Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
File:                     OG6s-qYbi0A33DiqKAhd4xh48eM.mft (raw, json)
Hash identifier:          8AUxPnfu9o9wEiIainF6U1gN2qYzSt+6l/uMFeJA3VM=
Subject key identifier:   66:47:EB:4A:B3:78:C7:F2:F4:15:A5:F3:16:73:B2:0B:9F:CE:41:C8
Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
Certificate issuer:       /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Certificate serial:       0327
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
Manifest number:          0323
Signing time:             Sat 23 Aug 2025 01:23:30 +0000
Manifest this update:     Sat 23 Aug 2025 01:23:29 +0000
Manifest next update:     Sat 30 Aug 2025 01:23:29 +0000
Files and hashes:         1: OG6s-qYbi0A33DiqKAhd4xh48eM.crl (hash: YE2Zc4bATP3e+8gYERLXqqahM5pilQUVo76Lq+UnpjM=)
                          2: 09AA16F8DB0011ECA67DA10BC4F9AE02.roa (hash: Xjk4IJVT0rrTOdheIi6ydLmAybVHV5BPXXklNZ4Q0SQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
                          rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118422, serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
        Validity
            Not Before: Aug 23 01:23:29 2025 GMT
            Not After : Aug 30 01:23:29 2025 GMT
        Subject: CN=68a91812-9490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:43:15:79:b6:24:3b:6e:20:22:d3:c4:90:
                    c9:ac:7c:31:f6:d6:e6:aa:3e:3c:54:16:47:b4:a7:
                    45:42:73:2a:59:17:de:8a:a5:f2:ec:6a:70:d4:29:
                    aa:cc:7c:cd:83:cc:ff:63:07:58:53:08:8c:cb:ec:
                    2c:35:a5:45:82:d1:63:c9:c8:0a:29:1a:d8:89:b2:
                    94:97:10:21:60:de:2b:e0:7b:14:6f:07:ba:96:b0:
                    7c:e5:e7:dc:df:17:05:7d:2c:24:99:f9:35:14:81:
                    35:c6:4e:29:5d:59:58:48:c7:df:c9:01:6a:a3:43:
                    0c:78:12:6c:ea:9b:fa:a9:d1:a4:0d:89:59:40:7a:
                    ca:b2:fe:f4:af:26:83:85:c0:d8:f6:2c:71:7d:38:
                    d3:c9:7b:7b:bc:7c:2d:24:9f:f0:ea:37:96:75:8e:
                    33:2a:4f:2d:58:d3:93:b8:f3:ed:ee:ea:79:89:7d:
                    8e:a3:44:35:9a:2f:7b:ee:1e:e2:50:5a:8a:12:92:
                    3a:eb:40:88:40:03:24:01:74:fa:89:de:ee:20:59:
                    90:ba:a5:a1:e4:82:b6:7c:31:92:49:3b:b2:8e:1f:
                    dd:15:8c:95:67:b7:b6:62:e9:5f:2d:d7:a1:5b:eb:
                    8e:a6:3b:19:7f:b3:69:59:60:52:3e:da:12:bc:b0:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:47:EB:4A:B3:78:C7:F2:F4:15:A5:F3:16:73:B2:0B:9F:CE:41:C8
            X509v3 Authority Key Identifier:
                keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:99:00:14:b9:42:3b:ba:b2:4b:49:47:b6:78:c4:f9:ab:a4:
         36:f2:b0:fb:a3:d3:0a:4c:89:be:f5:3e:75:59:01:75:b9:78:
         ea:ef:e1:38:d7:55:37:1f:1e:7d:af:54:ae:42:d5:9b:e3:99:
         88:8a:c4:96:3d:1c:31:c9:fa:1e:03:f8:14:0b:0e:73:54:d7:
         d5:8e:f1:31:c5:be:c0:31:65:2c:92:ec:59:e3:c2:9f:3f:58:
         0e:9e:d6:46:26:ae:bd:af:5f:2e:e7:9e:8e:45:91:d7:c7:c1:
         5a:24:70:f0:6e:ec:18:eb:fb:73:9b:5e:69:9a:c2:7d:60:e5:
         18:e9:bb:17:fc:88:38:6c:06:af:60:e0:b4:ee:25:e6:a3:24:
         be:45:ee:32:50:bb:eb:98:6d:37:bd:90:c1:b1:04:dd:69:34:
         da:d1:3c:af:80:31:67:44:68:c0:d3:9d:fc:ef:36:e9:a7:56:
         3e:ec:5e:2e:6a:8d:08:33:d9:60:c6:90:90:ff:6f:ee:49:01:
         4d:c8:dc:34:c5:ce:bc:01:bf:fa:d4:4e:35:b1:c5:7f:f8:99:
         22:c3:72:34:77:b6:e8:ac:6e:85:14:8e:80:79:4f:16:00:b5:
         57:b0:30:4f:69:d0:d7:f7:d6:ba:26:6e:2c:ff:a0:56:df:3d:
         94:4e:ad:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg0MjIxMTAvBgNVBAUTKDM4NkVBQ0ZBQTYxQjhCNDAzN0RDMzhBQTI4MDg1REUz
MTg3OEYxRTMwHhcNMjUwODIzMDEyMzI5WhcNMjUwODMwMDEyMzI5WjAYMRYwFAYD
VQQDEw02OGE5MTgxMi05NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1CRDFXm2JDtuICLTxJDJrHwx9tbmqj48VBZHtKdFQnMqWRfeiqXy7Gpw1Cmq
zHzNg8z/YwdYUwiMy+wsNaVFgtFjycgKKRrYibKUlxAhYN4r4HsUbwe6lrB85efc
3xcFfSwkmfk1FIE1xk4pXVlYSMffyQFqo0MMeBJs6pv6qdGkDYlZQHrKsv70ryaD
hcDY9ixxfTjTyXt7vHwtJJ/w6jeWdY4zKk8tWNOTuPPt7up5iX2Oo0Q1mi977h7i
UFqKEpI660CIQAMkAXT6id7uIFmQuqWh5IK2fDGSSTuyjh/dFYyVZ7e2YulfLdeh
W+uOpjsZf7NpWWBSPtoSvLDtZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZH60qz
eMfy9BWl8xZzsgufzkHIMB8GA1UdIwQYMBaAFDhurPqmG4tAN9w4qigIXeMYePHj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQyMi8zMTgwRkUyQURB
RkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkwQTMzRGlxS0FoZDR4aDQ4
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09HNnMtcVliaTBBMzNEaXFLQWhkNHhoNDhlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODQyMi8zMTgwRkUyQURBRkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkw
QTMzRGlxS0FoZDR4aDQ4ZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZmQAUuUI7urJLSUe2eMT5q6Q28rD7o9MKTIm+9T51WQF1uXjq7+E4
11U3Hx59r1SuQtWb45mIisSWPRwxyfoeA/gUCw5zVNfVjvExxb7AMWUskuxZ48Kf
P1gOntZGJq69r18u556ORZHXx8FaJHDwbuwY6/tzm15pmsJ9YOUY6bsX/Ig4bAav
YOC07iXmoyS+Re4yULvrmG03vZDBsQTdaTTa0TyvgDFnRGjA05387zbpp1Y+7F4u
ao0IM9lgxpCQ/2/uSQFNyNw0xc68Ab/61E41scV/+Jkiw3I0d7borG6FFI6AeU8W
ALVXsDBPadDX99a6Jm4s/6BW3z2UTq3J
-----END CERTIFICATE-----
Generated at Sun Aug 24 22:16:09 2025 by rpki-client