Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File:                     0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier:          /+PSPieu9uxIFtyQGyGdmOldnoP8fmpJx174zW7L7/0=
Subject key identifier:   E2:DF:A4:AA:21:03:CE:B3:C1:E6:3B:B7:82:6F:28:5F:21:34:DA:70
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer:       /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number:          01F9
Signing time:             Sun 19 Oct 2025 04:50:55 +0000
Manifest this update:     Sun 19 Oct 2025 04:50:54 +0000
Manifest next update:     Sun 26 Oct 2025 04:50:54 +0000
Files and hashes:         1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: RYBbbIm0nzYAsWhj+2OVrbCIJWapJhWJe4alwQ5c054=)
                          2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: 9uR9cVnp9mE1i5KXBSkkfpXEwSfx3/BMoE6xrI/LuMM=)
                          3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: jVsOkESQWaLXR1oAo7YvVLXTH7CGZNa6Fnq6GGFvuF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
                          rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
        Validity
            Not Before: Oct 19 04:50:54 2025 GMT
            Not After : Oct 26 04:50:54 2025 GMT
        Subject: CN=68f46e2e-0948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:76:57:cb:51:34:ac:59:59:d4:76:78:98:73:
                    b6:4e:3a:1a:aa:6c:05:4d:66:08:21:af:fe:38:f7:
                    d2:28:3e:11:c0:79:44:1f:8f:86:53:25:4f:9b:36:
                    1d:c4:f8:52:2e:2a:71:8a:6e:f3:da:3c:ac:63:b5:
                    59:e8:b9:e5:c5:ef:a7:2b:60:fa:bb:2c:51:df:95:
                    79:b4:c7:ce:b6:43:a9:7e:4f:af:26:be:35:83:d9:
                    15:4d:94:e5:c8:9b:de:19:cb:b5:b0:28:de:cc:97:
                    de:01:10:87:42:d0:22:e4:65:db:0d:7c:ef:cd:8c:
                    b3:be:c4:7c:46:a0:03:09:7a:86:d0:ca:d4:a1:a4:
                    64:40:ae:7a:07:c8:d1:a8:79:2e:b1:d7:00:73:bf:
                    ce:1c:ad:25:f8:c3:2a:16:47:2c:17:30:7f:95:34:
                    7c:e2:74:47:09:d5:29:20:5c:b6:42:49:b9:f1:3c:
                    bc:c2:13:7f:f5:f7:35:f4:64:1a:b8:60:17:5d:c5:
                    65:e0:91:be:12:e3:bd:db:62:42:6d:08:70:39:1e:
                    df:b6:44:71:aa:94:66:48:89:7e:13:b2:82:36:7b:
                    45:12:8d:74:ff:38:e8:f2:4d:e2:4d:46:3b:f0:30:
                    df:3e:48:a4:e6:a9:18:31:83:c5:71:78:45:a7:0b:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DF:A4:AA:21:03:CE:B3:C1:E6:3B:B7:82:6F:28:5F:21:34:DA:70
            X509v3 Authority Key Identifier:
                keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:db:ed:f4:a4:1e:4f:00:4c:18:12:a7:0c:55:b5:53:46:a7:
         ce:38:74:34:60:17:c3:24:59:df:57:29:3c:6f:93:3d:19:a9:
         b2:1c:24:a6:22:be:c4:c4:ea:1e:f1:3c:7f:45:9b:fb:b6:23:
         db:dd:1a:26:c3:7c:37:70:58:de:7b:d2:0a:49:36:5a:3d:c6:
         ab:71:77:3b:f2:13:24:73:72:25:f2:7a:f8:67:d8:aa:a6:62:
         0c:de:54:e7:c5:97:bb:23:3d:fd:b1:bb:71:26:8e:22:ea:d7:
         92:14:03:7f:44:04:96:5e:7c:3d:0f:bc:37:82:17:21:96:71:
         41:cc:c6:94:c1:e1:31:54:cd:a9:ec:e4:78:02:35:46:a5:6b:
         e0:22:4e:53:2e:da:33:b9:f1:49:3e:d5:48:54:98:ae:c4:bf:
         4d:2e:d0:a4:6f:5d:17:a3:f4:03:d1:15:3b:dd:9e:3d:cd:71:
         cf:01:46:a3:2a:f7:0c:b2:b0:18:b9:7b:40:ce:f5:af:87:f4:
         9e:0b:7c:a2:d0:c5:91:49:7d:17:a4:4c:b1:02:fb:2b:17:2a:
         10:dd:45:f3:91:02:af:d4:2b:28:52:6e:dc:25:02:76:c3:88:
         c2:39:a9:45:35:d0:ec:26:dc:e1:42:3b:ea:7c:2b:e7:85:36:
         9f:b4:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:27 2025 by rpki-client