Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
File:                     OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json)
Hash identifier:          Cy/V7p8GkpejnkwIZ9XkZgtC8v8oPAnQ6iMwnaApjeM=
Subject key identifier:   83:A8:6A:D5:3D:C3:51:7D:20:47:61:5E:89:23:D2:DB:AD:7D:75:D8
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Certificate issuer:       /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
Manifest number:          7F
Signing time:             Wed 05 Nov 2025 06:56:46 +0000
Manifest this update:     Wed 05 Nov 2025 06:56:45 +0000
Manifest next update:     Wed 12 Nov 2025 06:56:45 +0000
Files and hashes:         1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: 26kqwSkJnLQ43KA2VzzmopR54mo6ZHhQdNZX/pQr9G4=)
                          2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=)
                          3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=)
                          4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=)
                          5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
                          rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
        Validity
            Not Before: Nov  5 06:56:45 2025 GMT
            Not After : Nov 12 06:56:45 2025 GMT
        Subject: CN=690af52d-33b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:1e:40:a2:64:b4:43:4a:4a:2b:4a:8c:2c:
                    6f:a5:54:fa:04:63:17:b7:05:b1:33:6c:d2:78:eb:
                    50:20:de:70:06:e4:91:bd:d0:77:02:f8:04:72:7b:
                    6b:b4:ac:aa:14:aa:42:d9:f0:c8:2d:af:15:e5:aa:
                    d3:aa:5a:0b:29:d4:2f:e3:d1:d4:7e:a2:d5:1d:29:
                    00:8d:4e:54:fe:6e:74:c6:67:39:23:a1:db:87:eb:
                    67:ab:5e:29:9d:0d:10:a6:82:97:ec:76:33:f6:2a:
                    c0:9d:7c:c6:73:a9:08:ca:f4:98:fc:c6:3a:92:67:
                    fb:7e:eb:63:e7:68:32:87:22:87:8d:88:4b:7d:a1:
                    4d:37:6d:bd:43:19:23:28:f2:e6:94:23:36:48:44:
                    d9:b7:d7:53:1c:eb:c9:c6:00:c2:71:ff:ad:60:0f:
                    68:0a:f7:4b:f1:e3:27:c2:e3:15:e5:9a:b1:b8:21:
                    d6:76:d9:d8:53:c8:bf:f8:d3:81:54:09:68:2a:0b:
                    24:5c:ce:93:ab:44:cd:e5:bc:ff:02:f8:20:21:2b:
                    f3:cb:1c:a6:05:9c:b0:de:4b:6c:f3:6b:21:87:83:
                    e3:6a:c3:e8:91:17:bb:c8:96:d9:03:65:8b:24:fa:
                    4c:27:b1:e1:68:18:d4:a2:8b:e1:a7:82:b4:73:30:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A8:6A:D5:3D:C3:51:7D:20:47:61:5E:89:23:D2:DB:AD:7D:75:D8
            X509v3 Authority Key Identifier:
                keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:be:89:ef:ae:69:6a:d9:c9:3c:aa:af:d6:c2:c7:e2:49:36:
         d8:28:1e:cd:d0:a1:f6:39:72:49:1a:e8:d8:36:91:33:18:58:
         ed:35:4d:15:5c:a6:09:84:f8:a4:d9:e6:4a:ac:00:99:ba:aa:
         7a:ae:88:0c:a9:e4:61:7d:56:34:d1:df:09:4d:fe:01:3e:33:
         93:0e:44:d4:73:73:61:d0:12:e0:76:bf:5c:71:ff:8a:85:77:
         97:dd:ec:41:af:d6:03:cc:96:8b:d9:8b:65:dd:b1:68:5c:6a:
         b3:1c:8c:d0:8e:6f:b8:cf:3a:9e:91:65:9a:45:a1:ea:03:95:
         4f:6d:cf:33:7f:65:ba:cb:d9:98:a7:88:e0:b7:6c:63:dc:9a:
         49:5b:94:74:e0:94:22:a5:a0:c1:7e:d9:3b:78:41:d1:2d:aa:
         dd:3f:3f:fd:7d:ef:62:22:26:1d:50:63:a3:61:7a:b8:53:d6:
         df:07:49:ab:c0:51:08:b8:26:d1:36:af:09:38:35:96:64:45:
         1e:4a:ea:dc:4c:06:02:83:15:b0:a4:f8:69:1f:c0:05:48:46:
         98:dd:0c:80:06:ed:5b:6c:9e:31:c2:18:11:8c:0b:47:4a:c6:
         9c:6d:f5:bc:f3:53:28:35:f6:52:1b:75:96:d9:da:89:35:3f:
         a4:9e:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:20 2025 by rpki-client