Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File:                     Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier:          dgScEn9RMkLthNvDd3JdV6KKEoDf4HfKre98R0VvGUg=
Subject key identifier:   A8:0E:E4:79:5F:F9:25:4E:AD:91:59:3A:04:0F:A5:DF:7E:DC:07:61
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number:          69
Signing time:             Sat 07 Jun 2025 06:27:01 +0000
Manifest this update:     Sat 07 Jun 2025 06:27:01 +0000
Manifest next update:     Sat 14 Jun 2025 06:27:01 +0000
Files and hashes:         1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: g3eUUtlE1X/N9GrPxDI9Mhwz5Xq/8SCQlqRJm9z1iag=)
                          2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 06:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: Jun  7 06:27:01 2025 GMT
            Not After : Jun 14 06:27:01 2025 GMT
        Subject: CN=6843dbb5-c4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:2a:4d:35:ff:7f:fc:e4:75:e1:ac:a2:ca:
                    41:c1:7b:2d:6e:9b:51:5f:21:de:fc:f2:1d:31:a1:
                    a2:59:20:7d:d1:17:fe:30:b6:f7:bd:f3:88:10:4f:
                    55:88:41:09:4b:67:c6:42:0b:27:a4:73:34:7c:dd:
                    f8:8e:00:9c:b3:19:28:8f:75:7f:c9:c8:3e:f7:d8:
                    57:64:f4:18:64:f4:79:e8:89:66:5e:bc:5f:d3:fc:
                    32:fe:bb:5c:32:72:05:80:b5:ba:d5:83:c0:37:5c:
                    81:bf:bc:5f:ae:5a:da:cf:36:cd:0c:12:20:76:de:
                    64:57:1f:c2:6e:5b:f4:9d:79:d0:c4:b9:a2:c7:6d:
                    14:47:90:ad:01:ff:74:94:83:17:b8:c6:c0:db:a8:
                    89:e9:3d:ad:de:e1:c5:e3:e6:f9:b8:40:d9:88:06:
                    96:5e:7d:31:04:99:6c:e1:46:f6:8a:1b:52:8e:44:
                    39:b9:b3:b3:ff:c6:bb:ff:59:87:c0:43:12:c9:be:
                    b8:b4:95:1c:e8:24:b7:bc:cb:92:39:66:4f:ef:f9:
                    54:69:f4:c1:5f:66:26:67:f9:8b:95:a6:48:3a:6b:
                    af:5f:6c:ca:b8:a4:52:db:f5:6c:e1:a8:8c:5f:f5:
                    cc:cf:72:66:3a:31:8a:f7:07:47:b4:63:98:d6:f2:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0E:E4:79:5F:F9:25:4E:AD:91:59:3A:04:0F:A5:DF:7E:DC:07:61
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:dd:19:68:cc:cd:d3:e8:91:46:5f:d5:fc:e2:32:75:d0:1a:
         0a:4a:f3:38:cc:8c:f0:36:76:51:6c:49:ca:f9:e1:9c:e5:38:
         1e:18:d7:8d:32:70:ef:0f:49:14:8e:58:98:c0:98:ad:37:a8:
         d7:b8:b5:d4:f0:03:c7:69:3d:3d:db:70:44:ab:33:7e:91:15:
         b6:6c:a6:b4:a8:90:e5:ce:23:15:72:b9:87:81:28:e9:68:99:
         f3:2e:32:52:e3:3d:1e:4d:1c:87:8d:cf:cf:91:71:a2:ad:cd:
         f2:68:bb:d1:bb:f9:d1:bb:39:ab:ec:05:34:21:55:3d:9e:e3:
         71:a8:18:a8:9f:e3:4c:9f:87:2d:8b:98:a7:4f:19:a0:bc:44:
         71:b3:80:12:da:6f:40:d2:41:05:57:5f:a8:55:6b:47:cc:c7:
         4e:f6:72:63:11:9a:f4:ad:e2:56:25:f0:69:07:a1:02:f1:9d:
         9a:c7:c9:3f:75:26:e7:35:e6:c5:60:18:bb:0e:a7:a0:ab:09:
         5f:b8:c2:9d:95:c4:67:a9:a4:de:d2:a9:6b:37:a9:53:b4:c2:
         b1:22:6f:d9:0f:c0:4e:05:07:c7:e3:0a:42:12:32:a9:89:9e:
         f7:d2:78:26:12:3a:4b:ef:88:c6:d4:5d:ca:75:28:a9:6a:41:
         da:4f:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:54:38 2025 by rpki-client