Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
File:                     O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft (raw, json)
Hash identifier:          7gHGJxMLn72fmEW3jIZKyspsaYGS6i022mFqEMTrV6k=
Subject key identifier:   90:2A:C3:4F:34:87:2D:50:CD:42:1E:A4:B6:77:39:D1:0B:93:DE:A4
Authority key identifier: 3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
Certificate issuer:       /CN=A916D2D2/serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Certificate serial:       0B3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
Manifest number:          0B36
Signing time:             Sun 02 Nov 2025 19:13:34 +0000
Manifest this update:     Sun 02 Nov 2025 19:13:34 +0000
Manifest next update:     Sun 09 Nov 2025 19:13:34 +0000
Files and hashes:         1: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl (hash: AEyx2HhYVsdN5zwCYBBsNUYINu/pG+fnMCyw25R+4b8=)
                          2: E174463E4BD411EAAD10A710C4F9AE02.roa (hash: pPxz0Xj0Q495OhV6+Bhr4ANjqSPrxc3sqmemzntEGDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
                          rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2877 (0xb3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D2D2, serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
        Validity
            Not Before: Nov  2 19:13:34 2025 GMT
            Not After : Nov  9 19:13:34 2025 GMT
        Subject: CN=6907ad5e-0a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:ee:eb:26:5b:8d:b8:dc:44:01:85:58:c7:
                    5c:4d:a9:4f:8c:0c:fb:24:8c:3b:4f:e7:bf:ce:7b:
                    6f:74:59:8b:aa:48:3a:bb:80:7b:26:7e:57:c0:e8:
                    9a:7f:35:e2:54:b5:1a:9a:4c:59:43:37:f5:5c:80:
                    01:dd:c2:9b:82:cc:2b:16:f4:ee:8f:9d:35:04:96:
                    87:15:24:e6:33:2e:fc:d4:aa:3b:c0:84:07:bd:89:
                    e3:c3:bd:f9:10:b7:cc:ad:0c:62:bc:a2:7d:5d:e6:
                    b6:45:a1:f6:29:be:bf:d5:5d:9e:62:67:4c:e9:0d:
                    b3:82:63:f7:e6:da:03:17:08:0e:fc:23:59:e3:95:
                    ed:37:57:7c:b0:02:af:72:6c:68:72:08:4b:51:25:
                    be:01:cd:ce:d7:d3:0c:62:d6:ec:f0:a0:75:f7:bc:
                    b0:11:81:c0:ae:ae:a2:63:d3:a9:57:46:8e:a0:ab:
                    a1:ee:81:7f:7b:bb:40:03:a8:aa:dd:0a:c0:ef:4c:
                    92:22:b1:41:2e:dd:aa:8b:07:da:16:d1:8b:1a:8d:
                    bc:64:08:b2:27:55:3b:67:72:14:06:82:28:cb:16:
                    d8:a1:7f:68:ff:8d:1e:ef:1d:eb:93:2b:ff:da:96:
                    e9:6a:78:0e:ae:77:89:02:a9:e4:de:e9:ca:31:d0:
                    9d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:C3:4F:34:87:2D:50:CD:42:1E:A4:B6:77:39:D1:0B:93:DE:A4
            X509v3 Authority Key Identifier:
                keyid:3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:16:6e:85:f3:be:b7:05:03:b5:e3:53:34:b2:87:9a:ce:
         b6:e6:62:c4:ca:dc:1d:0c:77:cb:3e:e6:a4:d9:fd:ce:c3:1d:
         31:68:d7:06:39:7f:10:58:99:95:a7:7d:07:b2:6b:21:6b:c1:
         5c:80:c9:02:7c:5d:75:8a:01:bc:f4:38:b7:28:0e:86:59:67:
         a2:16:0f:27:c2:27:01:03:79:19:33:57:1f:9c:2b:5e:0f:93:
         97:32:9d:a5:a0:f9:3e:50:5b:4c:d3:a9:fc:40:60:f4:25:3f:
         c4:6b:02:81:2f:89:b9:ea:38:be:9e:76:de:06:70:c0:cc:cb:
         6b:35:ad:fb:60:92:96:d3:0f:34:60:6e:e3:4b:d8:f0:33:5e:
         85:87:cd:12:d1:97:1c:84:a1:4d:a5:79:7d:4e:24:79:0b:02:
         de:57:f7:f6:6f:46:c3:6e:40:5b:0d:5b:4d:9c:3f:bb:9e:03:
         41:31:1d:72:f2:e1:cf:aa:fb:11:1b:8d:36:ff:4e:0d:c6:e9:
         8e:cd:53:dd:f5:3d:a6:31:20:3e:c0:55:3d:3c:3b:c0:ad:e9:
         19:bb:df:0d:7a:69:e7:b2:a3:ea:12:8c:ea:ba:dc:1d:ea:0c:
         18:ab:3a:43:bc:b7:f5:b8:07:8b:c0:77:d4:ad:82:1c:0a:14:
         6f:a0:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:19:20 2025 by rpki-client