Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
File:                     OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json)
Hash identifier:          NGUuvJeSXqx+E/DZ9OxoV33nzOY+c0Zv4O8NCz3aTlw=
Subject key identifier:   50:10:FC:28:1B:38:F7:67:3D:91:AF:3D:2B:D5:E0:01:5F:55:0D:52
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Certificate issuer:       /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
Manifest number:          0197
Signing time:             Wed 17 Sep 2025 04:05:44 +0000
Manifest this update:     Wed 17 Sep 2025 04:05:43 +0000
Manifest next update:     Wed 24 Sep 2025 04:05:43 +0000
Files and hashes:         1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: 0GzO1I6yE7Tp5JOndkNzRoNrloEvDpfuJN8Fq+Gx3PY=)
                          2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: 9meNSQ7mHgauWkjfmq+w3XZ8VLbZDlhWM/Yy7ZYJH2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
                          rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 04:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
        Validity
            Not Before: Sep 17 04:05:43 2025 GMT
            Not After : Sep 24 04:05:43 2025 GMT
        Subject: CN=68ca3397-9505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:14:63:03:9a:f6:e8:70:66:c5:0b:ef:7d:
                    33:4c:cb:d7:ca:63:07:db:26:77:a4:ac:be:78:05:
                    13:27:2a:5e:25:f5:f8:23:60:07:f8:c6:ea:10:69:
                    da:aa:15:6f:60:04:08:07:9a:82:48:7f:c7:df:53:
                    83:69:e2:07:34:06:10:61:2f:ff:b3:af:31:66:45:
                    1c:90:de:cc:3e:9e:0a:e8:3b:47:88:d6:07:b3:ee:
                    82:ca:3b:3b:e6:6d:5d:6a:89:68:7d:a7:e5:c2:29:
                    bf:9e:9f:7e:4b:01:a2:3f:f7:48:3f:f7:a1:0d:cf:
                    90:9f:90:32:b3:fd:26:c5:77:e1:67:cf:57:20:d1:
                    aa:dc:db:78:b5:55:f9:08:cd:e2:ff:33:5c:04:30:
                    92:1a:5c:55:83:56:47:c1:b4:68:8b:cf:81:58:be:
                    4e:fa:a8:a2:bc:8d:7e:ce:81:98:fe:c4:aa:2c:54:
                    56:1c:2b:7c:66:0a:40:93:8b:bf:4b:fa:a2:b7:4d:
                    71:25:01:d8:39:3b:65:a1:4a:7d:49:ce:0a:b6:b3:
                    a4:ca:a2:9d:23:e6:db:82:39:8c:c2:ee:9a:9c:66:
                    95:04:06:92:78:3c:d7:d6:80:4a:f1:55:5b:f7:ab:
                    41:36:4c:fe:bc:32:f1:6b:f2:28:d2:0d:21:af:96:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:FC:28:1B:38:F7:67:3D:91:AF:3D:2B:D5:E0:01:5F:55:0D:52
            X509v3 Authority Key Identifier:
                keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:33:b5:6c:7c:cc:64:76:af:c3:27:52:07:fb:2d:4b:03:6d:
         27:43:22:0c:fe:5e:fb:54:53:02:fd:c8:00:3f:33:e1:7c:d4:
         0f:cc:20:be:9d:a9:d2:c3:59:25:12:fe:3f:15:ff:e8:ff:fc:
         81:c5:c8:0d:88:df:50:02:c9:b4:f5:c2:e5:91:73:ef:88:32:
         5d:4b:75:07:90:1f:de:80:e4:1d:24:b3:4c:62:d8:8a:9b:42:
         d6:9f:a8:6c:d7:4b:53:37:a8:a3:67:8e:42:45:59:7e:e3:fb:
         78:25:14:4e:5e:fc:f0:7a:61:43:f6:8d:ef:14:1a:74:5a:81:
         a6:b7:13:c9:65:9b:20:e4:3b:04:d6:26:0d:e4:e1:79:12:9f:
         14:15:8c:12:97:64:ac:23:35:73:26:32:ec:9c:03:fd:d9:a0:
         97:0c:38:56:49:ab:11:9e:06:7f:4f:68:9b:7b:bf:cf:9a:c6:
         4f:34:df:f2:24:9d:a2:db:9f:1c:ef:b9:c7:cf:bd:43:57:10:
         d4:2d:24:bb:dd:80:2f:9a:49:f9:16:f8:26:5f:17:69:3f:d1:
         ea:af:1d:c2:2b:b8:b2:5f:30:fe:1b:c5:61:31:4e:45:64:26:
         7d:d1:5d:93:17:3b:47:00:bf:8a:b7:ce:d8:fa:04:90:53:9f:
         b6:58:a1:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE
RDgyNEFDRTQwHhcNMjUwOTE3MDQwNTQzWhcNMjUwOTI0MDQwNTQzWjAYMRYwFAYD
VQQDEw02OGNhMzM5Ny05NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAgUYwOa9uhwZsUL730zTMvXymMH2yZ3pKy+eAUTJypeJfX4I2AH+MbqEGna
qhVvYAQIB5qCSH/H31ODaeIHNAYQYS//s68xZkUckN7MPp4K6DtHiNYHs+6Cyjs7
5m1daolofaflwim/np9+SwGiP/dIP/ehDc+Qn5Ays/0mxXfhZ89XINGq3Nt4tVX5
CM3i/zNcBDCSGlxVg1ZHwbRoi8+BWL5O+qiivI1+zoGY/sSqLFRWHCt8ZgpAk4u/
S/qit01xJQHYOTtloUp9Sc4KtrOkyqKdI+bbgjmMwu6anGaVBAaSeDzX1oBK8VVb
96tBNkz+vDLxa/Io0g0hr5avqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAQ/Cgb
OPdnPZGvPSvV4AFfVQ1SMB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND
RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjAwQS85RUEyQkI3RTNDRDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhG
MlJ4bG5UWC1UeWJkZ2tyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkM7VsfMxkdq/DJ1IH+y1LA20nQyIM/l77VFMC/cgAPzPhfNQPzCC+
nanSw1klEv4/Ff/o//yBxcgNiN9QAsm09cLlkXPviDJdS3UHkB/egOQdJLNMYtiK
m0LWn6hs10tTN6ijZ45CRVl+4/t4JRROXvzwemFD9o3vFBp0WoGmtxPJZZsg5DsE
1iYN5OF5Ep8UFYwSl2SsIzVzJjLsnAP92aCXDDhWSasRngZ/T2ibe7/PmsZPNN/y
JJ2i258c77nHz71DVxDULSS73YAvmkn5FvgmXxdpP9Hqrx3CK7iyXzD+G8VhMU5F
ZCZ90V2TFztHAL+Kt87Y+gSQU5+2WKE2
-----END CERTIFICATE-----
Generated at Thu Sep 18 15:25:10 2025 by rpki-client