Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File:                     kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier:          mK4/WkjOijSeTbAO0+9kperW+2Y/yHmrJ2AAt0AtXCs=
Subject key identifier:   36:C1:48:E7:48:86:DD:C8:07:49:C1:89:98:BA:0C:8A:59:98:80:EE
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0C4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number:          0C40
Signing time:             Tue 04 Nov 2025 18:45:13 +0000
Manifest this update:     Tue 04 Nov 2025 18:45:13 +0000
Manifest next update:     Tue 11 Nov 2025 18:45:13 +0000
Files and hashes:         1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: yS7idRPiYiOqLlHmnbar+e3l5RR3LH60W7A+0Hfnd+w=)
                          2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: CgIHdazzVOF6QA1a4XIGPV0wyY67xaJD1pxnbNXHCvI=)
                          3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Nov  4 18:45:13 2025 GMT
            Not After : Nov 11 18:45:13 2025 GMT
        Subject: CN=690a49b9-580e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:35:27:88:75:64:d1:ec:f9:4a:65:8b:62:
                    0b:2b:4c:36:89:df:de:c4:b1:85:ac:cc:66:71:f7:
                    af:61:ab:6d:6f:b2:e8:49:db:7b:ee:16:f8:b2:61:
                    b0:d2:38:dc:ac:b6:cc:41:8d:fa:c2:e3:c8:93:af:
                    ed:2c:95:0b:93:e6:fc:33:34:c7:6a:4b:c6:f9:55:
                    64:bc:c4:6d:67:dd:8b:ac:a8:ee:2a:18:5a:8c:53:
                    ea:af:ce:92:f5:45:2f:b8:01:92:7a:ea:57:61:1c:
                    5b:b6:5f:bc:7b:d0:03:f9:a1:1f:61:9a:3e:d8:04:
                    20:b9:be:12:92:87:a6:da:62:60:25:82:93:76:11:
                    b7:cf:d2:2a:52:6f:e9:1e:fc:cf:1b:7a:41:e6:b2:
                    02:d6:70:b4:fc:1f:8a:f4:33:4e:fa:2d:3b:c8:53:
                    0e:3e:a1:5d:a4:14:aa:83:eb:81:51:77:58:f4:b8:
                    0d:a8:9c:7b:61:1b:2a:0b:37:9c:43:d6:05:7a:03:
                    bc:04:de:a1:f5:f0:40:23:b9:68:36:72:82:8e:1e:
                    91:07:28:bc:e9:54:6d:98:d8:93:80:87:ea:25:a6:
                    ce:a9:95:45:9a:eb:29:00:60:e4:d9:dc:3c:d1:9b:
                    ea:ba:25:20:58:5b:44:b8:ef:a4:e4:19:62:f4:1a:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:48:E7:48:86:DD:C8:07:49:C1:89:98:BA:0C:8A:59:98:80:EE
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:41:4d:f5:3c:e3:f6:08:ca:3c:02:b2:cf:20:d7:d8:8e:59:
         c4:39:10:88:90:36:91:17:1d:68:95:17:76:8c:05:63:ef:cd:
         83:27:ec:85:1d:63:4a:69:51:6d:3b:01:67:02:97:f0:2d:8c:
         6e:1e:c0:88:3a:ae:6d:f0:78:48:6f:0c:22:43:de:83:d3:cc:
         6a:75:90:fc:a6:bd:42:c3:51:ba:cf:56:18:3e:05:1b:86:26:
         0f:16:6a:97:7c:fa:ff:f3:8a:1a:e4:a6:20:7c:62:0c:9d:f3:
         c8:70:57:af:b9:59:fb:74:5f:e7:5a:16:22:4f:e0:6d:5f:c4:
         f1:9b:22:8c:69:18:ae:36:16:01:5c:32:63:f8:6f:73:a1:ac:
         11:2d:4c:60:d8:54:73:5e:df:95:42:2c:05:59:47:f5:ca:67:
         99:ae:db:fc:0f:33:a7:54:3f:3c:3b:7b:e8:2d:37:27:82:79:
         b9:13:ce:f2:bf:eb:2d:47:ed:ce:37:6c:11:7c:fd:45:81:ae:
         9a:1b:2f:42:a2:ce:94:a2:f8:14:41:ea:8f:49:14:a0:b7:94:
         86:18:27:02:b0:09:0b:36:ba:9a:68:4f:3b:f9:13:08:36:5f:
         ce:a2:ef:b8:08:f3:c1:d4:f9:25:0b:5c:ba:61:12:19:95:24:
         4f:31:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:17 2025 by rpki-client