Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
File:                     OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json)
Hash identifier:          MHozAavtR/da4WSDSWav3Ddy6nqsOqqqieIdkvEH0dg=
Subject key identifier:   E2:49:78:2A:58:E4:34:C4:1F:8D:9A:FA:AB:7C:8C:70:63:35:F2:AF
Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
Certificate issuer:       /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
Certificate serial:       23F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
Manifest number:          601B
Signing time:             Wed 02 Jul 2025 14:15:20 +0000
Manifest this update:     Wed 02 Jul 2025 14:15:20 +0000
Manifest next update:     Wed 09 Jul 2025 14:15:20 +0000
Files and hashes:         1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: 3rN99RtXCsU86XaDS6sdOKrdnOW1EcyuCD//6r3z+O0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 14:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9209 (0x23f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
        Validity
            Not Before: Jul  2 14:15:20 2025 GMT
            Not After : Jul  9 14:15:20 2025 GMT
        Subject: CN=68653ef8-0455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:13:a0:87:d2:c7:98:51:ad:3d:1c:40:63:
                    db:1b:56:24:3b:d3:00:d7:90:3e:be:89:8a:4e:b5:
                    4b:13:c8:ef:1b:a0:e3:46:eb:af:10:9c:dd:32:97:
                    c5:a9:a5:22:35:70:e7:e2:14:e9:64:c1:e0:5a:c6:
                    fb:c1:aa:23:21:1e:9d:0a:57:b0:90:87:0a:0c:e3:
                    92:bd:c5:5a:f2:ab:ae:22:9d:79:1f:e5:79:7c:e3:
                    d5:79:19:cb:a6:50:fd:d2:19:cc:6c:21:a5:c4:7c:
                    de:f0:dd:a0:f9:e9:d4:01:ad:98:04:60:40:7a:82:
                    da:48:b3:a3:b6:7b:fc:1a:c9:fe:0d:6d:20:bc:c2:
                    9b:ef:b5:a1:97:c7:6c:8e:45:53:20:c1:fb:d0:8a:
                    15:e4:88:2f:4d:7c:37:b8:ec:f0:bd:32:54:ed:45:
                    8a:ab:e2:f0:2b:06:ab:f0:99:82:07:15:51:e4:c2:
                    f6:a6:c8:ee:82:dd:c9:35:c5:bb:44:9c:f2:b8:36:
                    5f:3e:7b:33:81:9a:71:be:63:91:97:27:06:ad:c1:
                    c9:4b:cf:11:ac:c9:3c:21:5d:64:15:0c:1f:5a:9b:
                    24:4a:80:21:b1:9c:fd:71:5c:df:73:ee:b6:ce:7a:
                    18:0a:8e:cd:bf:67:a3:da:fd:32:09:78:a7:6e:95:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:49:78:2A:58:E4:34:C4:1F:8D:9A:FA:AB:7C:8C:70:63:35:F2:AF
            X509v3 Authority Key Identifier:
                keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d2:e6:5d:df:81:95:81:69:7d:66:e1:30:c4:39:0d:c7:fe:
         da:ba:48:6b:a0:82:d9:5e:a1:3b:bd:63:db:e6:6e:4a:e8:f0:
         dc:6c:31:ef:0e:d0:41:fe:cf:5f:e5:45:17:ab:d8:13:90:7c:
         9b:20:b8:f0:ce:70:0d:ca:52:40:76:bb:ac:83:03:60:0c:bd:
         b7:40:ff:4c:cc:73:88:2b:eb:fa:25:aa:4e:18:17:14:2c:f0:
         dc:60:89:81:51:dd:22:56:da:47:4c:e8:43:c8:04:98:d3:3d:
         16:2e:6d:ad:fd:80:a7:f8:b7:86:cc:8a:bb:56:89:b2:b5:a0:
         ec:d7:77:ea:99:f7:39:0c:81:0e:73:06:71:7d:5f:1b:ca:dc:
         2a:16:a6:4c:c8:f8:71:69:1c:b7:c3:f9:4e:07:9b:f8:e8:58:
         8b:10:8b:a4:6d:56:92:28:62:14:1e:44:97:0a:ec:9f:28:98:
         20:a9:6f:6c:30:67:34:94:38:92:ce:18:4e:0a:5c:b0:b5:89:
         65:52:da:7b:0d:78:5d:1d:74:b7:f8:a8:2d:ea:02:bd:23:bb:
         e3:62:c0:a9:8a:2f:e8:0f:a3:f1:2e:30:82:b1:bb:f2:16:ff:
         12:b8:9e:45:d8:02:ea:da:77:96:e2:e3:32:5c:de:ca:8b:65:
         6d:37:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:58:29 2025 by rpki-client