Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
File:                     oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json)
Hash identifier:          gt4bHngRKbvV5cBxti4UfIfGwo/ue1azGwHY41Ne3sI=
Subject key identifier:   C2:26:41:01:0B:C7:71:E9:97:C6:F9:35:D4:D8:BA:48:87:8A:F8:C1
Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
Certificate issuer:       /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Certificate serial:       11E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
Manifest number:          11CB
Signing time:             Fri 04 Jul 2025 17:28:30 +0000
Manifest this update:     Fri 04 Jul 2025 17:28:29 +0000
Manifest next update:     Fri 11 Jul 2025 17:28:29 +0000
Files and hashes:         1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: jHMvPXtF1Psl2Q9PV8FiOiGRqoN5yUy4W7rh89VQdsU=)
                          2: 5E66667ED3AE11EB908D6529C4F9AE02.roa (hash: n7ZfWu9YevyGMpJ105uNq2hULd/nZeOAu9j3eqShoBg=)
                          3: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: 1n0gDL6bGzAnn9xKGXqg42AcMaFYnb+E6TJXe2riXIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
                          rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4581 (0x11e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
        Validity
            Not Before: Jul  4 17:28:29 2025 GMT
            Not After : Jul 11 17:28:29 2025 GMT
        Subject: CN=68680f3e-283e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:c3:05:bd:c6:72:28:db:51:03:75:b8:ae:
                    96:9d:cc:98:33:7a:36:0a:a6:31:34:5f:0f:18:20:
                    27:b4:06:60:b9:6d:53:13:7e:92:30:b0:b8:da:c3:
                    83:e2:11:0e:cf:bf:b2:67:40:22:83:82:93:73:6f:
                    fd:a8:d4:c3:c5:31:a9:ec:73:0c:32:45:d8:e9:7c:
                    cd:f6:8f:23:ca:eb:eb:0c:22:52:70:12:50:3f:14:
                    23:dd:7e:f1:2b:cd:1f:9a:e9:1b:c8:8a:e2:08:5d:
                    b2:6f:37:79:7a:63:a3:78:da:ff:10:4d:44:8f:52:
                    49:01:e2:6e:ea:9a:52:f7:1f:b1:83:8f:d5:f5:87:
                    78:a6:ac:82:1b:b8:9a:b0:87:bf:84:78:bf:d7:a3:
                    cd:36:45:d6:45:3d:b4:99:25:cb:74:5d:1e:51:ea:
                    bc:a0:a0:f4:89:1d:fc:39:e2:ca:04:f0:3d:4f:27:
                    ec:64:06:c4:9f:41:50:bd:86:5d:7a:ef:dc:1c:9a:
                    e6:b9:c2:65:1c:ee:37:1c:e4:e8:22:4e:8d:d2:ef:
                    96:46:00:10:0c:31:f6:3d:e9:f7:99:6e:69:f7:e9:
                    ec:a8:4f:e4:de:e1:bc:35:57:c9:c5:7b:71:c4:d7:
                    e0:4c:8d:a4:d2:47:75:a2:c5:ee:df:13:44:a1:ba:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:26:41:01:0B:C7:71:E9:97:C6:F9:35:D4:D8:BA:48:87:8A:F8:C1
            X509v3 Authority Key Identifier:
                keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:af:9b:26:5c:6f:b6:2f:33:7b:1b:8f:1b:e9:bf:42:de:8d:
         44:3c:5d:8a:b4:00:75:8b:79:a5:43:61:5e:da:0d:d8:11:84:
         b3:21:db:80:f7:f2:7d:e9:11:1c:bb:a7:60:a2:21:14:d4:aa:
         6e:28:45:01:25:09:11:0e:8f:c5:6a:10:06:6c:25:bb:af:f0:
         cd:bb:13:37:ed:ce:e3:b9:65:e2:26:ab:0b:ad:27:f8:e5:f5:
         16:f7:63:32:53:be:21:7b:af:c2:5a:64:dd:7f:76:38:d2:0d:
         fe:bb:d4:a3:80:65:78:44:07:b4:24:33:90:34:78:40:a5:26:
         d9:ce:84:67:57:51:dd:11:4e:96:83:4b:68:ef:36:54:0d:fa:
         80:e6:40:86:95:87:fe:d4:92:0b:b8:d5:b9:e6:f8:b6:db:29:
         f3:c0:6d:f6:e3:a0:18:30:bf:5d:4e:1f:6c:21:57:9e:d4:02:
         6a:c6:a9:ef:e5:7c:a2:fc:c6:1c:41:cf:a9:f2:ab:a7:ef:d9:
         40:e7:7f:cb:c1:d4:01:5a:48:74:2e:c5:1c:c7:94:e6:b0:99:
         54:fd:d3:1d:85:28:6a:a2:c7:46:f8:1f:eb:66:05:89:3e:f6:
         27:2a:ec:44:16:de:75:69:ee:8f:b4:56:ea:11:44:d7:44:e3:
         76:42:72:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:43:29 2025 by rpki-client