Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File:                     8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier:          bvi8f684kwAZbapiM2E11P1NPqSvRxvOG2vTtbvxp0M=
Subject key identifier:   99:6C:4A:FD:F3:2D:AD:34:8D:6C:9D:1B:E3:C2:EE:58:6C:B9:47:73
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer:       /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial:       095D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number:          0955
Signing time:             Fri 30 May 2025 21:00:06 +0000
Manifest this update:     Fri 30 May 2025 21:00:06 +0000
Manifest next update:     Fri 06 Jun 2025 21:00:06 +0000
Files and hashes:         1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: P9REXf2jz0NQ2IDPAb0C7gYQfJtcN7PK+qexS6CPu/Q=)
                          2: 55635E7C97B611EA97FDCB6EC4F9AE02.roa (hash: PUUYX8ppf+3MShGt8AoPK4+W3CKH5Xedh9Wmflb/psI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
                          rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397 (0x95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
        Validity
            Not Before: May 30 21:00:06 2025 GMT
            Not After : Jun  6 21:00:06 2025 GMT
        Subject: CN=683a1c56-b0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:61:ed:d1:50:7f:22:26:94:a4:ca:56:e5:
                    4a:d7:54:a7:5b:02:7e:ad:71:3d:8e:b3:cc:c4:33:
                    fb:ac:62:cb:a8:14:da:c3:86:90:03:b4:38:37:46:
                    ae:87:c9:11:eb:0a:b3:23:a8:87:e4:fb:db:67:d9:
                    cd:5b:e8:ea:99:ce:d4:c9:d0:5d:09:76:5d:c0:fa:
                    1c:1d:cb:ac:d8:d4:af:87:51:81:75:b9:d7:0e:5a:
                    3d:b4:ec:75:ba:71:48:00:34:90:95:02:5a:37:87:
                    cc:28:2d:a7:a9:90:f1:c0:31:a9:70:95:3f:c5:95:
                    0a:fc:fa:58:33:38:28:6d:70:8e:bb:47:24:16:74:
                    42:56:b1:d9:05:97:34:7a:ba:46:e0:65:2e:4f:f2:
                    84:1b:da:05:87:96:0c:94:2a:8e:b7:ef:b4:8d:f1:
                    ab:51:9b:98:85:c5:54:5a:42:5a:84:88:f1:5e:a8:
                    6f:89:01:15:eb:04:19:ef:88:27:05:dc:66:97:b6:
                    60:2a:b1:28:21:cf:d1:ee:07:ef:2f:99:6e:b1:fd:
                    57:6e:d5:9a:d9:41:31:df:a2:e3:90:62:66:b5:08:
                    f1:35:09:5a:77:9a:b1:81:9f:71:7d:8c:da:2e:41:
                    60:10:6f:45:a3:39:89:24:ab:9b:f0:cd:a6:1c:d3:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6C:4A:FD:F3:2D:AD:34:8D:6C:9D:1B:E3:C2:EE:58:6C:B9:47:73
            X509v3 Authority Key Identifier:
                keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f3:a5:b7:46:fd:74:32:c0:62:59:67:e1:e4:06:83:61:aa:
         f1:ac:b6:52:5a:43:f6:6e:d0:52:c3:b8:39:b4:ae:7a:9a:32:
         20:b0:b2:9f:e1:bb:25:9e:1b:b4:5d:3f:10:89:64:60:41:00:
         51:cc:36:29:0e:45:98:a1:79:3a:04:0e:5d:30:81:5e:71:eb:
         ce:f2:08:f4:e1:83:3e:9c:f8:cc:aa:d9:b0:63:5b:22:1a:14:
         f9:25:0e:57:3e:30:bb:b6:27:15:6b:92:e7:3c:9a:71:dc:63:
         d0:e0:b2:3c:2f:2d:0a:8b:9a:6e:7a:14:80:96:23:66:c9:08:
         de:f0:de:68:23:a3:31:82:0c:0d:23:14:e9:fe:9c:86:4e:b7:
         16:a2:c4:fd:3f:2e:2a:9e:14:53:8a:5d:ed:c2:9d:cd:02:5a:
         dc:e9:82:35:77:66:90:b3:b1:78:c8:dd:ec:55:85:ac:c2:c1:
         f4:c5:3f:5f:4b:8b:ae:7e:7a:73:60:21:e4:da:c3:a2:69:58:
         d3:df:94:3b:9c:7f:7d:04:98:57:a5:4a:70:5a:41:4e:dd:0f:
         8a:00:19:ba:a2:4e:27:a7:fb:77:ff:84:9b:67:f4:15:5c:96:
         ab:75:15:fa:76:6c:0e:4a:61:c7:4c:4d:2c:e5:00:89:15:9a:
         d5:96:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:31:58 2025 by rpki-client