Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File:                     O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier:          K9w45DZXU/QcqqmnGN8WYf5tNQr5dAJMkgSfBCqIDhw=
Subject key identifier:   0D:84:EF:67:AF:63:60:C4:F6:41:9E:17:35:A3:4A:15:97:E8:ED:BD
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer:       /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial:       0A3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number:          0A29
Signing time:             Wed 02 Jul 2025 20:00:41 +0000
Manifest this update:     Wed 02 Jul 2025 20:00:40 +0000
Manifest next update:     Wed 09 Jul 2025 20:00:40 +0000
Files and hashes:         1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: HxR1OnLdJDT93IFhfN9zWZKKrblOSw9wrxEQ7PlS8ME=)
                          2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: juMQ71UzLGU0NVMfjPJ2FFyOOWRBZEQJenhZ2xiR7QE=)
                          3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DFYge5dHCEqKdjq6qJwiRBDOxqQ6gIZRO7JP5sPeXVk=)
                          4: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: Fcw453Ezb9efQnwUieSmXg5daSqXlucP3XjYZWFxjYQ=)
                          5: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: R3iQDjS1xmyA/Ti9pGMuv3ByraTjewOpXnxZ6reYInQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623 (0xa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
        Validity
            Not Before: Jul  2 20:00:40 2025 GMT
            Not After : Jul  9 20:00:40 2025 GMT
        Subject: CN=68658fe8-edb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:36:a6:c7:93:74:3a:12:f8:00:d3:c3:69:
                    2c:89:19:04:1c:95:2a:36:63:85:f0:49:28:ab:49:
                    4a:3f:8e:53:61:5d:33:5d:f2:80:db:96:c8:32:1d:
                    1c:76:63:ea:23:cf:6b:4f:08:5d:b0:4b:35:36:07:
                    09:cb:0b:5a:2e:b0:c6:9b:57:3d:97:85:4c:a3:98:
                    4f:0c:82:90:c7:a5:44:82:d1:d4:5f:ab:ba:8b:97:
                    95:10:3a:8e:e7:a0:7d:13:82:20:ec:56:54:5a:fb:
                    8d:76:20:fe:f8:89:27:b0:83:06:e5:65:97:a5:1f:
                    15:33:13:7a:b3:be:21:e8:cf:bc:53:5a:61:33:76:
                    9d:c1:8c:ff:62:47:9f:1f:a5:36:a9:db:18:d9:11:
                    d6:09:22:16:79:56:07:a9:ad:c9:7a:bb:8f:09:0e:
                    82:99:d3:45:bc:94:9f:9d:bd:3e:6b:8f:b4:a6:7b:
                    de:16:b5:a1:b7:76:42:9e:a7:a2:24:48:fa:11:f2:
                    64:7d:88:1c:f8:af:33:f0:9a:40:05:18:dd:61:d5:
                    2b:84:09:ae:be:6e:ca:2b:6a:0d:95:43:46:e3:45:
                    94:e0:5f:ab:9a:05:25:cf:cf:5f:8d:6b:5f:45:0e:
                    d6:e4:62:2b:29:e7:fe:58:b2:36:79:74:84:ec:2f:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:84:EF:67:AF:63:60:C4:F6:41:9E:17:35:A3:4A:15:97:E8:ED:BD
            X509v3 Authority Key Identifier:
                keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e8:b7:ba:6d:6d:23:4d:71:27:ae:98:2c:7b:85:23:d5:46:
         4f:da:ab:c5:ee:75:8c:81:7d:48:60:36:e6:fe:d5:12:ed:e3:
         e2:ed:54:f5:70:c2:71:8b:b5:36:59:53:8d:e1:40:c0:86:ec:
         95:dd:ba:d0:39:ec:8b:82:40:a9:8b:79:05:74:a1:ce:7b:d4:
         9d:9f:df:37:46:44:09:87:b9:fe:ca:91:e7:b4:e2:dd:42:5b:
         c3:dd:39:a7:ec:53:9b:01:bb:fb:2c:c1:8d:80:14:cc:78:63:
         cf:ce:27:1d:e5:29:b9:3d:3d:f8:b5:3f:9c:e6:42:06:ce:62:
         a0:a4:a6:f2:03:b9:94:75:67:d0:90:2f:d3:1d:4e:90:0b:b2:
         52:be:13:ef:1f:25:e5:71:6c:15:59:59:23:e8:3c:4e:88:c0:
         48:b7:ae:51:b3:6e:ad:80:55:c3:ac:d2:26:02:67:5c:0f:99:
         17:3a:7b:cf:8b:ba:db:54:5b:3a:b9:27:05:da:26:f9:c1:09:
         f3:56:35:a1:6d:ee:b4:17:55:ae:86:fb:02:7c:a6:7f:ce:e3:
         e9:18:9b:2e:8c:90:85:2a:d0:a5:15:cc:b1:81:85:96:37:8b:
         b4:61:36:fc:42:f0:a4:e9:04:12:ad:5b:15:95:a5:ae:df:f3:
         95:17:5f:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1
M0EwM0FCODYwHhcNMjUwNzAyMjAwMDQwWhcNMjUwNzA5MjAwMDQwWjAYMRYwFAYD
VQQDEw02ODY1OGZlOC1lZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudE2pseTdDoS+ADTw2ksiRkEHJUqNmOF8Ekoq0lKP45TYV0zXfKA25bIMh0c
dmPqI89rTwhdsEs1NgcJywtaLrDGm1c9l4VMo5hPDIKQx6VEgtHUX6u6i5eVEDqO
56B9E4Ig7FZUWvuNdiD++IknsIMG5WWXpR8VMxN6s74h6M+8U1phM3adwYz/Ykef
H6U2qdsY2RHWCSIWeVYHqa3JeruPCQ6CmdNFvJSfnb0+a4+0pnveFrWht3ZCnqei
JEj6EfJkfYgc+K8z8JpABRjdYdUrhAmuvm7KK2oNlUNG40WU4F+rmgUlz89fjWtf
RQ7W5GIrKef+WLI2eXSE7C8c0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2E72ev
Y2DE9kGeFzWjShWX6O29MB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz
RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht
cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCo6Le6bW0jTXEnrpgse4Uj1UZP2qvF7nWMgX1IYDbm/tUS7ePi7VT1
cMJxi7U2WVON4UDAhuyV3brQOeyLgkCpi3kFdKHOe9Sdn983RkQJh7n+ypHntOLd
QlvD3Tmn7FObAbv7LMGNgBTMeGPPzicd5Sm5PT34tT+c5kIGzmKgpKbyA7mUdWfQ
kC/THU6QC7JSvhPvHyXlcWwVWVkj6DxOiMBIt65Rs26tgFXDrNImAmdcD5kXOnvP
i7rbVFs6uScF2ib5wQnzVjWhbe60F1WuhvsCfKZ/zuPpGJsujJCFKtClFcyxgYWW
N4u0YTb8QvCk6QQSrVsVlaWu3/OVF1+4
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:53:20 2025 by rpki-client