Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
File:                     0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json)
Hash identifier:          HMT8pJTrGXRn987Noxv/UXyPytPqxR3j47N2mPB25Kk=
Subject key identifier:   1F:F3:7B:E2:72:4A:81:26:69:98:A8:7B:BA:27:3A:48:D0:FD:DF:B7
Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
Certificate issuer:       /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Certificate serial:       09FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
Manifest number:          09EE
Signing time:             Fri 16 May 2025 20:09:09 +0000
Manifest this update:     Fri 16 May 2025 20:09:09 +0000
Manifest next update:     Fri 23 May 2025 20:09:09 +0000
Files and hashes:         1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: bzTSH1nD4Cr22IB8hOCT6aScnM/F/mg4jPmi7rrJ5Bk=)
                          2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: 3+/t3J2iluPwHXxOgZE7j6ggbnPpq8pNrSyJFTrrBZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
                          rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 20:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2555 (0x9fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180758, serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
        Validity
            Not Before: May 16 20:09:09 2025 GMT
            Not After : May 23 20:09:09 2025 GMT
        Subject: CN=68279b65-cc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:48:60:ae:c3:6a:0b:6f:73:4f:d3:e4:71:
                    7f:13:65:e2:87:2f:11:76:95:8a:b6:e6:0c:3d:d5:
                    8c:d9:1d:f9:7f:ed:46:fd:91:39:5a:9f:27:11:32:
                    15:38:ff:3d:f3:e9:4b:f5:5b:07:c9:f8:79:e7:75:
                    a8:8b:8f:a7:06:ad:9a:41:c1:bc:d7:f1:e1:e8:b0:
                    f9:b6:52:45:16:f0:01:38:e8:41:1c:07:25:5b:6d:
                    4b:36:aa:d5:84:3d:71:28:0f:f9:f7:51:7e:be:46:
                    f3:b3:15:9e:af:03:27:c5:f5:7c:0c:7e:a9:7c:2b:
                    7f:a9:45:e7:6a:23:90:b6:95:20:f5:de:4d:7e:b6:
                    78:6e:71:f2:1b:d9:e5:3b:a7:ab:db:d7:49:22:07:
                    e5:c0:b5:b8:81:3b:43:fc:31:c7:76:9d:83:5e:f7:
                    4b:96:ff:b9:16:88:a3:fd:12:4b:25:24:b4:75:fa:
                    e7:e6:0e:fc:cd:7e:74:d3:9d:0c:3d:ed:14:ff:ee:
                    bc:17:bb:79:df:db:2e:df:f0:96:51:38:18:03:1a:
                    20:d8:1f:60:2e:42:18:57:d8:3a:9a:2b:ee:61:b1:
                    08:8b:e3:18:08:b4:4f:6a:1a:e3:4c:35:87:bd:1b:
                    85:33:36:e1:5b:70:b1:72:a1:4f:75:a5:a8:96:11:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F3:7B:E2:72:4A:81:26:69:98:A8:7B:BA:27:3A:48:D0:FD:DF:B7
            X509v3 Authority Key Identifier:
                keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:c2:f8:05:01:2e:bc:36:eb:31:43:fe:1b:98:11:75:01:
         7c:3a:9f:07:dc:a9:d1:e7:c6:95:d6:88:87:b2:a3:24:7b:e7:
         c2:a8:5b:fa:08:bc:38:f5:b2:a2:5c:ae:22:85:a7:0e:3e:5e:
         5f:e9:a1:07:de:25:4a:07:00:1a:28:de:d3:36:f0:1d:fb:52:
         71:2a:c7:ed:29:4f:27:0e:bf:4a:bc:e7:89:0b:61:23:e7:6f:
         4b:71:27:28:70:59:6e:11:29:15:91:98:0d:49:8e:05:fa:ae:
         61:ad:f7:6f:d6:21:7f:e6:19:17:fb:4c:03:e2:e3:d9:32:c1:
         ff:43:d8:f7:66:37:3a:82:1b:91:ba:e8:fd:1a:06:71:e4:3a:
         2e:0f:8e:c6:a6:bf:39:a0:0a:b5:44:d3:ad:1a:17:7b:ee:d2:
         b6:02:ba:73:44:ef:26:55:b8:8d:22:a9:2d:88:6f:c7:c7:11:
         a1:85:39:23:e7:52:bf:86:b2:97:95:8c:08:b4:1e:5e:59:46:
         f2:cf:f4:6a:d3:d1:4e:b9:b1:7f:b5:3a:cb:31:4b:e0:05:93:
         86:2c:71:01:3f:ae:48:1a:43:ab:ea:86:02:f1:f0:d6:2a:80:
         09:11:a0:dd:4d:8c:be:42:87:b8:66:16:13:1c:28:4e:20:b0:
         82:b3:b5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:02:16 2025 by rpki-client