Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File:                     OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier:          5t4poTkDiIGbreodp3E+JeG5+8+5GXSIxjPWUXPVM2k=
Subject key identifier:   03:3F:27:8D:81:FF:C8:C3:C7:D8:E6:0F:54:0B:73:6E:DC:0A:9E:A4
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       102E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number:          100C
Signing time:             Fri 30 May 2025 17:37:33 +0000
Manifest this update:     Fri 30 May 2025 17:37:32 +0000
Manifest next update:     Fri 06 Jun 2025 17:37:32 +0000
Files and hashes:         1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: JyICPsA5ryXzYQz+vBZy2s5FrxlD3sE7hpETulKT4hQ=)
                          2: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: bytWuNzrLQw9v+QMqc5rrIvyHwJBakcmOmXht2Npskg=)
                          3: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: wikUFUY0h7gGqht6lrAAGNzDvHHVKOxeJ+8mIhyaOLg=)
                          4: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: rjaSyAzG4Vkfbg5uZuSjD+n9EriKOHglMvv9YunPzH4=)
                          5: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: ZbaNyd2npVQ7n+Gz6EMJlX5yHpd7tPiQHaPoJPJgyBc=)
                          6: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: ZsKWGtKVq3aoWptNQmv7xVjVnY/4jXxJBvjnB+HtK+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4142 (0x102e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: May 30 17:37:32 2025 GMT
            Not After : Jun  6 17:37:32 2025 GMT
        Subject: CN=6839ecdc-dbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:c7:75:7d:7b:f0:8d:3f:cb:05:18:88:8c:
                    ed:97:1f:e0:ec:fd:92:ce:30:2a:71:aa:a2:1e:91:
                    53:9e:d1:ce:75:92:3b:55:e1:8d:00:de:b1:20:b0:
                    23:bc:6c:fe:d1:70:e3:ea:f5:ae:71:28:fd:49:25:
                    29:f3:54:29:b0:f2:e6:f1:b0:22:00:ef:02:55:c4:
                    34:6a:67:05:73:7c:09:1c:aa:3c:c7:0d:df:ea:d0:
                    98:19:3a:67:55:d0:5f:29:59:65:c3:cb:2f:18:d7:
                    c1:92:71:4d:2f:fa:8a:87:2d:91:51:78:9a:1b:b1:
                    bf:6b:1a:3f:53:c4:2e:3a:e2:f6:98:5f:0b:2a:ac:
                    62:25:67:ae:80:4f:8b:43:58:22:3d:35:17:f5:26:
                    44:70:e6:ba:f8:83:98:e9:ac:0f:6a:72:ef:65:a2:
                    4b:41:86:83:f6:76:80:c4:d6:23:16:49:b6:54:08:
                    f3:94:82:db:fd:41:d5:e3:19:52:de:01:78:dc:7b:
                    b4:c8:f6:af:c0:32:7a:ae:70:40:6a:f6:4f:38:d2:
                    9a:f3:8c:f3:75:d9:aa:51:ee:a0:1a:3f:c1:a7:aa:
                    4f:cb:b1:be:26:04:77:88:d1:8d:f5:6e:ca:9a:8f:
                    23:e5:b6:9f:4d:a3:68:49:fc:6d:6b:58:13:2b:79:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3F:27:8D:81:FF:C8:C3:C7:D8:E6:0F:54:0B:73:6E:DC:0A:9E:A4
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e2:bb:87:47:4b:eb:f6:36:d8:0b:39:33:0e:10:4b:2f:09:
         73:98:8d:cb:fe:13:77:6c:5a:8b:b4:ec:1e:f2:eb:5f:83:84:
         b2:ef:b4:99:b3:fb:e7:c3:4e:80:a6:71:1c:a3:70:fe:07:52:
         55:dd:30:e5:d8:1f:1e:fc:cc:2d:f2:05:f9:79:8e:d1:5c:5d:
         aa:ff:0a:72:09:31:66:97:65:d7:f3:ac:93:33:9a:a4:09:b7:
         91:35:77:58:31:b0:98:8e:fa:f9:3c:9b:c9:b0:1a:fc:12:2a:
         f5:4c:ac:92:75:f5:6f:6d:c5:4b:05:f9:59:78:40:48:e7:84:
         e1:d4:68:f6:eb:67:9c:74:39:10:d0:0d:a8:bb:89:75:28:93:
         71:49:ed:7d:50:be:be:47:95:79:25:70:e8:84:cf:9a:92:77:
         98:68:17:e5:bd:04:92:f3:2c:b2:e9:7e:3e:09:4c:80:07:62:
         54:2b:ef:9e:6c:89:e1:93:f3:ed:18:39:d2:92:7f:53:e7:bc:
         bf:b5:5d:df:b0:30:65:a0:45:96:03:98:9d:74:74:d3:c9:bf:
         b8:bb:e5:d8:78:64:be:6d:08:e3:ad:db:9e:c4:fd:3b:fa:f2:
         01:d9:d2:bb:3d:f3:07:f2:c8:a3:91:75:f1:c2:a3:aa:97:fb:
         c4:7b:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:36:08 2025 by rpki-client