Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File:                     OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier:          wSah3ItbKuzXNXL76bQL7eWrpK8DV8Gg0ti2OHvV+yQ=
Subject key identifier:   E3:A2:AD:FA:59:28:49:84:F8:38:0D:D4:46:BC:03:B3:04:F4:42:37
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer:       /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number:          01C7
Signing time:             Sun 19 Oct 2025 05:24:24 +0000
Manifest this update:     Sun 19 Oct 2025 05:24:23 +0000
Manifest next update:     Sun 26 Oct 2025 05:24:23 +0000
Files and hashes:         1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: /KtdbNJnx6xs3QPiVXeBf/hGEi2YIxnC5iWzRV0qam0=)
                          2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: LDgnrMv06w2uH/2SaOTlpFRL0ITCYwRDAQrZfxJgOVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
                          rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
        Validity
            Not Before: Oct 19 05:24:23 2025 GMT
            Not After : Oct 26 05:24:23 2025 GMT
        Subject: CN=68f47608-d5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:e5:db:d5:e2:5f:fe:8f:3b:9c:7f:58:57:
                    4b:87:44:fd:38:49:67:3e:18:ae:ef:51:ed:fa:33:
                    df:82:7f:23:a5:81:96:34:50:9c:18:58:29:58:44:
                    fb:84:a7:fa:f0:04:8a:20:7a:29:97:17:b6:dd:49:
                    c0:c7:8c:fd:a7:67:1b:7a:00:d1:f4:cb:9c:88:f7:
                    b2:99:ed:21:2c:32:f6:16:c4:61:de:7f:e1:75:b5:
                    2e:fe:be:75:19:b3:b3:9e:bd:46:70:ee:92:3f:9e:
                    04:d4:ed:08:0b:05:8e:80:e2:72:90:36:53:ce:cd:
                    4b:a3:93:aa:e9:18:37:a2:34:ab:e7:49:91:06:5d:
                    30:6b:98:78:4b:30:0a:d1:3d:f2:1d:1e:f4:01:f5:
                    86:b4:e9:dc:3c:7e:4f:89:3e:c6:90:f7:b5:d1:1d:
                    3e:c5:cf:b8:f0:4b:37:48:52:53:99:a7:26:96:a4:
                    ba:98:57:67:4b:fb:64:c8:07:3a:df:c0:c5:b1:45:
                    a3:5b:12:33:7a:61:bf:df:0a:0e:ea:b2:a4:d7:20:
                    14:a1:42:69:9d:99:20:5d:16:eb:f2:25:8e:e5:e0:
                    e5:8b:55:b8:1d:2c:06:18:77:24:a6:16:44:38:84:
                    bd:0d:0b:9b:ee:4a:02:ce:28:ef:dc:9a:71:6b:e6:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A2:AD:FA:59:28:49:84:F8:38:0D:D4:46:BC:03:B3:04:F4:42:37
            X509v3 Authority Key Identifier:
                keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:82:66:33:bc:62:f5:aa:1f:99:21:1a:a6:c7:48:3d:45:
         de:e7:eb:40:67:90:83:b4:fd:b1:96:4a:df:38:c7:58:40:a4:
         6f:b7:28:a6:a1:28:10:38:39:be:1f:d9:21:87:ff:fb:55:ae:
         88:5b:8d:60:9d:a2:86:20:ec:e3:0c:9b:c4:6a:9d:0b:7e:83:
         1e:69:81:37:ec:92:36:55:19:ce:d0:57:0b:69:af:d2:8a:e0:
         80:9f:d4:6b:ea:af:7d:c5:77:56:b8:01:eb:d2:ef:d9:63:ec:
         fe:0f:0e:b5:62:13:38:b9:cc:b2:c6:58:cd:8f:88:bd:6d:05:
         4e:c2:cb:e5:7b:c0:c1:5f:af:61:b5:32:16:6a:4d:59:e3:5b:
         f2:bc:7a:93:0c:2c:ca:27:dc:f5:dc:48:a2:d2:aa:6c:f7:ff:
         9d:8c:77:f4:29:5c:0f:fc:84:6b:c2:25:f5:2d:5d:6f:63:f7:
         3d:d4:81:70:d9:71:5f:c7:02:a7:7d:e9:6a:6f:17:15:9d:e6:
         d6:9d:2f:33:a2:dd:e8:c4:17:87:05:bd:5d:34:da:54:cf:8f:
         8e:ac:6d:80:d4:f3:74:5e:01:4d:72:8b:04:c7:db:a3:88:f4:
         45:b5:94:28:22:5e:13:6b:af:e1:8a:22:42:b3:33:77:5e:0e:
         2c:70:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:08 2025 by rpki-client