Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
File:                     OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json)
Hash identifier:          cJ1LpOiSreYkoKzwCIwKp1C4XOynuWHhHLbuj3hNt74=
Subject key identifier:   8D:C6:B9:B7:96:D4:58:32:3E:10:7D:9A:D9:39:AA:CE:36:67:8C:2B
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Certificate issuer:       /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial:       062D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
Manifest number:          0622
Signing time:             Sun 20 Jul 2025 22:56:24 +0000
Manifest this update:     Sun 20 Jul 2025 22:56:24 +0000
Manifest next update:     Sun 27 Jul 2025 22:56:24 +0000
Files and hashes:         1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: XwVU6tnJpskJxMR83mItM8Jqq+p60re4n0Wmve6ATbo=)
                          2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: vcP/S0izUQbA7Z/0jbMqfJjGpHZIaNp2jddGsZhjHPI=)
                          3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: EoEXlCI1GOehyvV1dOn2OebjZ7e0VJ5M5h2oFDhhyXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 19:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
        Validity
            Not Before: Jul 20 22:56:24 2025 GMT
            Not After : Jul 27 22:56:24 2025 GMT
        Subject: CN=687d7418-2f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:ec:f8:37:bf:4a:8f:ee:89:25:11:05:0f:
                    57:f3:e2:85:b8:9f:04:85:90:c9:a1:91:99:d2:0b:
                    c3:2e:a2:46:11:3a:f2:15:88:c4:30:38:2a:e1:65:
                    a4:6f:b8:62:72:c1:6d:72:93:9e:de:7d:64:7e:95:
                    06:5f:2c:87:aa:2b:8c:f9:ae:8d:03:83:d9:27:f0:
                    d7:8a:06:00:5c:6c:e6:e5:88:8c:e9:15:cd:eb:1c:
                    62:a1:86:23:cc:7c:e0:3d:9d:8d:71:83:83:01:8c:
                    57:55:b7:a0:a0:20:fc:f6:73:f5:dc:c4:97:15:c7:
                    3a:a6:10:67:a5:11:9e:77:0d:63:a9:c8:6f:2e:a1:
                    7e:6b:07:03:bc:9a:50:8f:cf:2c:c9:b6:7f:8b:3c:
                    a3:c2:98:04:a3:98:55:9a:6b:d9:71:a9:fb:7c:fb:
                    87:04:89:36:14:48:de:6d:c0:a8:62:97:f8:fc:7c:
                    4b:d5:cc:d8:dd:fc:72:fe:16:81:1c:23:93:4c:44:
                    a3:65:f0:f1:5c:71:5c:88:67:bf:c7:43:41:9f:f0:
                    c1:89:d3:1a:fb:89:e5:30:a9:c2:e0:18:6e:be:ee:
                    f4:c9:c0:00:ec:c2:cf:02:6e:ee:b2:b8:27:51:07:
                    2b:ee:6a:13:a0:43:7c:32:83:e4:58:b9:ea:7c:39:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:B9:B7:96:D4:58:32:3E:10:7D:9A:D9:39:AA:CE:36:67:8C:2B
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:54:da:99:3b:06:55:03:fd:c9:12:c6:ea:35:89:f7:fa:
         33:61:37:bc:4e:5d:d5:12:16:24:86:af:53:fa:aa:93:8f:d8:
         82:6c:a2:54:1e:29:f7:7b:87:61:dc:48:d4:28:54:9e:f5:b9:
         b7:c2:a1:9b:bd:9d:d4:60:b6:4d:b4:60:1e:f0:79:d7:e3:19:
         2f:8d:72:8a:9d:dc:cb:e7:35:6b:d1:be:4c:73:2b:6b:b7:cb:
         c2:2f:20:5f:3c:fc:40:e0:ed:b2:df:e1:eb:87:ca:fa:ac:29:
         a1:c0:a7:5b:14:0e:11:c5:3c:7a:7b:67:1e:28:2e:08:ea:4d:
         6d:5c:22:1b:0d:8c:e8:ed:b1:89:78:4a:1f:84:00:e2:26:84:
         6b:62:c0:a2:ea:0f:9e:19:81:2c:68:23:74:48:38:15:de:e0:
         ef:4d:30:6a:1a:58:18:f3:97:8f:62:5e:82:e4:8e:62:d5:4a:
         86:65:7e:a2:77:ce:57:59:08:81:63:d6:a1:cc:08:ad:59:5f:
         cd:87:4c:f9:83:b4:6f:0f:af:0a:fd:96:94:78:60:55:6d:08:
         10:c3:5f:8c:7a:e6:c1:4c:06:61:d4:dd:37:c5:5f:80:a6:22:
         80:6e:b9:ff:44:18:5c:af:cb:37:c6:8d:f7:b4:07:ab:67:1e:
         a7:27:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:04:44 2025 by rpki-client