Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File:                     OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier:          2Hm0EQAqyFEotvKXjmSOydnJQgkpDhBhtafZFxSNkZg=
Subject key identifier:   BB:74:A3:AD:2C:8F:C0:78:B2:FE:91:D9:3D:6F:46:92:E1:47:21:83
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number:          0721
Signing time:             Tue 04 Nov 2025 21:59:41 +0000
Manifest this update:     Tue 04 Nov 2025 21:59:40 +0000
Manifest next update:     Tue 11 Nov 2025 21:59:40 +0000
Files and hashes:         1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: jv/WPYVgwC2Lypf2ovI7c6r6eSZacPyHPhfZWrk7AOo=)
                          2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: o5gUgXmaKSWEv0MLbiES70rfGmATgfeJQNOpimJu/i0=)
                          3: 539DCE8CB96711F0A4534519C4F9AE02.roa (hash: T1UinSJPlgyqj9vieRpzECJMaK5yxF/I35rOPxKOZe0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Nov  4 21:59:40 2025 GMT
            Not After : Nov 11 21:59:40 2025 GMT
        Subject: CN=690a774d-aaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:51:1d:07:18:03:30:1e:64:70:4f:eb:66:
                    91:a4:0f:49:49:28:91:36:ad:18:56:c5:28:b4:a4:
                    4a:fa:10:2c:36:cc:0c:6d:ca:74:6b:bf:92:f2:e1:
                    ee:64:c5:94:67:37:89:04:cb:d1:56:7f:93:04:4c:
                    0c:00:51:ae:00:de:bd:59:79:fd:31:35:50:0a:e4:
                    ce:5f:2e:68:29:bc:f1:d8:60:1a:e5:b7:95:cb:54:
                    38:47:34:e7:cf:62:e4:bc:42:63:34:6e:bc:de:1e:
                    a8:7b:bb:7c:34:bf:fe:f0:65:34:f6:56:0c:d4:f4:
                    01:db:5a:d1:49:c6:7e:69:3a:d8:af:da:37:e9:2a:
                    4f:57:18:be:0c:cd:01:ff:08:45:2e:c8:80:11:e4:
                    8f:42:25:b1:88:62:55:8a:83:bc:2c:93:f4:99:6d:
                    51:80:4b:9b:ba:2f:0e:78:8f:7f:d3:fe:11:2a:79:
                    4f:f1:4e:05:92:1f:34:f1:0b:f0:45:48:d2:6a:b5:
                    4b:ec:ba:7c:1b:f3:cf:db:3a:c9:2a:0a:19:c9:05:
                    fd:28:71:e2:9a:f8:b7:1f:f1:c5:2a:9c:24:08:5c:
                    2b:4c:9b:41:17:04:79:31:c5:4e:21:dc:ca:73:86:
                    a7:17:93:d8:45:bc:7a:54:5b:50:98:f2:3f:95:b3:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:74:A3:AD:2C:8F:C0:78:B2:FE:91:D9:3D:6F:46:92:E1:47:21:83
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:8d:08:65:3c:ee:c0:d5:76:20:87:b4:0b:2f:44:d0:6f:
         c1:a7:db:d1:ab:99:e6:79:25:3e:8f:47:eb:04:2d:8a:47:e5:
         81:2c:f7:05:54:16:e2:31:09:0e:f3:cd:14:ee:db:24:27:49:
         ba:3c:3a:d9:ca:f7:92:49:56:fc:4b:4c:f9:91:29:8d:47:f8:
         ac:40:36:6e:b5:35:7a:4e:03:8c:47:95:a6:28:57:46:2a:27:
         e2:0f:e8:87:b2:c5:dd:a0:79:9a:8d:f4:ee:5a:68:ef:87:fd:
         ae:24:97:e8:2d:be:01:80:83:5f:0d:47:9f:a3:cc:f3:2b:2e:
         e1:d4:60:33:a8:2b:59:0b:94:c0:70:cd:38:47:dc:39:a1:56:
         76:97:87:d3:c7:b8:30:f3:0f:33:c3:b9:b8:c0:27:42:b8:a3:
         f8:5f:20:a2:d7:cc:30:3c:9a:f6:56:ed:c9:b0:4d:25:be:4d:
         4e:4a:2b:f8:a1:fa:eb:db:01:5b:94:1b:bb:39:af:d5:ae:be:
         f6:cc:ca:6b:87:8e:64:6b:31:03:00:43:50:26:bc:26:31:2d:
         43:7c:ca:bc:79:a8:8c:b5:39:6b:23:b4:74:81:43:0c:2f:d1:
         9f:b1:75:59:4d:65:2d:84:67:18:5c:47:66:20:8d:c3:4d:f8:
         3b:60:6b:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD
QTczM0REQTYwHhcNMjUxMTA0MjE1OTQwWhcNMjUxMTExMjE1OTQwWjAYMRYwFAYD
VQQDEw02OTBhNzc0ZC1hYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqVRHQcYAzAeZHBP62aRpA9JSSiRNq0YVsUotKRK+hAsNswMbcp0a7+S8uHu
ZMWUZzeJBMvRVn+TBEwMAFGuAN69WXn9MTVQCuTOXy5oKbzx2GAa5beVy1Q4RzTn
z2LkvEJjNG683h6oe7t8NL/+8GU09lYM1PQB21rRScZ+aTrYr9o36SpPVxi+DM0B
/whFLsiAEeSPQiWxiGJVioO8LJP0mW1RgEubui8OeI9/0/4RKnlP8U4Fkh808Qvw
RUjSarVL7Lp8G/PP2zrJKgoZyQX9KHHimvi3H/HFKpwkCFwrTJtBFwR5McVOIdzK
c4anF5PYRbx6VFtQmPI/lbNSxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt0o60s
j8B4sv6R2T1vRpLhRyGDMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG
QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU
dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgro0IZTzuwNV2IIe0Cy9E0G/Bp9vRq5nmeSU+j0frBC2KR+WBLPcF
VBbiMQkO880U7tskJ0m6PDrZyveSSVb8S0z5kSmNR/isQDZutTV6TgOMR5WmKFdG
KifiD+iHssXdoHmajfTuWmjvh/2uJJfoLb4BgINfDUefo8zzKy7h1GAzqCtZC5TA
cM04R9w5oVZ2l4fTx7gw8w8zw7m4wCdCuKP4XyCi18wwPJr2Vu3JsE0lvk1OSiv4
ofrr2wFblBu7Oa/Vrr72zMprh45kazEDAENQJrwmMS1DfMq8eaiMtTlrI7R0gUMM
L9GfsXVZTWUthGcYXEdmII3DTfg7YGtx
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:03:10 2025 by rpki-client