Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File:                     Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier:          joHi/J/Z5YWh2k9G95Ny+o75czd4oo6/RqeznNXBgGU=
Subject key identifier:   DC:EF:89:62:CD:68:E9:7D:9A:85:0C:C4:5E:D3:6F:DD:86:55:55:FA
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer:       /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial:       3355
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number:          32FF
Signing time:             Thu 18 Sep 2025 15:28:58 +0000
Manifest this update:     Thu 18 Sep 2025 15:28:58 +0000
Manifest next update:     Thu 25 Sep 2025 15:28:58 +0000
Files and hashes:         1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: 8gBb8teayzOZhCfuZTVZep8xs9bTVjl+vxIVOMgpRYo=)
                          2: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (hash: F0EI0pjKdFSXXJaNRIeZAVVcc/1UvTOq8MA6ZbeocbA=)
                          3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: qmlGrSLmYcGa18yom8d6PeePfMWIiWVkajsGQGVwEAE=)
                          4: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: eNA7hmO0iaDh6B8QriE+uJJoAJhe22m7Y0RORTwFmBQ=)
                          5: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: TJYAsaduMNFlCfCtpHImQhHzTtlz3kZi3/4L+kmyEYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 15:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13141 (0x3355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
        Validity
            Not Before: Sep 18 15:28:58 2025 GMT
            Not After : Sep 25 15:28:58 2025 GMT
        Subject: CN=68cc253a-d6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:2d:73:cc:11:9e:04:3a:4b:2d:0a:57:41:
                    19:e3:0e:ca:09:6f:72:35:ea:89:0c:f1:9b:bb:86:
                    d2:4a:a3:4f:61:54:ad:1e:07:b2:c3:24:a3:5c:2e:
                    7f:b1:7e:bb:ca:fc:4d:8b:03:b8:78:e1:d1:03:21:
                    c8:b1:e6:05:dd:77:0e:5a:da:6b:18:34:30:76:8f:
                    a3:6a:b9:b7:6b:e9:3e:f2:29:49:e8:2e:18:41:6d:
                    7b:d2:5c:18:d5:ea:b0:07:0d:48:2e:cd:ae:9a:8c:
                    ee:a2:4c:85:0d:8e:94:8e:66:13:34:2d:d8:2c:46:
                    a1:e3:a1:f2:ab:d7:25:91:6a:0b:f6:b6:b7:09:a3:
                    26:a2:06:36:cf:ec:2e:c3:da:38:bd:6d:1f:80:1a:
                    94:46:01:32:59:d4:86:19:fb:82:21:f0:8a:81:40:
                    80:90:7c:34:3e:70:11:45:0d:96:eb:87:f7:e5:e1:
                    94:32:35:e8:5d:66:fe:65:e8:ce:90:d1:9e:3c:3e:
                    fe:e1:3c:77:d5:2e:0b:f2:7a:a9:97:80:48:57:05:
                    21:ce:ad:1c:e9:51:e1:23:11:24:51:a7:62:2c:78:
                    b1:56:ea:08:19:e9:f9:df:ec:fd:1a:54:82:7e:d6:
                    3c:95:98:1c:f9:2e:da:28:66:eb:d9:49:3e:4b:ab:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:89:62:CD:68:E9:7D:9A:85:0C:C4:5E:D3:6F:DD:86:55:55:FA
            X509v3 Authority Key Identifier:
                keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:eb:aa:53:9b:8a:ee:6e:15:ed:ef:ac:5a:14:12:3f:07:8c:
         67:8f:77:5c:0d:25:93:ea:8c:37:fb:40:1d:9a:31:cb:16:64:
         e2:ce:44:5e:b7:f9:c8:16:b4:e6:1c:26:c0:30:06:4b:b0:05:
         04:b3:e4:48:9d:92:18:1a:2b:5b:ab:23:ae:45:a6:0b:a1:a5:
         b0:5e:cd:a6:13:73:e5:71:d6:5e:3c:70:e0:58:94:49:37:fb:
         d6:d5:7c:3d:7b:44:a2:b6:be:fb:0a:da:f0:27:b7:71:ff:89:
         6b:3d:31:40:c2:51:8a:2b:20:08:0d:5d:cc:52:c8:16:38:f1:
         ce:82:a6:8c:81:05:ff:c9:f2:fc:54:e0:6a:04:46:40:c1:4b:
         44:44:ab:33:b6:27:7e:e2:8f:20:2b:9b:2f:31:dd:61:68:17:
         e4:24:47:b5:93:70:6f:4e:c9:5b:72:0b:a1:54:84:a6:4f:63:
         33:aa:66:ec:f3:43:fa:1a:09:ca:70:72:71:2d:b9:9a:be:80:
         31:6e:1c:e8:fc:d6:dc:56:d6:14:0e:23:cb:c8:ff:a5:04:27:
         68:a6:ce:0f:68:4f:77:d2:9c:3c:15:8a:37:88:cf:6f:ff:14:
         ec:84:52:22:d8:fc:15:e2:ac:98:41:f7:d6:d0:73:bc:6a:2b:
         6c:1c:52:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG
NUE2QjkzNDgwHhcNMjUwOTE4MTUyODU4WhcNMjUwOTI1MTUyODU4WjAYMRYwFAYD
VQQDEw02OGNjMjUzYS1kNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApIQtc8wRngQ6Sy0KV0EZ4w7KCW9yNeqJDPGbu4bSSqNPYVStHgeywySjXC5/
sX67yvxNiwO4eOHRAyHIseYF3XcOWtprGDQwdo+jarm3a+k+8ilJ6C4YQW170lwY
1eqwBw1ILs2umozuokyFDY6UjmYTNC3YLEah46Hyq9clkWoL9ra3CaMmogY2z+wu
w9o4vW0fgBqURgEyWdSGGfuCIfCKgUCAkHw0PnARRQ2W64f35eGUMjXoXWb+ZejO
kNGePD7+4Tx31S4L8nqpl4BIVwUhzq0c6VHhIxEkUadiLHixVuoIGen53+z9GlSC
ftY8lZgc+S7aKGbr2Uk+S6s/+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzviWLN
aOl9moUMxF7Tb92GVVX6MB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx
NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p
TEs3bVRnejR1akgxcHJrMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC366pTm4rubhXt76xaFBI/B4xnj3dcDSWT6ow3+0AdmjHLFmTizkRe
t/nIFrTmHCbAMAZLsAUEs+RInZIYGitbqyOuRaYLoaWwXs2mE3PlcdZePHDgWJRJ
N/vW1Xw9e0Sitr77CtrwJ7dx/4lrPTFAwlGKKyAIDV3MUsgWOPHOgqaMgQX/yfL8
VOBqBEZAwUtERKsztid+4o8gK5svMd1haBfkJEe1k3BvTslbcguhVISmT2Mzqmbs
80P6GgnKcHJxLbmavoAxbhzo/NbcVtYUDiPLyP+lBCdops4PaE930pw8FYo3iM9v
/xTshFIi2PwV4qyYQffW0HO8aitsHFIO
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:10:04 2025 by rpki-client