Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File:                     owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier:          JE8hPrntkipkZwEc4bkf/uSeH+Id1ifMKp0YybCxIX4=
Subject key identifier:   F5:F0:66:6D:BF:27:A7:46:66:1C:03:78:C1:67:FB:03:C6:52:F0:79
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer:       /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial:       0CB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number:          0CAE
Signing time:             Mon 20 Oct 2025 18:47:18 +0000
Manifest this update:     Mon 20 Oct 2025 18:47:17 +0000
Manifest next update:     Mon 27 Oct 2025 18:47:17 +0000
Files and hashes:         1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: lpwAGORzrq3C/tmoBvwgfzehjjmXPCnk2rhzpBMs1QY=)
                          2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
                          rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 18:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
        Validity
            Not Before: Oct 20 18:47:17 2025 GMT
            Not After : Oct 27 18:47:17 2025 GMT
        Subject: CN=68f683b5-95ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:ea:1c:75:8c:05:56:80:37:f4:6f:8e:74:
                    88:e9:c9:8a:42:7a:de:a2:72:a2:cb:1c:e6:56:16:
                    51:06:c1:0b:3a:a0:2d:2c:f2:c5:fc:26:62:a6:4d:
                    e9:b8:c2:1c:81:cb:18:e1:c5:4f:69:26:89:03:4e:
                    08:7b:5c:ec:dc:66:c3:71:61:35:7a:a3:4e:18:a6:
                    85:ff:43:92:ac:25:2b:46:9a:bf:88:f8:70:8f:59:
                    61:a8:e5:bf:96:ba:15:77:59:5f:d6:d9:9f:a7:26:
                    d6:ff:e7:fd:de:7a:d5:a5:4e:18:c5:d3:8b:35:da:
                    5f:57:20:76:39:be:6b:e2:29:e3:01:c4:f1:0a:de:
                    58:d2:e2:32:a9:df:5d:df:b5:61:a2:85:9f:42:05:
                    8d:31:b6:31:c1:09:f9:23:29:78:6d:f7:ba:17:72:
                    98:c1:71:18:d5:f0:0f:3a:9c:9a:5e:21:3e:31:f2:
                    15:97:31:d6:be:11:0a:5f:c7:e9:f8:78:f1:b7:c4:
                    21:69:30:d9:a6:5a:1f:70:55:4d:e0:00:2d:05:7c:
                    9c:8a:52:c9:af:89:35:d8:23:80:8e:8f:9d:11:df:
                    f4:a8:04:04:30:c5:e5:5d:e2:8c:61:a8:91:1e:d9:
                    5f:ec:8d:a1:fd:3d:94:ca:56:03:11:aa:45:ae:62:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F0:66:6D:BF:27:A7:46:66:1C:03:78:C1:67:FB:03:C6:52:F0:79
            X509v3 Authority Key Identifier:
                keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:cc:8b:90:0d:3f:d9:3b:d7:54:60:50:ba:1a:0a:1d:4a:
         3f:02:32:a7:1e:8b:6e:f1:d5:b4:23:cf:98:c2:98:9e:13:d3:
         7b:c1:94:da:29:16:7b:1b:bc:eb:9f:11:72:52:ce:34:17:82:
         1d:6d:2e:be:52:de:da:ae:4f:86:c4:09:92:f5:0f:7f:19:98:
         02:40:59:b0:86:31:62:56:a9:b8:01:11:12:92:51:fd:f3:5b:
         4b:99:1d:27:4d:d1:8b:c5:26:3b:bf:1b:da:bc:36:0e:93:e3:
         7b:48:c3:41:93:2d:d5:c1:84:ed:f5:2c:fc:6a:1f:ed:6a:bd:
         0a:e3:29:7f:36:55:b8:75:fe:7f:c5:09:5c:8b:e3:a8:e3:43:
         61:67:71:8c:60:4b:52:dd:c7:f5:42:ab:29:89:df:60:8e:11:
         d7:28:4c:5e:dc:68:07:f2:b9:3f:68:b0:e0:f8:78:61:43:c2:
         96:95:07:40:fa:d0:1d:68:91:9b:a0:ea:c8:7e:a8:3a:d4:5f:
         60:e7:f6:ef:4b:a0:a3:95:d9:78:41:b2:36:88:b6:17:1f:fd:
         de:76:b5:c3:52:c2:7d:f5:cb:b2:e2:6c:c9:a0:0f:cc:65:bc:
         a8:80:c1:a4:b2:a3:a2:67:96:e2:d9:05:ae:c1:cc:c9:8a:7b:
         4f:47:a1:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG
OTg0OTEzQzEwHhcNMjUxMDIwMTg0NzE3WhcNMjUxMDI3MTg0NzE3WjAYMRYwFAYD
VQQDEw02OGY2ODNiNS05NWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5vqHHWMBVaAN/RvjnSI6cmKQnreonKiyxzmVhZRBsELOqAtLPLF/CZipk3p
uMIcgcsY4cVPaSaJA04Ie1zs3GbDcWE1eqNOGKaF/0OSrCUrRpq/iPhwj1lhqOW/
lroVd1lf1tmfpybW/+f93nrVpU4YxdOLNdpfVyB2Ob5r4injAcTxCt5Y0uIyqd9d
37VhooWfQgWNMbYxwQn5Iyl4bfe6F3KYwXEY1fAPOpyaXiE+MfIVlzHWvhEKX8fp
+Hjxt8QhaTDZplofcFVN4AAtBXycilLJr4k12COAjo+dEd/0qAQEMMXlXeKMYaiR
Htlf7I2h/T2UylYDEapFrmK6tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXwZm2/
J6dGZhwDeMFn+wPGUvB5MB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG
OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzEyQi9GOUZFRDRDMkZGOUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENF
MTF5bVVoYzJicTM1aEpFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxDMyLkA0/2TvXVGBQuhoKHUo/AjKnHotu8dW0I8+YwpieE9N7wZTa
KRZ7G7zrnxFyUs40F4IdbS6+Ut7ark+GxAmS9Q9/GZgCQFmwhjFiVqm4ARESklH9
81tLmR0nTdGLxSY7vxvavDYOk+N7SMNBky3VwYTt9Sz8ah/tar0K4yl/NlW4df5/
xQlci+Oo40NhZ3GMYEtS3cf1Qqspid9gjhHXKExe3GgH8rk/aLDg+HhhQ8KWlQdA
+tAdaJGboOrIfqg61F9g5/bvS6Cjldl4QbI2iLYXH/3edrXDUsJ99cuy4mzJoA/M
ZbyogMGksqOiZ5bi2QWuwczJintPR6Fy
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:08 2025 by rpki-client