Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
File:                     OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json)
Hash identifier:          Gt0ysi2g0hk6GudEfM5R9Af+iSiA31cMpSX/lfIZwYg=
Subject key identifier:   E8:3F:F6:2C:08:2E:C9:1E:00:C8:15:DC:72:F9:92:3B:27:C2:AD:02
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
Manifest number:          08CA
Signing time:             Fri 16 May 2025 20:46:01 +0000
Manifest this update:     Fri 16 May 2025 20:46:01 +0000
Manifest next update:     Fri 23 May 2025 20:46:01 +0000
Files and hashes:         1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: dY+5yMNktHxBHNFQAN3JOjyR9hhsgSiTZ8Irrocakxk=)
                          2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: OW9lsUV5oixQaepXd0o9wvP+ydFKTMRn+aOMtcrsIqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
                          rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 20:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: May 16 20:46:01 2025 GMT
            Not After : May 23 20:46:01 2025 GMT
        Subject: CN=6827a409-5d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:bd:8c:29:48:95:c8:b0:e9:11:7d:66:92:
                    af:cb:b2:3d:65:51:40:f8:42:7a:5d:43:50:81:e1:
                    01:f0:42:cf:ca:c8:69:72:dc:0a:51:cc:da:0d:1e:
                    d9:51:75:e0:2e:10:d2:3f:d7:5c:d6:3a:2d:b5:15:
                    d2:a0:e8:1c:74:fa:03:5d:e1:ff:11:39:0e:71:7a:
                    ff:3e:a3:02:9f:37:a3:26:96:2b:5c:ce:a5:59:17:
                    81:11:27:42:62:07:3f:0d:bc:d2:7c:f1:f7:e3:b3:
                    a5:5d:83:e9:30:1e:25:5d:d8:36:cb:f5:77:a2:60:
                    ef:40:16:ae:c0:3e:3b:fb:2e:40:46:96:6a:2d:f3:
                    3f:5d:f4:2a:22:02:65:18:e5:15:68:d6:16:5e:0f:
                    e2:29:dd:9b:c2:1b:23:13:e5:28:5f:cf:22:7c:de:
                    16:c2:6b:2c:91:60:48:0b:cb:1a:1f:87:a9:02:24:
                    00:f1:b3:88:23:90:5a:8e:9e:44:be:c2:9a:a1:1a:
                    15:cd:3d:c3:c7:7c:f2:93:56:57:ad:d7:85:d7:0f:
                    f8:0a:8a:6a:a2:05:70:30:62:af:de:65:15:43:ff:
                    d5:4d:38:97:cb:ba:62:61:ea:28:fe:c8:d7:8b:a1:
                    52:d3:f4:37:7e:60:72:37:4b:9d:ca:6f:d8:30:36:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:F6:2C:08:2E:C9:1E:00:C8:15:DC:72:F9:92:3B:27:C2:AD:02
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:97:93:4b:ad:f6:ea:77:66:df:54:a1:d5:cd:cd:2f:5e:79:
         e0:d2:a1:f4:64:58:bd:31:a3:57:65:23:53:06:f9:57:56:df:
         2a:9f:5f:a8:64:dc:31:9d:69:25:fc:8a:fa:02:e6:3d:5f:d8:
         c9:56:f6:e1:e0:b6:00:63:ee:5e:a5:56:3c:ea:3a:5f:8a:9c:
         a6:3c:24:f3:37:a5:f2:12:c3:d1:69:f8:71:25:a4:fb:63:ed:
         55:b7:7d:73:bd:1b:c2:61:e7:96:6c:16:99:e1:23:73:9b:ef:
         f5:87:64:18:67:b8:f5:f3:c2:4e:da:28:36:33:e4:76:e6:01:
         d7:9e:e1:09:d6:fa:a7:af:e4:26:2c:e5:fc:3f:bd:47:20:7d:
         9d:c3:66:20:92:e0:1e:6e:47:a4:67:33:6f:72:5f:7b:e9:8d:
         50:3c:93:3e:bc:72:5b:3d:e1:dd:14:2e:4d:4e:86:2d:b9:85:
         a9:5b:c1:59:d4:7b:f7:75:8e:3d:5e:af:2b:19:42:2f:4e:60:
         97:91:9b:b6:30:26:7d:89:56:80:a7:ad:3e:18:43:cd:cc:e6:
         47:8d:ea:fa:38:9f:3b:9f:f9:c2:f2:93:91:7d:fa:f6:a3:aa:
         54:d1:24:d7:d3:5e:6a:c3:a7:68:16:d0:6d:80:10:7a:64:2c:
         69:ed:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:28:00 2025 by rpki-client