Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
File:                     OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json)
Hash identifier:          nl0ItdVVT5JsBVdJk7ggh8tyfQS/g6vVKOnrfA/3Dkg=
Subject key identifier:   99:C4:95:BE:C1:F2:AB:EB:89:CE:04:F5:39:31:F9:3F:01:5A:28:41
Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
Certificate issuer:       /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
Manifest number:          01F6
Signing time:             Mon 03 Nov 2025 02:35:11 +0000
Manifest this update:     Mon 03 Nov 2025 02:35:11 +0000
Manifest next update:     Mon 10 Nov 2025 02:35:11 +0000
Files and hashes:         1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: okLRmAzjkByHN4sDDMgGp0RtDUTWS8o/0S4GVphUW88=)
                          2: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: 57nO5jOvkVp0+vX7iv3bKgXM7+O7quZxwLxBFz3+RLU=)
                          3: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: zTbUbYoqbVGTCB7vV/9Oi8BgtnQrV/KuVcCelWmi5sI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
                          rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
        Validity
            Not Before: Nov  3 02:35:11 2025 GMT
            Not After : Nov 10 02:35:11 2025 GMT
        Subject: CN=690814df-bad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:bc:30:e7:bb:3a:f5:87:27:30:6c:51:e4:
                    55:3e:de:68:d3:d2:8b:91:14:83:3f:9a:ad:96:d0:
                    66:d3:c2:53:f2:7a:94:2b:ba:58:fc:a3:e9:23:d1:
                    d8:14:2c:da:9c:a9:61:a9:d2:f8:dc:e2:54:1f:70:
                    f8:13:4f:49:d0:c7:ee:48:c6:53:10:03:da:65:04:
                    e8:59:f0:ef:78:d6:9a:70:97:99:bd:03:79:66:44:
                    67:9e:1f:08:fd:de:06:56:9a:be:40:73:cc:4e:4e:
                    cb:fa:fa:1d:bf:60:58:68:a5:22:28:4e:48:72:3f:
                    fb:32:f9:67:a2:e0:13:02:a2:f9:7e:94:a0:9b:5d:
                    ad:96:44:0a:c8:92:27:c3:d4:1c:0f:76:bd:ab:4b:
                    90:5b:79:95:bb:0b:8e:e6:a1:32:43:c8:47:68:f0:
                    fa:95:3b:f6:e8:47:4d:c4:af:d2:cb:b1:16:af:1e:
                    79:46:ff:bc:1b:71:03:1e:31:f7:86:b8:e6:df:d7:
                    15:d4:ed:58:00:b8:1c:c3:d6:22:48:11:08:99:85:
                    ba:08:fc:b6:b2:7e:c7:d7:c0:97:e3:ec:1f:08:4f:
                    31:94:4b:b4:e6:9a:a6:7f:7f:5d:2d:9b:08:ef:bd:
                    72:14:b3:89:fd:f8:6a:8b:46:89:98:0d:ce:11:f8:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C4:95:BE:C1:F2:AB:EB:89:CE:04:F5:39:31:F9:3F:01:5A:28:41
            X509v3 Authority Key Identifier:
                keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:10:93:f9:77:c1:99:8a:d3:d5:8d:48:95:3e:67:ae:13:2a:
         b5:33:02:87:21:70:e0:29:4e:8c:da:92:d5:28:39:5e:d2:05:
         1e:fb:68:0f:af:3c:a8:66:23:c9:cc:57:27:32:7c:bd:b4:18:
         9b:82:6e:ec:a7:51:d6:ef:d1:78:79:32:6a:2c:8d:28:4f:a1:
         51:11:51:60:34:8b:77:27:5f:a3:1f:c8:a9:e1:4d:65:c0:79:
         7b:d2:39:a1:ea:f8:fb:77:2c:12:fa:86:d2:00:9d:32:d5:1a:
         ab:07:ec:bd:f9:1f:2b:54:7e:fd:fa:2a:4b:75:a4:96:93:20:
         90:0b:8c:95:ac:08:b2:63:ee:74:05:99:ab:05:75:ec:1f:97:
         2a:27:1d:d8:08:70:03:ed:f0:f6:fa:10:be:0b:70:76:5c:67:
         51:48:40:cd:5e:6e:73:c1:b8:a9:a6:7c:00:99:86:f0:3a:15:
         ca:42:b2:15:cb:d6:3c:95:fd:01:7b:e4:0b:f8:15:15:06:9c:
         f3:38:f2:ac:b0:26:2a:dd:4f:cd:ba:ae:51:18:88:b6:31:ee:
         01:02:71:60:ac:52:c4:c9:3b:01:30:5f:e9:a9:27:9c:fe:c6:
         6c:cf:ec:eb:2c:41:55:e9:fe:31:4a:f3:b0:2a:ac:33:7b:37:
         c8:4b:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:55 2025 by rpki-client