Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
File:                     Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json)
Hash identifier:          J8JR7VwkawJ/yqnYjRxLliB8weF1t1fJV5taDDObxgY=
Subject key identifier:   E6:4A:27:C3:C4:0B:65:AE:CB:80:2B:5A:66:EB:C7:9A:66:F2:91:4F
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
Manifest number:          0252
Signing time:             Sat 23 Aug 2025 02:04:33 +0000
Manifest this update:     Sat 23 Aug 2025 02:04:33 +0000
Manifest next update:     Sat 30 Aug 2025 02:04:33 +0000
Files and hashes:         1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: AN/Bf3ZJa1Dww+5V9QyudWErOY0X9PEXznB3TnH0kiU=)
                          2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: SdihL210gPCDV8+I91wffCGT616SJGuUi8ixJc1Exmw=)
                          3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM=)
                          4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 3MY+LBjMkWn0JVtEZnXJmpiFK4xoYWEhCoPkhLW/buM=)
                          5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0X4T0YrSiOWFmPbWRm4BMiWwIJYzgP1cN8sgOgLAcS4=)
                          6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Aug 23 02:04:33 2025 GMT
            Not After : Aug 30 02:04:33 2025 GMT
        Subject: CN=68a921b1-b851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:7a:ce:c7:27:3b:e5:60:bb:05:39:fb:dc:
                    f7:9f:ff:77:28:35:13:7c:e2:a1:79:41:f0:88:24:
                    51:c2:d5:a8:9c:92:37:2a:d5:c5:98:63:43:3b:d5:
                    45:90:ee:68:dd:2a:37:55:4a:9a:34:f4:f5:71:ae:
                    8c:45:32:a1:83:8a:23:3c:f0:7e:8b:4c:c8:31:15:
                    60:23:ae:da:46:eb:de:42:94:8b:81:5e:ad:36:47:
                    ad:cc:f0:67:fc:e3:0b:17:5e:b9:18:a9:37:90:d7:
                    a5:78:46:d8:3f:f3:f1:b9:d3:ba:e9:a7:f5:ea:26:
                    5c:2d:c2:43:d1:ed:31:76:3e:eb:94:f1:03:d4:0a:
                    f9:2c:3e:1d:dc:16:5c:3a:c1:1f:04:cb:84:73:9c:
                    4b:7d:a8:b6:89:e3:2e:f4:3f:03:3b:70:d9:fc:a6:
                    79:ca:b6:f0:68:1c:30:48:b5:91:4c:0f:43:c0:3d:
                    f2:1a:bc:2c:b9:11:31:f4:d3:9f:49:a7:85:ee:24:
                    82:13:17:4c:73:61:b0:25:34:f3:1f:be:17:b7:21:
                    40:2e:35:7b:e7:0b:7c:96:9f:ec:40:ee:c5:7f:3e:
                    15:9c:f3:d9:6a:3e:78:4e:ed:f3:ab:11:1e:4f:2b:
                    4a:7a:37:c9:7a:a9:84:43:77:23:35:2f:64:68:d4:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4A:27:C3:C4:0B:65:AE:CB:80:2B:5A:66:EB:C7:9A:66:F2:91:4F
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ae:58:f3:bf:15:f2:ad:76:4c:04:a0:44:51:59:2c:e6:62:
         36:19:a7:78:5a:ac:c1:26:7e:9a:a1:64:75:a5:58:d7:27:09:
         96:1f:33:0f:9a:9c:32:51:18:8a:a9:39:42:6d:d7:5e:0e:8d:
         82:03:27:39:0f:3e:3b:ce:95:dd:f6:a9:6e:2a:ef:7a:97:c5:
         99:c5:8d:c1:76:0f:1a:65:92:b7:25:08:b3:59:6c:6c:05:c8:
         5d:f1:b8:15:35:fb:f3:ae:32:bd:59:0e:70:51:fa:ef:cd:22:
         e2:85:46:6c:86:c8:e8:63:74:26:65:4b:72:02:10:78:71:23:
         5e:fc:d2:07:43:68:c3:b0:2e:2d:8c:46:72:1d:df:88:cc:a0:
         5f:1e:e2:5a:f3:5f:cb:40:24:e1:70:72:3d:c6:ad:7a:ee:73:
         08:e9:c4:c2:48:c3:ce:9f:ba:b1:ce:48:1f:8e:85:48:ae:11:
         c5:83:ca:aa:e2:68:9d:9e:1d:1e:bb:f0:14:18:01:08:0a:c5:
         36:e3:4c:f6:e0:f5:10:86:11:46:7a:8e:10:1a:1f:c0:2b:08:
         5c:9b:4e:19:ff:31:6e:74:49:8f:6a:38:07:d2:cc:d9:3d:55:
         81:89:9a:8c:dc:33:a5:ff:ee:16:e2:ed:a2:52:16:3b:95:22:
         81:a9:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:28 2025 by rpki-client