Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
File:                     OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json)
Hash identifier:          uwgOIkmOMO3P5v5NYV44jOHIYqbMl+FTFSsBtAA0bTs=
Subject key identifier:   8A:54:90:E5:88:09:85:50:35:49:EB:6A:EA:FC:B6:4B:1C:E3:25:78
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       0909
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
Manifest number:          08FE
Signing time:             Fri 22 Aug 2025 20:29:07 +0000
Manifest this update:     Fri 22 Aug 2025 20:29:07 +0000
Manifest next update:     Fri 29 Aug 2025 20:29:07 +0000
Files and hashes:         1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: PLSE7QbdMd1CwUN+8uoF6xtPI2VHGrfk6GeeW1OmfmQ=)
                          2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: dVnV0yH7vHgJph4GIsitDhFnvlBBTZGa61SDpLL66Po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
                          rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: Aug 22 20:29:07 2025 GMT
            Not After : Aug 29 20:29:07 2025 GMT
        Subject: CN=68a8d313-fc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:25:a0:ce:1e:f6:5b:45:e6:f8:00:48:bb:
                    5a:5a:02:4f:a5:f4:1f:15:21:55:2b:a4:2c:0f:0e:
                    de:5a:8c:1b:c9:32:8b:7d:b2:41:14:8b:09:b3:d9:
                    36:41:42:af:fd:65:1c:75:ad:02:94:2b:13:e8:19:
                    36:07:9b:9b:a5:da:6c:83:d5:7d:c6:4b:7e:38:53:
                    2d:a9:9a:a6:6a:e6:c1:ba:59:0b:a6:ec:54:ac:50:
                    09:8b:b0:fd:d1:95:7d:b1:f6:8b:6e:76:2f:c4:41:
                    0d:9c:ab:85:23:70:28:74:83:a8:04:62:ae:6b:51:
                    f5:75:49:c1:82:4f:27:aa:db:61:4c:cc:8f:02:32:
                    93:18:74:96:95:49:f2:9a:e7:27:a5:51:63:8c:f7:
                    20:4a:42:2b:0d:4c:54:7c:c9:9b:21:50:b7:a2:93:
                    e7:45:72:c0:0b:e9:77:94:fc:7b:d3:59:29:27:74:
                    6f:f7:e8:43:30:e1:01:5c:95:86:9f:88:dc:19:38:
                    1a:48:56:f7:e7:6b:43:1d:3f:32:41:18:ec:a0:c3:
                    4a:22:32:f2:63:d9:44:5b:2d:b4:1d:91:9a:0a:94:
                    39:f4:20:e3:d9:51:91:34:0a:cc:d8:e8:a8:85:b2:
                    33:65:f8:0b:d7:ac:b5:1d:ee:df:4d:40:6b:8f:91:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:54:90:E5:88:09:85:50:35:49:EB:6A:EA:FC:B6:4B:1C:E3:25:78
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:f7:12:10:2b:3c:70:61:fa:9d:1a:ac:38:48:71:ae:e1:
         dc:b7:bb:78:c2:35:35:81:9d:1d:1a:c0:af:b4:a7:f3:9b:3a:
         4e:2c:28:70:63:7f:5a:c9:b5:70:44:e2:13:44:ed:5d:65:2b:
         45:54:98:9f:53:f9:fe:53:32:89:52:2a:c9:9c:0e:74:62:57:
         cb:de:76:6e:5b:b4:45:e8:58:23:7e:9b:6b:0c:e8:c2:8c:6b:
         45:65:29:91:ea:e7:f3:95:55:f1:54:f5:16:fa:cc:60:b4:bc:
         2e:39:a7:44:28:98:8c:59:7b:cd:40:40:7b:e7:ac:20:db:67:
         47:1d:e4:08:15:5d:5c:99:fe:34:e6:9a:f5:46:fb:9d:7b:43:
         2b:00:84:eb:2f:db:ef:74:e2:db:59:9c:70:b8:7a:33:77:f6:
         7a:61:d3:a8:7b:12:d5:f5:db:14:b2:04:8c:e9:32:9b:be:cf:
         c4:11:de:3e:83:15:b2:38:b3:32:4e:59:f6:6b:9e:8d:69:5b:
         33:93:dd:9a:04:5f:ff:c1:d1:bd:4d:68:a2:32:96:ef:a8:dd:
         3d:76:9d:0a:7c:22:eb:3f:a2:d6:d0:ea:0c:81:de:b8:ee:c8:
         d2:4e:27:c7:33:06:01:fd:8d:34:cd:0a:61:22:c6:11:93:c3:
         1b:7f:b5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:38:24 2025 by rpki-client