Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          4Ao9tDnT2zTOWFeTibC1jlrbXZJCcpZ0ph7HP3KNaD8=
Subject key identifier:   C9:E7:34:1C:6A:80:1F:3B:1B:44:38:52:81:09:4D:5A:38:3C:60:66
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          079E
Signing time:             Wed 14 May 2025 21:24:22 +0000
Manifest this update:     Wed 14 May 2025 21:24:21 +0000
Manifest next update:     Wed 21 May 2025 21:24:21 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: vVCqdzH40iRRYNYIsXysODoyByxlF58xVOt1eeS+GMk=)
                          2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: VacwFfXxfWfasplgXF9A1AX11wCHDuK5XANfDyd18Pc=)
                          3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: nh4OlofqMh099kYvPNfjQ05/jiIH5vP8fVdEV6he48g=)
                          4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: KuZID6pq906VPDfvmGsN77h7hBvEwQX/7r+oBn+hpC0=)
                          5: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: MChKj8CysBVpKBL1Yc5KnUgJyLD5UeDlW+DQqjWmTk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: May 14 21:24:21 2025 GMT
            Not After : May 21 21:24:21 2025 GMT
        Subject: CN=68250a05-fd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:01:d4:82:61:57:54:91:ac:bb:17:ff:36:b7:
                    00:55:cf:91:e8:a6:7d:64:d5:99:02:e1:38:f1:39:
                    c3:41:81:f8:c9:67:a9:d8:f5:8a:2f:ad:22:c4:b5:
                    11:cc:d2:e1:d9:de:48:a1:ae:f9:cb:2a:91:55:98:
                    b0:26:44:99:c2:a7:45:bc:eb:57:07:51:53:2e:9f:
                    26:75:82:0b:85:02:3b:e4:71:65:ff:c3:22:6b:51:
                    02:1c:01:13:f9:3f:16:fa:00:9b:75:80:1b:8b:28:
                    bf:6b:3d:7a:34:1b:0c:f4:df:e3:3a:26:98:6a:31:
                    13:61:08:4a:c2:c4:69:80:88:e1:c3:3a:70:2a:e8:
                    76:0a:ff:b3:2a:d0:dd:71:07:64:92:d2:44:d0:58:
                    2f:5e:53:b4:ea:30:df:0f:63:1d:22:80:3b:a2:bf:
                    6a:78:cb:ab:28:fe:9d:05:84:38:39:06:c0:72:48:
                    4c:93:9d:7d:a1:bf:7b:21:63:8b:3f:ec:a4:c6:c6:
                    25:79:1c:6b:21:0c:53:a9:ab:e3:90:f2:1b:ee:e1:
                    33:4a:85:1c:f6:43:64:88:15:f1:e9:84:30:e1:30:
                    e7:35:d3:e6:6d:fe:a0:33:2c:1a:5c:ed:8c:ab:c7:
                    61:91:89:1e:73:c8:d5:54:e8:b4:db:53:0a:9d:e7:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E7:34:1C:6A:80:1F:3B:1B:44:38:52:81:09:4D:5A:38:3C:60:66
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:79:f3:c8:35:ef:a4:b1:02:e3:0c:54:51:7f:fc:c7:9b:64:
         a4:b6:d9:c9:00:b0:9a:f2:0b:ba:3c:01:af:8a:73:4d:d6:1e:
         e7:81:d8:90:82:83:57:5c:6f:91:fc:43:de:23:c0:0e:5b:41:
         b3:83:8e:8e:a3:65:8d:fd:35:03:e7:85:ab:03:38:ac:69:82:
         0d:9c:31:08:8a:b6:37:95:d8:2a:16:a1:7e:76:5c:ff:85:01:
         fe:b5:55:3a:ac:89:0d:5c:7d:50:98:b8:ee:85:48:41:d7:bb:
         30:19:dd:60:d2:5a:a9:98:87:87:ce:8c:72:e3:85:e1:ed:d9:
         2a:18:8b:29:20:d7:df:05:b0:b0:59:29:f0:44:86:15:af:f9:
         22:cd:fa:6c:8a:79:b3:d9:1c:55:d8:cc:a5:d1:4c:51:12:ce:
         55:74:f5:2a:a5:74:3a:94:24:72:aa:72:ee:ad:69:62:ec:32:
         82:f6:a7:72:bc:58:86:3e:67:66:ae:bd:1b:d4:6e:c6:01:f9:
         07:9e:d0:58:56:b1:96:f5:08:94:c7:1f:8f:a8:7d:aa:2b:de:
         64:83:9c:78:02:c1:e5:5e:b7:6e:89:29:e0:02:24:d0:fa:d2:
         9e:fe:02:1a:d2:47:47:f7:33:ac:d1:88:f2:4e:e3:de:2f:ed:
         a1:59:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:34:12 2025 by rpki-client