Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
File:                     OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json)
Hash identifier:          W9n74MSyAYbivtp25QuGnaqdAe5YU7RqfGKVAQ7+JCM=
Subject key identifier:   83:60:C6:23:B4:AC:25:B5:DF:88:04:C2:E5:A6:72:85:87:94:60:0A
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       092F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
Manifest number:          0924
Signing time:             Tue 04 Nov 2025 20:21:16 +0000
Manifest this update:     Tue 04 Nov 2025 20:21:15 +0000
Manifest next update:     Tue 11 Nov 2025 20:21:15 +0000
Files and hashes:         1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: 4ARsElomazXOVSukM3dZl0xm4F00UJu6jGDXY8RKFmU=)
                          2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: dVnV0yH7vHgJph4GIsitDhFnvlBBTZGa61SDpLL66Po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
                          rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2351 (0x92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: Nov  4 20:21:15 2025 GMT
            Not After : Nov 11 20:21:15 2025 GMT
        Subject: CN=690a603c-ffe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:f9:c4:b8:b4:ec:2b:1e:d4:a5:45:13:73:
                    60:31:4f:8e:62:86:f2:0e:15:ba:4b:dc:87:e6:7e:
                    32:ca:df:e5:23:65:e3:91:f4:c4:3c:1a:d8:02:8c:
                    f3:0c:94:7f:b3:b5:a1:22:78:cc:5a:e2:13:19:16:
                    95:05:ef:45:e3:01:1b:2c:f7:5e:d7:b2:e6:da:05:
                    fc:95:07:2b:6e:5c:20:91:66:a2:4f:43:8a:78:3f:
                    72:3e:bb:6a:a3:e5:7e:57:34:19:ea:b5:d8:db:3c:
                    7c:c6:ff:4b:1c:f2:be:1e:fb:5f:0f:0a:b9:95:38:
                    cb:04:48:e2:f0:a1:95:f4:cb:21:d4:8c:a0:0b:6f:
                    4d:a7:bc:b2:cf:68:b0:82:5b:5e:8a:5d:38:2b:75:
                    e3:4c:bd:7f:a9:2b:7f:18:68:df:4a:52:89:77:35:
                    fd:ed:a7:32:8e:37:5d:64:ce:d5:1d:8a:ff:28:41:
                    e3:39:a0:88:cc:28:b5:89:fb:8d:e5:b8:95:59:ef:
                    5b:e2:b1:d7:9f:91:c3:b0:e0:df:c8:01:b2:49:40:
                    8c:08:23:65:be:3d:a9:af:8f:cd:93:17:7d:d8:de:
                    47:e0:63:15:73:ff:6d:6f:be:84:d7:79:a8:20:8d:
                    9e:8d:02:b0:9f:35:c0:38:2b:7d:18:a3:dd:88:5e:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:60:C6:23:B4:AC:25:B5:DF:88:04:C2:E5:A6:72:85:87:94:60:0A
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:a0:6c:17:4b:14:c7:db:6d:9f:84:15:51:48:74:fb:3b:
         f0:80:b9:83:dd:7e:0c:80:c8:a7:2b:92:f7:0f:80:35:5c:9e:
         eb:b8:77:f7:07:ae:b8:c5:8e:3d:91:c0:55:da:f4:5b:88:31:
         bb:d3:f8:0b:74:4e:4f:e0:87:37:e5:dc:75:3d:c7:66:14:58:
         91:02:26:78:11:92:ff:ff:aa:e2:f7:13:6c:28:04:16:0b:39:
         7a:c8:8c:cb:be:5d:59:d6:fd:03:63:b2:39:ce:58:71:da:da:
         af:5c:3d:18:57:5e:f9:bc:58:7c:ca:02:1e:e7:7b:da:d8:df:
         36:a1:de:0d:9d:26:5d:7a:1c:4d:4f:8b:b0:8c:45:48:da:e0:
         a3:af:6d:09:4f:03:4f:1e:11:f2:8d:98:c9:33:8e:ad:25:5f:
         ce:2f:17:0e:44:ab:75:6a:a9:d6:c5:90:38:ad:38:c2:90:65:
         3f:e8:89:94:8f:2f:4d:43:b9:67:9b:2f:fc:16:5c:c1:0c:5a:
         4d:0a:0c:73:12:7e:81:dc:12:71:86:f7:ef:d5:db:4d:f6:15:
         83:cd:44:83:5e:23:01:1a:cf:ac:aa:68:cf:36:2f:a6:1e:37:
         4d:10:c8:18:96:01:d3:8a:34:9a:38:98:75:aa:c7:39:26:f2:
         3b:11:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:01 2025 by rpki-client