Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File:                     OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier:          x4FbvtZXFwjlwR4BpwJ2Yt1iuLmvHrefTwlpVc1+QRo=
Subject key identifier:   BE:9D:F3:46:10:1F:AE:35:CA:95:49:F2:56:5A:F3:14:63:EE:A5:62
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       100B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number:          0FEE
Signing time:             Wed 02 Apr 2025 17:33:28 +0000
Manifest this update:     Wed 02 Apr 2025 17:33:27 +0000
Manifest next update:     Wed 09 Apr 2025 17:33:27 +0000
Files and hashes:         1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: G0N2pYNZDyr3RS2vaXlwhc2kE22S2EWf3WAU5HF79AQ=)
                          2: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: iALHLd+5YzK5LOstQ6oyhDwQQiSLhkDuBZ6ChxP5zKU=)
                          3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: ZuWowoqTwj07kawexIZVSZlZASaou8/UbzARaJNqUWU=)
                          4: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: ne4MIrP0LW4fBn3V850OcJJvHAxIdERvgyhfUkcH7D8=)
                          5: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: qGCSs4YlLcFTHUk34r2BgsBt3+2ieINlcsMRB+6cYZo=)
                          6: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: 1qW8PqOKetCMk2x9xmkWWa9Gzva1wDC2Cgrt+Bc+QO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 17:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4107 (0x100b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798
        Validity
            Not Before: Apr  2 17:33:27 2025 GMT
            Not After : Apr  9 17:33:27 2025 GMT
        Subject: CN=67ed74e7-60f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:c4:c8:d5:f1:04:00:61:c4:fd:56:ce:0f:
                    14:1c:e0:15:ca:1f:b1:f5:ae:6e:09:44:99:ca:13:
                    c9:b9:dc:56:05:2b:a6:c3:1c:13:11:89:18:81:63:
                    66:6e:e7:8d:ba:62:53:28:95:b5:f5:93:0b:89:de:
                    1a:08:1b:b1:cf:da:2d:4f:98:ba:3d:7e:cf:0c:a8:
                    83:02:85:8c:77:da:d4:8f:c1:0a:cd:9a:5e:88:f3:
                    61:fd:e6:19:5c:7f:01:b9:a1:0c:36:d9:2e:91:3a:
                    d4:19:e9:ba:62:f2:9f:4d:30:ec:13:1c:79:ff:b6:
                    d4:c1:f9:db:e8:0a:e1:be:60:cb:d8:7f:fd:68:c6:
                    95:2e:f9:e2:07:db:03:bb:d9:89:57:cb:02:1a:9f:
                    be:e8:ac:b9:4e:30:57:13:01:93:d7:6a:f6:7b:bf:
                    ed:d2:4b:71:ef:1b:bf:8e:5a:ce:e5:c7:a6:12:ca:
                    ab:3d:0d:32:d7:5a:f3:4f:98:e2:a9:3e:4c:de:3e:
                    ba:df:f8:9a:48:79:a2:1b:77:f7:67:ee:63:4e:06:
                    d4:53:7d:f7:48:21:dd:1c:99:41:d9:75:9d:4f:ca:
                    af:5e:d2:21:10:ca:03:b9:15:fa:20:53:79:ce:d5:
                    49:70:24:b3:1e:47:c4:5d:68:7a:55:c1:dd:e1:4f:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9D:F3:46:10:1F:AE:35:CA:95:49:F2:56:5A:F3:14:63:EE:A5:62
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:df:24:a7:ad:96:81:8c:d7:92:65:29:00:ca:e4:00:a7:
         5e:6a:10:04:62:d2:30:9f:b6:5f:d7:a7:99:c6:b9:45:c8:0b:
         24:63:fa:05:73:50:88:c5:f4:67:cb:a8:51:d7:cc:0d:a3:27:
         b1:64:ea:05:62:ee:2a:c7:26:7d:4e:42:f0:55:63:6c:66:4f:
         9e:b8:d7:42:65:cd:8f:d5:ad:8d:03:8d:fa:3e:74:21:29:87:
         76:68:23:75:a5:5c:2f:e7:4d:05:df:d8:38:70:72:c5:b2:9e:
         4f:f8:ab:0c:d6:09:ca:a9:7c:ad:e6:9d:d3:aa:c5:11:89:c5:
         8b:d0:62:6e:31:97:a6:b3:02:1e:c8:f0:d9:86:a0:77:77:7e:
         1f:68:e1:3f:99:c6:1b:47:a2:79:18:fc:cc:6b:e7:86:9f:1e:
         f4:45:ae:eb:b1:05:47:3b:aa:4e:39:74:59:de:87:59:ef:28:
         89:26:99:4f:e4:c5:88:97:a7:02:59:41:76:97:f1:9c:4b:1b:
         09:72:4f:3d:ab:f5:f8:11:60:68:01:a5:d4:b6:2b:64:1e:4f:
         70:e7:fb:f5:6f:ae:eb:1e:d6:16:34:c4:0a:28:0c:90:7f:5c:
         5e:7d:c8:d9:b4:0b:77:3d:e7:14:41:de:67:b3:64:ed:1c:06:
         a9:ef:8c:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG
QjA2MDk4OUIwHhcNMjUwNDAyMTczMzI3WhcNMjUwNDA5MTczMzI3WjAYMRYwFAYD
VQQDEw02N2VkNzRlNy02MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAltPEyNXxBABhxP1Wzg8UHOAVyh+x9a5uCUSZyhPJudxWBSumwxwTEYkYgWNm
bueNumJTKJW19ZMLid4aCBuxz9otT5i6PX7PDKiDAoWMd9rUj8EKzZpeiPNh/eYZ
XH8BuaEMNtkukTrUGem6YvKfTTDsExx5/7bUwfnb6ArhvmDL2H/9aMaVLvniB9sD
u9mJV8sCGp++6Ky5TjBXEwGT12r2e7/t0ktx7xu/jlrO5cemEsqrPQ0y11rzT5ji
qT5M3j663/iaSHmiG3f3Z+5jTgbUU333SCHdHJlB2XWdT8qvXtIhEMoDuRX6IFN5
ztVJcCSzHkfEXWh6VcHd4U8X1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6d80YQ
H641ypVJ8lZa8xRj7qViMB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB
MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2
b1MxOGhTdHZfR243QmdtSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBY498kp62WgYzXkmUpAMrkAKdeahAEYtIwn7Zf16eZxrlFyAskY/oF
c1CIxfRny6hR18wNoyexZOoFYu4qxyZ9TkLwVWNsZk+euNdCZc2P1a2NA436PnQh
KYd2aCN1pVwv500F39g4cHLFsp5P+KsM1gnKqXyt5p3TqsURicWL0GJuMZemswIe
yPDZhqB3d34faOE/mcYbR6J5GPzMa+eGnx70Ra7rsQVHO6pOOXRZ3odZ7yiJJplP
5MWIl6cCWUF2l/GcSxsJck89q/X4EWBoAaXUtitkHk9w5/v1b67rHtYWNMQKKAyQ
f1xefcjZtAt3PecUQd5ns2TtHAap74xF
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:27:07 2025 by rpki-client