Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
File:                     w0Ozu4On4j-tla-NIytSBSoP3nI.mft (raw, json)
Hash identifier:          +pALpvMRUhzY6VfL0mJxNoxrMwUvsSt4p0mgIuo0QCM=
Subject key identifier:   CB:43:60:BF:6F:B4:51:18:F2:EA:65:A1:19:43:23:67:9F:D9:58:92
Authority key identifier: C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72
Certificate issuer:       /CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
Certificate serial:       0993
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
Manifest number:          0978
Signing time:             Sat 10 May 2025 19:54:41 +0000
Manifest this update:     Sat 10 May 2025 19:54:41 +0000
Manifest next update:     Sat 17 May 2025 19:54:41 +0000
Files and hashes:         1: w0Ozu4On4j-tla-NIytSBSoP3nI.crl (hash: etI4eARzy2wo7+2CbBGzTDwYBFCYV0FJi/XHrvNJHDA=)
                          2: 8A480EFE80EE11EBA01B8C79C4F9AE02.roa (hash: nGCSzyeCGWb2by2Ok6xODoRNUK8MF0tF735aj9iyb9Y=)
                          3: 63FE6F90232411EB87A6CB0DC4F9AE02.roa (hash: MFp+TQFdjUkWq8YrpZoPX+xKXmHG4qHFMaA4FACPOxE=)
                          4: 023564E6D5BE11ECA8BE4666C4F9AE02.roa (hash: wHZWRXwKbEVincv7YJ3e25Slz3Zw4ni306PAKoBPm2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl
                          rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 19:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C66B7, serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
        Validity
            Not Before: May 10 19:54:41 2025 GMT
            Not After : May 17 19:54:41 2025 GMT
        Subject: CN=681faf01-0f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:25:2d:b3:9b:7a:82:7a:db:bc:35:9f:a6:23:
                    63:97:ec:dd:2a:80:39:16:c5:f3:84:23:34:6c:99:
                    ab:ab:25:c2:91:21:7d:7d:71:ba:f3:fb:c2:ca:fc:
                    83:d2:43:3a:45:2e:3c:fc:9f:5b:83:3f:f1:ef:8b:
                    8d:4a:22:e4:34:03:b1:42:a8:2f:f0:95:fa:7f:31:
                    95:05:88:75:5f:48:ba:d8:86:54:40:e4:d4:00:24:
                    af:d4:01:d1:3b:a1:82:6e:b5:4c:7f:f7:8c:ea:7f:
                    07:3a:c4:66:9d:03:21:f4:0a:7c:51:74:d0:3f:6a:
                    f9:0b:33:a0:00:3c:33:03:44:c4:c8:2e:a4:e4:ab:
                    e1:57:c2:36:ee:16:29:cf:3d:8a:8d:c3:f2:b9:93:
                    96:53:77:66:a9:00:12:26:2b:73:7a:96:ca:59:01:
                    7c:0b:2a:93:08:79:bf:0e:b5:9c:9a:1a:b7:76:0d:
                    a7:b9:07:51:bc:b6:b7:a4:74:05:78:42:4a:b2:55:
                    7f:8f:70:f0:c4:96:a4:72:58:dc:6f:3f:64:4c:4a:
                    a8:26:db:3e:ac:cb:a9:d9:ee:2f:78:72:0a:1f:bd:
                    a9:7f:cb:be:54:3a:7b:ac:e8:70:a2:ab:89:43:9f:
                    ad:90:e2:1a:0c:3a:cb:1c:04:13:a9:a8:1c:67:9f:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:43:60:BF:6F:B4:51:18:F2:EA:65:A1:19:43:23:67:9F:D9:58:92
            X509v3 Authority Key Identifier:
                keyid:C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:b9:05:8a:fe:19:29:28:df:dc:c7:bf:20:9a:91:60:66:
         5f:31:e4:77:d9:cc:65:c0:44:b7:72:11:db:17:83:6c:96:29:
         0c:dc:88:0a:ca:0d:2b:63:89:f6:ec:4a:5e:cd:25:fe:53:a4:
         23:92:e6:9b:a5:0c:0c:26:d3:ae:f2:68:71:45:00:44:45:9c:
         9e:9b:1a:d9:53:32:93:ec:8a:e9:38:88:4f:a8:77:32:0c:1e:
         93:f3:4f:9a:33:ae:2b:b0:16:06:59:61:2d:c2:25:7e:51:12:
         a3:6d:4b:4f:33:b3:22:c0:b8:19:33:1c:3a:23:f4:0d:ec:6d:
         9b:65:6e:a7:5c:cc:fd:f7:5d:b9:f2:35:ff:75:47:98:9e:54:
         f3:fe:a8:ae:42:c3:2a:bb:af:f7:ef:72:3a:3c:57:47:12:62:
         83:2a:d5:f8:a5:20:a0:f9:dc:2f:56:30:cc:93:da:c8:ec:94:
         80:1d:aa:1f:82:c4:be:87:ff:26:4c:ee:bf:75:b1:62:11:68:
         f8:3c:eb:c7:48:3a:cf:41:47:2e:74:b0:73:de:c3:82:d8:aa:
         5c:65:74:cc:18:94:8e:ed:f9:61:bb:f4:35:25:9f:f8:0a:36:
         be:ac:85:46:48:3f:6b:b7:f1:e3:d4:2f:f8:8c:03:b8:83:51:
         e7:5f:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:19:53 2025 by rpki-client