Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
File:                     mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json)
Hash identifier:          kS65R+rwnnIQOEoMD3NKoOOrf5i0V7mTb6199uh3yBM=
Subject key identifier:   52:0A:E7:38:29:EA:38:90:A4:16:8F:0C:6D:A2:5D:71:F6:B6:2C:FC
Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87
Certificate issuer:       /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
Manifest number:          A6
Signing time:             Tue 01 Jul 2025 06:51:26 +0000
Manifest this update:     Tue 01 Jul 2025 06:51:25 +0000
Manifest next update:     Tue 08 Jul 2025 06:51:25 +0000
Files and hashes:         1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: P7lpuQ6nN4w9NYAYA8+pHfC9iHMPfmMaknKvfm9aYaE=)
                          2: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (hash: PcUbeq2GL9ETBRd6OiM02vny8hMoCCAWI9K7b/wI5lE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl
                          rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 06:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
        Validity
            Not Before: Jul  1 06:51:25 2025 GMT
            Not After : Jul  8 06:51:25 2025 GMT
        Subject: CN=6863856e-c388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:f7:06:2f:5d:34:96:e7:80:f2:8d:4a:7d:
                    29:90:ee:1c:d4:3a:22:01:fa:96:ad:c6:ce:1a:ee:
                    9d:b4:aa:17:b8:e7:5a:e9:fb:a0:f4:09:cc:1d:a3:
                    2d:05:50:58:b6:6b:6e:7b:77:b7:fa:ea:37:09:05:
                    2b:b4:44:25:b1:52:ba:87:68:f2:d0:35:2e:c9:4d:
                    97:0e:a7:a0:c3:c0:2a:b3:9c:15:b1:5b:0e:ce:99:
                    b4:30:10:fd:80:a8:33:3d:fd:70:e2:3b:0f:99:65:
                    76:10:40:6c:a7:5b:45:8b:32:c1:f3:22:3b:ab:72:
                    be:89:f3:1a:25:9f:a1:02:fb:74:48:0f:de:67:90:
                    2b:f1:be:fe:0a:9a:34:81:dd:ab:28:be:5e:69:e6:
                    09:ee:ff:eb:a4:95:c5:fd:b3:31:c1:1d:04:78:54:
                    48:27:2b:80:5d:8e:c1:05:10:42:0b:66:d9:3c:a5:
                    42:e6:91:5c:86:59:4e:a9:53:7c:5d:13:37:ed:9d:
                    f6:f9:58:94:57:0b:6a:3b:86:c8:af:0e:e0:02:2e:
                    a5:ab:01:6c:42:c4:2d:7e:eb:90:76:fd:a3:5a:f9:
                    50:67:c9:e1:f6:59:19:7c:17:bf:24:70:bf:f6:ac:
                    5a:1e:b1:a6:c0:97:28:3a:1e:8c:62:a7:7a:f3:a2:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:E7:38:29:EA:38:90:A4:16:8F:0C:6D:A2:5D:71:F6:B6:2C:FC
            X509v3 Authority Key Identifier:
                keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:0d:9e:fe:5e:94:a0:20:a6:f2:01:a0:ba:87:31:1d:f8:
         bb:0d:b4:f3:db:37:49:f6:29:bc:d3:8a:cb:65:30:6e:c0:b3:
         59:81:af:be:42:84:32:c0:6d:e5:26:27:20:95:e0:13:32:3e:
         44:d1:39:cb:6f:ac:c6:7d:1a:23:f2:0a:77:84:f6:62:92:90:
         b4:fc:e6:8f:b6:e7:1a:41:06:49:3a:07:06:48:44:b4:cb:88:
         10:c2:2d:6e:a2:84:0f:1a:27:08:e6:56:75:8e:1c:ef:3f:c9:
         c4:30:89:dc:c1:98:35:df:bd:d7:98:f9:d8:84:a5:c8:28:bf:
         09:41:92:e5:f5:24:ea:56:61:60:50:e1:fe:19:f3:3c:42:3f:
         d3:bc:a9:3d:bc:a2:2d:52:a2:3e:67:7a:32:c3:d8:f4:f7:25:
         dc:e5:b1:e6:66:af:13:e8:37:db:17:60:ab:23:41:ba:09:2f:
         74:4c:01:3b:f3:dd:17:46:7e:45:ae:8b:0f:a8:5e:dc:f5:78:
         7d:f4:c2:fc:2f:ed:db:f9:11:3a:4d:07:71:d3:12:07:cb:e3:
         4f:30:b4:8e:72:c0:20:00:d2:18:51:66:7a:a2:cc:a1:39:bc:
         b1:5b:77:88:b6:62:34:2c:2d:a5:ab:40:ce:ee:51:4c:17:d3:
         76:8c:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:28:18 2025 by rpki-client