Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
File:                     OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json)
Hash identifier:          oLYyKU266VMx7MU7Ybes7mcfOIOiOTl4jDAfVu5BIe0=
Subject key identifier:   1F:2A:A0:CE:9D:12:43:9E:2C:1B:CC:EA:6B:87:EE:1A:08:34:62:20
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Certificate issuer:       /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
Manifest number:          77
Signing time:             Sun 19 Oct 2025 10:09:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:09:46 +0000
Manifest next update:     Sun 26 Oct 2025 10:09:46 +0000
Files and hashes:         1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: Pb3nvzaNZjvEkiAu4+7UBfP6u11mlO+Uau8w8t3JLIg=)
                          2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=)
                          3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=)
                          4: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=)
                          5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
                          rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
        Validity
            Not Before: Oct 19 10:09:46 2025 GMT
            Not After : Oct 26 10:09:46 2025 GMT
        Subject: CN=68f4b8ea-cc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0f:d2:bf:31:eb:9e:44:72:81:36:75:53:e8:
                    6e:6a:86:79:db:7a:3b:bf:42:b5:e2:8c:4e:03:2a:
                    c4:d1:61:af:87:de:22:fa:e9:bc:75:37:47:e5:09:
                    3b:14:e2:39:d3:07:52:fc:a5:45:25:e6:37:24:c0:
                    cd:8e:7b:a5:b0:c6:cf:70:6e:33:11:c2:e2:6f:87:
                    36:cf:e5:a6:90:4b:69:0e:50:14:b9:01:26:01:57:
                    4a:dd:33:34:ac:47:e1:7e:3d:8e:38:2c:0f:8b:e3:
                    ef:ab:b4:7d:cd:54:64:c3:9c:23:16:f8:10:38:42:
                    38:71:6e:64:ef:54:ea:c7:cd:2e:5d:d0:b0:ce:0d:
                    00:a0:df:5c:3e:0f:ac:ef:c0:db:72:2e:29:c5:44:
                    c9:b8:b1:13:06:3e:ea:8f:ca:53:8f:f7:2a:0a:48:
                    69:be:9e:49:ac:e2:3a:01:68:46:d4:6e:43:ff:2f:
                    8d:0e:88:dd:a2:43:ac:49:63:3a:7e:31:72:b0:77:
                    63:d0:f8:31:63:ae:aa:27:59:d9:56:b7:86:aa:60:
                    0d:6d:c4:e9:f4:d4:65:70:b8:95:02:24:8c:a9:a6:
                    14:c5:3b:7d:c4:8b:8b:eb:f9:86:91:10:30:6d:10:
                    4a:4f:e5:30:8a:45:a0:8e:14:dd:95:9b:f9:42:8f:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2A:A0:CE:9D:12:43:9E:2C:1B:CC:EA:6B:87:EE:1A:08:34:62:20
            X509v3 Authority Key Identifier:
                keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:73:07:66:66:a1:06:53:da:4a:34:46:3e:fb:40:61:10:
         c1:77:ab:ca:73:30:85:67:02:d2:f6:a0:8f:83:4d:70:13:4d:
         e2:4c:bd:92:e8:d8:e0:c2:b0:fe:e3:8e:1c:f9:94:ec:8f:a5:
         25:5a:f8:ec:5d:17:af:ff:b8:23:99:fa:5a:bb:72:df:fa:3f:
         47:4b:de:4d:e7:6f:03:f2:c5:d4:2e:18:01:af:91:4a:e7:d3:
         d0:6e:25:69:18:90:31:92:39:42:43:54:14:f7:06:16:48:fb:
         b9:e3:8e:8f:fe:be:6f:ed:41:54:61:0f:f7:50:b5:e6:ab:4a:
         8e:ca:ad:5e:dd:d7:ac:92:08:1c:72:cf:21:4a:9e:b8:28:86:
         87:ae:e5:d3:20:1e:9f:76:73:51:16:20:17:25:a8:89:11:ed:
         ec:86:f2:8b:61:b9:b1:f9:45:8c:d9:e0:4e:76:e1:ae:16:98:
         52:33:e8:ce:8e:85:b4:f3:09:5e:6e:0a:7a:40:a9:72:8e:fc:
         16:e8:8c:02:4f:aa:31:36:50:02:16:0a:e9:03:53:55:0d:60:
         a8:49:0c:5d:84:b8:66:c4:58:64:52:34:3e:62:ff:59:a1:65:
         c0:e6:27:fc:51:3f:f9:03:a9:61:1e:25:c0:6a:9d:45:e9:a8:
         d9:d7:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:53 2025 by rpki-client