Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
File:                     opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json)
Hash identifier:          lfGAccO0GpzuU/I/XYueEJZG7717NE7fG5+t2jkrSoc=
Subject key identifier:   CE:D8:79:C4:58:AE:5C:70:FC:C6:94:B3:92:08:4E:EB:00:B0:D3:62
Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
Certificate issuer:       /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
Manifest number:          68
Signing time:             Wed 23 Jul 2025 07:22:45 +0000
Manifest this update:     Wed 23 Jul 2025 07:22:44 +0000
Manifest next update:     Wed 30 Jul 2025 07:22:44 +0000
Files and hashes:         1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: quE+47mexVm19Ce2ATmgXZLkFuvLg5zxm5f1XLRUmUA=)
                          2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: WHGMZh9P2RExWIeMMaDkbGi0VRoxW1Iai0A3Zb9yWT4=)
                          3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: 6GqewoLZaVKTqsSzxgnIGXRwmj2ShKpEerZMfS7j+UE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 07:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
        Validity
            Not Before: Jul 23 07:22:44 2025 GMT
            Not After : Jul 30 07:22:44 2025 GMT
        Subject: CN=68808dc4-6d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:69:c0:5a:9d:5a:f5:0c:53:aa:c5:44:41:
                    3a:12:02:50:a9:f2:15:00:71:05:f1:44:31:c6:5f:
                    96:65:8a:74:98:d9:c6:5e:8e:92:c4:ad:6d:4d:90:
                    42:94:ac:86:cb:65:82:2c:82:82:83:a1:eb:2a:3e:
                    8e:26:77:a9:b1:b0:b0:34:67:74:cb:6f:1a:f3:a8:
                    3b:eb:5b:54:58:78:50:4d:0c:eb:33:ab:b7:a4:19:
                    36:bd:5e:ba:b9:b9:b8:27:c7:6e:13:79:28:27:f0:
                    ee:f2:e4:53:19:6b:b4:45:19:de:d8:ea:91:eb:7c:
                    3d:19:85:be:f8:0b:b7:6a:86:04:01:d8:a8:60:71:
                    40:0c:ea:5f:a3:3b:f0:8a:47:2c:02:bd:9b:c3:d0:
                    0d:e8:93:f8:b6:97:5a:d0:d4:e5:47:8b:b0:9b:26:
                    8a:f9:37:cf:3b:a8:ee:8c:5f:61:39:49:f7:dc:81:
                    e2:7f:9d:84:6f:84:8d:ab:ae:1d:3d:f6:81:5c:7c:
                    cd:6c:86:ba:31:c3:f5:ce:5b:37:b6:d9:73:3b:a0:
                    c6:8d:a0:ef:cc:b3:ac:16:25:02:f4:46:57:1d:38:
                    69:d1:10:55:dc:d5:8c:33:59:07:2f:0f:1d:09:76:
                    45:b6:a1:02:1a:c3:57:6a:85:34:8e:cf:48:a6:87:
                    80:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:79:C4:58:AE:5C:70:FC:C6:94:B3:92:08:4E:EB:00:B0:D3:62
            X509v3 Authority Key Identifier:
                keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:6d:8f:b8:a5:ed:e3:b6:4a:f5:39:c1:36:56:61:ba:05:
         46:72:44:27:43:e2:f2:68:c4:d6:ab:7c:6b:25:85:04:98:4b:
         46:3b:d4:ec:86:09:b9:4d:5c:4a:9c:3f:66:94:c8:e3:0f:88:
         b8:68:ff:61:eb:a3:34:f2:57:5b:7e:97:3b:6c:12:1a:3f:35:
         36:17:92:fb:2c:21:8c:eb:48:f1:26:43:40:cd:40:6b:d4:47:
         41:76:30:eb:53:ca:6e:02:a3:41:a7:ba:06:40:aa:ef:96:7c:
         2d:6e:75:f3:34:96:ac:54:88:3e:78:a9:e6:00:3b:fd:67:43:
         f8:40:60:c0:94:6b:ad:bf:a2:b1:f7:2b:cf:44:b8:32:2f:3f:
         e9:af:aa:4d:eb:78:76:a4:4f:24:7e:81:0b:30:5f:14:6e:cc:
         b7:70:12:7e:05:05:74:e0:99:24:91:f6:d2:9d:21:a5:35:26:
         54:e9:af:10:70:c9:d6:5c:93:b2:50:f3:3b:3b:84:c7:99:62:
         fc:1f:61:83:ac:f9:14:b0:4c:bf:22:14:cb:71:5a:92:f8:cd:
         e0:85:0b:e1:99:b6:42:42:88:b5:6b:98:26:bd:de:e4:9a:d8:
         57:65:ba:f1:9a:a4:10:63:bd:93:9a:02:3b:84:59:22:86:7e:
         1c:0f:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:53:43 2025 by rpki-client