Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
File:                     oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json)
Hash identifier:          qizzodBILsPD2bW//tE9aF4b9O57w/jO5eqjBWfCPpg=
Subject key identifier:   6B:AB:95:24:12:11:43:D2:F8:23:B0:76:2A:81:C4:33:BD:90:D9:0A
Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
Certificate issuer:       /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
Manifest number:          0188
Signing time:             Sat 19 Jul 2025 03:44:08 +0000
Manifest this update:     Sat 19 Jul 2025 03:44:07 +0000
Manifest next update:     Sat 26 Jul 2025 03:44:07 +0000
Files and hashes:         1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: whL3NsCdn1WfI+JWA6VyJFftgPsqIjeplwqkXTVEAwU=)
                          2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: e38NftZeclZtbzcVCk509TYbTR+zv3+tyooBUtjix+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
                          rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
        Validity
            Not Before: Jul 19 03:44:07 2025 GMT
            Not After : Jul 26 03:44:07 2025 GMT
        Subject: CN=687b1488-717c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0d:aa:cb:88:cd:a3:92:ef:67:08:7f:47:ed:
                    b5:72:ad:cd:96:f7:59:89:02:d0:f5:47:2a:a0:2a:
                    e1:d3:f4:cd:69:73:a8:5a:78:61:03:17:41:7c:be:
                    a2:9e:35:54:2b:02:00:06:ff:44:9d:fe:ea:a5:42:
                    3e:45:29:c8:a8:1e:47:8b:e3:b8:d9:6e:e4:ef:f5:
                    6b:d5:ab:7d:3c:31:e0:02:70:23:8a:20:a7:e7:33:
                    c2:58:1d:f5:aa:43:2a:3d:e9:cb:65:2a:09:2a:a5:
                    f7:c4:60:6f:23:b2:02:17:bb:fa:fa:51:6a:7c:66:
                    bd:ac:57:b0:87:17:d3:ec:20:43:d7:e1:18:12:91:
                    e4:69:15:e0:cd:e6:76:40:b0:d8:e6:2e:a9:43:57:
                    85:d6:43:60:75:3d:0f:48:61:73:6f:d9:55:a1:e1:
                    bf:a2:54:25:eb:0b:a1:e0:01:d1:e1:5c:37:cc:3f:
                    a1:8f:a1:15:d5:2e:38:9c:17:71:e8:48:39:eb:aa:
                    1e:22:b9:3d:e4:33:f7:0f:2b:93:77:da:d5:e6:a2:
                    0b:d1:c7:e3:09:a9:b5:9a:33:44:56:14:63:88:19:
                    a5:2b:8c:91:8e:9a:c9:8e:9d:65:f0:15:8d:f9:2d:
                    74:cb:fc:e5:5b:e5:33:b3:74:af:ef:dd:84:73:e0:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:95:24:12:11:43:D2:F8:23:B0:76:2A:81:C4:33:BD:90:D9:0A
            X509v3 Authority Key Identifier:
                keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:35:86:74:63:42:7c:b6:3c:a2:5b:c7:e1:5a:05:30:8f:cc:
         c6:2a:7a:95:d8:9e:f4:96:e6:c8:66:ab:57:7f:b5:89:07:4b:
         d4:d4:e7:ac:55:ec:5e:2d:e1:d3:a1:f4:be:8a:13:36:c0:bc:
         29:3b:1f:25:3d:b9:df:1d:fc:b8:e7:10:20:ef:83:af:46:21:
         ff:b4:1f:a1:2f:8a:eb:80:e1:d2:a8:bf:02:38:97:46:f2:e7:
         6e:94:10:3a:cf:fb:29:67:a1:01:0f:e6:ed:ba:87:40:d0:2c:
         e5:f4:90:94:f1:15:4f:4c:93:9c:d6:aa:96:96:91:e8:97:91:
         15:7c:ec:b2:4f:f2:e3:9f:95:56:0b:a0:c4:ab:92:b4:10:86:
         bf:b8:57:80:19:61:c5:f3:1f:ce:ad:64:01:0f:b0:2d:c4:2b:
         d2:1e:63:cf:c0:b2:8f:ef:ca:d2:31:99:2f:0f:2b:cc:0b:33:
         9f:32:e3:76:21:d6:64:ae:df:b7:e1:df:5a:9b:31:04:8a:67:
         64:cc:b1:92:28:a7:ca:dd:84:9d:c5:9e:a8:08:c9:01:b0:9f:
         bf:75:4a:a4:f6:38:6f:24:7b:62:19:64:ce:1d:88:e3:50:02:
         42:98:2b:ef:ea:0b:b0:ab:7b:15:d9:9e:d2:80:5a:b4:a3:5a:
         c3:14:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:11:17 2025 by rpki-client