Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
File:                     0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json)
Hash identifier:          93AZgJrhwY8YVSgQlKvfSY8zx/eqpYWGrkfucYLk25A=
Subject key identifier:   8C:EA:8D:9B:63:15:15:27:BC:EC:CA:5B:E2:25:2D:54:29:F6:B0:62
Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
Certificate issuer:       /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Certificate serial:       0A1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
Manifest number:          0A0D
Signing time:             Fri 18 Jul 2025 20:03:54 +0000
Manifest this update:     Fri 18 Jul 2025 20:03:53 +0000
Manifest next update:     Fri 25 Jul 2025 20:03:53 +0000
Files and hashes:         1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: bffmrIy5xh127RyNxIvwBA07PN/6CwVONixuMeLd9zo=)
                          2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: 3+/t3J2iluPwHXxOgZE7j6ggbnPpq8pNrSyJFTrrBZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
                          rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2586 (0xa1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180758, serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
        Validity
            Not Before: Jul 18 20:03:53 2025 GMT
            Not After : Jul 25 20:03:53 2025 GMT
        Subject: CN=687aa8a9-3b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:92:31:63:b0:88:1f:cc:6b:01:40:c1:1f:f5:
                    cb:7c:47:a6:b6:48:d4:4f:7e:44:8d:de:0e:c1:cf:
                    95:39:7a:5d:6c:26:a1:02:73:51:b0:35:4c:0e:42:
                    d0:7a:9b:1c:d5:78:ed:21:70:49:5e:9b:60:0f:54:
                    2c:97:17:18:8b:4e:5d:cc:d1:9a:3f:81:11:46:3f:
                    c6:23:ac:35:e4:01:96:f7:b7:af:62:72:c5:b5:9e:
                    d6:c4:5f:4d:29:53:0f:b6:21:da:b9:7e:4c:0f:61:
                    d8:58:72:0b:f2:ba:45:80:80:c8:ce:d4:70:db:38:
                    1c:cb:05:11:ba:5e:0e:e6:fb:21:b0:6c:f5:4b:85:
                    ba:e1:e2:af:d1:c4:56:17:8a:fa:74:75:29:e7:bc:
                    05:c5:b1:05:87:48:28:af:14:23:66:f9:70:41:33:
                    92:4e:3b:e5:b8:16:ff:89:9a:55:00:2d:7d:ba:ba:
                    23:5d:d1:17:d6:92:33:02:fa:7e:bb:6d:8c:32:5c:
                    1b:d3:bb:0e:f4:62:9c:d3:d6:b3:b2:fa:f5:71:f0:
                    25:32:d1:de:a2:63:f2:ff:5e:d1:ac:73:ed:b2:63:
                    68:dd:91:af:27:cb:e3:14:51:c6:d3:00:3b:e1:7a:
                    5f:42:44:f5:39:e0:7d:75:94:fa:74:2c:ff:b1:3f:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EA:8D:9B:63:15:15:27:BC:EC:CA:5B:E2:25:2D:54:29:F6:B0:62
            X509v3 Authority Key Identifier:
                keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:71:29:87:71:bf:37:1b:da:39:92:d1:3a:00:b6:ad:8b:54:
         65:ca:62:16:03:04:0d:63:37:9e:fc:5b:b9:78:73:a6:74:41:
         15:ed:c6:12:79:81:03:44:4a:19:6f:ce:29:21:c1:1e:7e:97:
         5c:40:54:d3:b4:dc:a1:9f:0d:09:4a:fc:4c:f4:bf:1d:4b:b5:
         b1:39:a9:cb:63:27:99:f9:f7:54:65:64:7a:f5:74:14:5b:1c:
         67:1d:d9:53:96:6a:4a:ae:f0:99:93:7c:32:b8:84:e1:77:a8:
         18:62:e5:d9:2e:43:7a:51:e9:de:b7:d9:07:0f:f2:c9:aa:a1:
         81:67:21:76:d9:41:16:2e:34:f7:96:da:c0:3f:55:b1:46:d8:
         3c:4a:d5:4b:6c:99:57:ce:fc:c9:cb:27:2f:3a:b6:0a:f7:53:
         e9:ae:19:09:5b:d6:c4:70:7e:84:46:ed:fa:df:8f:d8:a0:7c:
         52:a9:66:e2:28:4d:77:16:5d:1a:7a:19:81:b7:09:7f:e2:1a:
         24:8c:f2:78:04:4f:70:0f:7a:eb:b3:de:24:2d:e4:9e:c1:08:
         b0:79:9d:bd:e6:8f:1c:04:c3:ce:fa:67:22:67:89:c8:d9:77:
         eb:69:29:65:dc:07:f1:19:da:cf:62:7d:32:37:bc:85:25:05:
         a2:71:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:17:03 2025 by rpki-client