Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
File:                     w0Ozu4On4j-tla-NIytSBSoP3nI.mft (raw, json)
Hash identifier:          MoLNnHmQnzFTNxGLHJH476jAELnh10gOJSxeiM/Eiw8=
Subject key identifier:   53:2F:D2:07:1E:D1:EE:72:E8:1A:A5:FD:D8:E6:18:43:07:9D:C6:CF
Authority key identifier: C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72
Certificate issuer:       /CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
Certificate serial:       09A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
Manifest number:          098A
Signing time:             Tue 10 Jun 2025 20:03:20 +0000
Manifest this update:     Tue 10 Jun 2025 20:03:20 +0000
Manifest next update:     Tue 17 Jun 2025 20:03:20 +0000
Files and hashes:         1: w0Ozu4On4j-tla-NIytSBSoP3nI.crl (hash: PmICSu0jwkJFRpwGmKbDpQYzGZfHBbySx5wDDbWZ4j4=)
                          2: 8A480EFE80EE11EBA01B8C79C4F9AE02.roa (hash: nGCSzyeCGWb2by2Ok6xODoRNUK8MF0tF735aj9iyb9Y=)
                          3: 63FE6F90232411EB87A6CB0DC4F9AE02.roa (hash: MFp+TQFdjUkWq8YrpZoPX+xKXmHG4qHFMaA4FACPOxE=)
                          4: 023564E6D5BE11ECA8BE4666C4F9AE02.roa (hash: wHZWRXwKbEVincv7YJ3e25Slz3Zw4ni306PAKoBPm2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl
                          rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 20:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2469 (0x9a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C66B7, serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
        Validity
            Not Before: Jun 10 20:03:20 2025 GMT
            Not After : Jun 17 20:03:20 2025 GMT
        Subject: CN=68488f88-cb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7f:e3:16:66:3d:81:0a:3b:bd:e0:c1:d1:ce:
                    84:90:17:13:59:14:11:0c:fc:17:11:4a:c0:b9:bb:
                    49:50:fd:4f:2f:8c:7d:c7:a4:94:99:5e:a1:73:95:
                    dc:78:10:09:31:d5:61:f8:2a:9f:1f:43:42:6d:4b:
                    5c:0a:11:14:99:88:f5:c0:30:5a:51:d9:22:57:a7:
                    c3:8e:57:b9:a2:e5:37:6e:84:86:4e:fe:02:04:e8:
                    54:25:d8:9b:2d:9b:12:78:71:da:90:8a:39:2e:22:
                    c8:08:23:e8:3d:4e:08:66:2b:38:a3:2b:30:74:e3:
                    13:bb:3e:99:14:5a:d1:41:28:89:55:c6:03:73:1b:
                    a4:51:4c:d0:a8:97:86:d9:5f:dd:c6:a0:78:60:9f:
                    0b:ae:c9:e0:6e:11:d9:62:d4:71:d2:2d:fc:1c:bf:
                    19:4f:9c:e7:d4:80:d8:2f:21:5c:4d:33:e9:11:bf:
                    19:fb:b1:58:36:a4:b8:db:c5:03:6b:e5:97:fe:06:
                    5a:02:1c:8f:3f:46:de:8d:a5:e9:96:be:cd:10:10:
                    f8:6b:2b:fe:0f:26:5b:e3:77:d6:4d:d6:bc:24:ba:
                    78:cf:81:6c:0c:ee:62:f4:08:8f:8b:f1:7e:b8:4a:
                    db:48:0b:0a:80:9e:82:fe:ab:44:e6:86:8e:75:17:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:D2:07:1E:D1:EE:72:E8:1A:A5:FD:D8:E6:18:43:07:9D:C6:CF
            X509v3 Authority Key Identifier:
                keyid:C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:3f:55:8e:34:e7:e1:c9:40:65:4d:89:e3:76:a8:a7:bb:
         f1:9c:ea:98:74:01:9d:52:93:aa:fb:5d:0d:0f:16:c3:c2:bc:
         b1:ee:cd:d3:24:f9:79:3d:64:72:66:72:ef:7b:7b:44:8d:ef:
         28:09:6b:65:09:b4:7c:47:d4:a0:ae:b8:a0:64:b0:85:4f:84:
         07:8d:ac:aa:b2:e5:7d:65:7d:15:69:22:53:cd:02:2f:93:b4:
         b3:d5:7c:1f:be:ef:e3:10:a2:67:da:3d:9f:86:6c:20:7e:e8:
         81:bf:75:9b:9a:7f:c8:c4:da:69:de:28:37:a6:de:96:ee:dd:
         6b:11:48:e0:90:b0:d1:2f:c4:68:c4:55:e7:2c:02:80:0c:95:
         bb:e1:9c:25:c4:98:a2:c0:84:3f:5b:43:11:a4:1f:6a:8a:c4:
         16:ac:6c:81:1a:2a:3b:2e:df:a0:ea:34:6c:4f:12:3f:75:e9:
         33:39:79:69:f7:2c:d0:43:b5:9b:6a:01:bf:a5:58:69:f0:29:
         85:1d:30:c0:9a:35:77:a7:8f:8a:fc:f2:7f:da:c1:49:f6:48:
         c2:25:a9:0b:a3:ce:35:a4:64:cf:0b:20:87:d6:e4:0f:dc:02:
         23:76:16:8e:41:81:b1:cd:25:5c:d0:dd:52:29:f4:d4:c5:8a:
         ef:9b:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:36:57 2025 by rpki-client