Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
File:                     mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json)
Hash identifier:          uKozmWxcWfsLGwnhyb5znmb7sbVZXuY3LaQxdkPuyjw=
Subject key identifier:   7E:B4:4C:52:99:D8:F2:46:95:34:E5:4C:E6:26:DE:24:F4:6E:2C:6D
Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87
Certificate issuer:       /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
Manifest number:          7E
Signing time:             Fri 11 Apr 2025 05:52:22 +0000
Manifest this update:     Fri 11 Apr 2025 05:52:22 +0000
Manifest next update:     Fri 18 Apr 2025 05:52:22 +0000
Files and hashes:         1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: zviBZxmJq7lhdFRgxu1m8Z7FsPuoKpPb/el/TMHbdbg=)
                          2: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (hash: PcUbeq2GL9ETBRd6OiM02vny8hMoCCAWI9K7b/wI5lE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl
                          rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
        Validity
            Not Before: Apr 11 05:52:22 2025 GMT
            Not After : Apr 18 05:52:22 2025 GMT
        Subject: CN=67f8ae16-75bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:db:66:16:25:db:19:8d:26:c8:e4:c2:dd:
                    a9:35:85:0b:9e:30:34:47:9d:b2:03:7e:d5:ce:dd:
                    28:77:a5:7d:9e:5c:d5:91:0e:b4:01:e1:1d:53:1d:
                    67:97:f0:49:11:ba:68:ca:f6:f7:12:da:fe:2f:3c:
                    8a:30:e4:64:41:06:9b:b4:0a:c6:38:13:3a:dc:81:
                    7d:d0:89:79:ee:91:4f:59:33:ff:98:da:e3:10:e1:
                    61:2e:9d:be:75:0c:c6:7f:c1:19:9b:4e:35:f4:ca:
                    92:6d:9a:37:71:9f:93:47:a8:8d:76:5d:63:7c:27:
                    1f:cd:46:8f:c2:3d:9c:ba:c3:a9:64:95:4b:62:6f:
                    e9:6a:55:29:19:a9:f5:0d:e9:66:b1:f7:6a:b9:7e:
                    5b:9e:0d:63:92:2a:dd:5a:87:28:19:f7:ad:e9:06:
                    13:32:26:2f:e8:73:87:bd:d1:04:4f:72:a0:17:c7:
                    bb:06:84:98:2b:dc:5b:e8:38:e4:a6:cd:92:28:fb:
                    2f:79:fd:fa:f9:cb:14:33:c3:ac:7d:df:b5:b5:b3:
                    b2:51:94:bb:4d:1d:a1:bc:a0:46:e2:c1:2b:eb:38:
                    3a:10:f0:b5:e3:04:7e:e2:7a:6b:fd:a3:d5:5c:7b:
                    62:54:d6:5c:fa:df:a4:18:74:e1:ce:fa:32:f3:7a:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:4C:52:99:D8:F2:46:95:34:E5:4C:E6:26:DE:24:F4:6E:2C:6D
            X509v3 Authority Key Identifier:
                keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:77:45:8d:c0:cc:3f:bb:fd:13:b5:3a:bf:1c:ec:e3:64:a5:
         80:e2:ef:8a:f8:20:24:58:52:51:3b:2b:c4:5d:73:73:e8:19:
         88:80:99:1b:b5:6e:d3:0a:09:df:34:f4:55:33:32:fe:4a:7e:
         70:b2:0e:bb:64:9d:bb:a3:50:8f:cd:f7:df:97:f6:6a:1f:22:
         90:f3:a9:15:6c:46:bf:d2:dd:86:c4:71:d2:df:c7:c3:bd:bf:
         e7:52:f6:42:18:a9:f2:24:25:57:11:f9:94:da:b2:ca:63:e1:
         f6:27:76:7d:43:22:34:29:a8:44:21:36:dd:29:4e:91:19:05:
         c3:8c:e4:4d:8e:9c:e2:54:27:c1:44:44:c5:4f:6f:34:5c:94:
         63:66:c9:c7:f3:fc:30:de:47:e2:24:3f:8c:8f:48:2c:d9:76:
         bf:65:7c:9d:d7:84:e8:9e:4b:6a:e2:13:cd:34:40:33:23:d2:
         b6:e5:cf:9b:b7:ab:45:9d:df:52:a9:63:c3:34:e0:90:fd:0e:
         96:10:39:4b:2a:38:6d:51:4e:9f:e9:a4:30:26:88:7b:a9:86:
         e7:14:b4:fb:55:3b:4d:1f:c3:cd:39:ca:6c:50:3e:72:64:44:
         83:bf:6e:8b:04:e4:55:70:16:76:27:f7:15:e9:e1:99:f7:27:
         f7:09:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:46 2025 by rpki-client