:c1:17:e7:
                    6a:b8:52:23:6a:6d:b2:fa:74:18:41:55:8f:41:78:
                    b4:65:a8:f8:66:96:6c:2f:62:07:05:74:8a:51:65:
                    a2:26:f1:28:8c:f1:e8:6a:05:7c:56:ae:d2:0c:14:
                    c4:32:f6:45:a5:8c:32:3d:6c:38:b9:00:37:78:7d:
                    f6:ef:b8:c6:fc:be:14:f1:7b:ee:a7:9f:c2:fe:4e:
                    30:11:2a:b6:c5:ee:ed:8f:80:3d:f1:89:15:c9:cc:
                    4a:fc:cf:aa:55:fe:f2:39:d8:fb:aa:12:ad:ca:24:
                    a2:68:3a:17:45:5e:b3:2a:ea:75:6f:59:45:c0:4b:
                    14:be:4a:e4:4c:c3:bb:83:58:3f:79:f9:84:9c:bf:
                    23:02:b0:63:d0:10:c3:59:82:73:d3:5a:6b:3c:af:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:51:F7:2F:B7:E7:1B:25:29:EC:3D:FC:63:CB:61:45:30:80:8F:33
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:88:12:93:90:5e:d5:b6:45:e7:b5:98:ed:1c:00:77:4d:
         a0:b4:0a:27:be:d7:89:41:17:fb:bc:c4:2e:b7:2b:5f:c9:f3:
         ab:6f:74:ea:50:ac:06:1f:0d:08:8f:97:75:ed:f0:27:ff:ce:
         3f:ff:94:8b:27:4d:4e:d8:b6:23:06:97:b9:8a:0e:e5:55:29:
         f1:97:92:f9:79:c1:78:2a:40:c0:64:89:ce:c2:a4:6e:c2:2a:
         0b:54:7c:9e:e1:56:cd:68:4c:2d:a5:de:94:4e:b7:bb:57:f3:
         64:b9:84:58:8b:37:e7:ed:15:06:b9:57:b5:a2:aa:15:63:1d:
         90:bb:03:62:6c:da:d4:38:6b:47:5c:c3:d3:e8:48:4a:57:a9:
         90:2c:f5:aa:23:b4:75:34:9d:ee:6d:f1:42:d0:b3:91:64:e1:
         4b:20:18:99:d7:06:84:b0:91:aa:41:78:85:5f:c5:3f:eb:59:
         63:4a:a7:b0:94:ee:7e:1b:d1:dc:cc:1e:2d:cf:3c:ac:dd:a0:
         49:5b:90:ef:4d:61:be:1a:f0:a3:94:72:73:65:df:2b:25:60:
         b3:8c:b7:69:a8:eb:f8:e6:95:2a:af:41:79:4e:e1:92:ad:3d:
         52:2a:1a:1b:7a:a8:f2:8c:f5:d8:8d:da:4f:ec:fb:51:3e:57:
         2b:fc:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:34:41 2025 by rpki-client