Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
File:                     OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json)
Hash identifier:          6wrUG1gOvhjVNAxL2NSpHRL2ThN8VoLgZRwhyNisKNM=
Subject key identifier:   93:FD:7A:71:8C:91:75:F5:A1:29:07:D9:F2:F3:23:A9:90:49:E9:6A
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Certificate issuer:       /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
Manifest number:          C5
Signing time:             Sun 19 Oct 2025 08:59:49 +0000
Manifest this update:     Sun 19 Oct 2025 08:59:48 +0000
Manifest next update:     Sun 26 Oct 2025 08:59:48 +0000
Files and hashes:         1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: QcTjZ6nGS4gi1xpHWjBi8J5nmrCI82D7Y/EZiQkLjGw=)
                          2: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: q2PsmBaPUlGvEput/dvI1P9mbtnk1siucrhRcpQcM5A=)
                          3: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: jJmFWeK8DxzcyCmNzQTOimZpBnvjDB61t5aPUy56grE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
                          rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
        Validity
            Not Before: Oct 19 08:59:48 2025 GMT
            Not After : Oct 26 08:59:48 2025 GMT
        Subject: CN=68f4a885-79f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:9e:b1:09:23:5c:4f:4e:e0:3b:14:60:3c:
                    eb:dc:17:1f:8e:a8:1d:f4:7f:d6:7c:06:a3:66:48:
                    2f:5a:bf:76:c1:0b:75:c4:2f:3f:6d:75:92:9a:c2:
                    25:f6:f8:50:59:fc:0f:8d:42:74:a1:c1:29:11:0c:
                    67:bb:ab:6d:7c:a5:23:94:2e:10:44:ff:ea:26:90:
                    01:57:71:1c:42:aa:63:b1:e0:f7:d3:52:30:91:df:
                    52:55:52:76:3f:c1:bc:20:01:a2:bf:1a:29:8f:bb:
                    25:8a:19:63:06:d9:cd:5b:67:c7:7e:ee:e6:4d:8c:
                    c5:cc:08:d9:53:03:85:be:92:9a:89:29:75:69:35:
                    e7:55:48:fd:77:51:bf:3d:d9:87:94:66:de:11:4e:
                    e8:2a:8e:ee:79:08:e7:dd:c4:33:66:1f:73:5e:f1:
                    70:53:a2:d2:48:b6:27:31:91:b9:dd:69:b7:a6:8b:
                    06:a0:88:56:6a:f6:be:de:7e:7f:2b:d1:c2:98:81:
                    60:f6:c9:c6:f6:50:28:63:d3:e6:f2:43:c7:db:a7:
                    29:08:db:38:a3:0e:91:2e:46:99:3b:4d:62:4a:10:
                    41:12:7e:35:02:2b:0a:97:6f:d3:0f:25:b8:65:36:
                    e6:42:98:3f:0f:b6:88:99:80:26:cc:05:4d:ee:da:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:7A:71:8C:91:75:F5:A1:29:07:D9:F2:F3:23:A9:90:49:E9:6A
            X509v3 Authority Key Identifier:
                keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:02:0b:5d:bb:31:b8:f5:06:c1:91:cb:8f:63:84:b3:c4:
         1e:ab:65:57:b5:65:77:0a:70:bd:54:73:15:f8:13:83:25:6e:
         8c:04:bf:4e:3a:f1:b9:84:af:42:4a:8a:d8:d6:36:c1:17:1c:
         5a:fa:f3:9c:08:1e:9c:a4:9b:45:03:ad:b8:fb:68:25:63:0a:
         e2:28:8c:55:00:1c:2b:13:08:f4:ac:98:28:76:fc:e0:d1:20:
         66:c0:27:0d:71:2b:ba:3e:e2:45:7b:bd:fb:48:31:4f:16:6b:
         58:50:2f:4c:89:28:b9:b9:9a:27:df:60:76:33:d2:9d:26:39:
         88:95:5f:a2:43:4d:fe:5c:a4:17:c2:aa:e9:ea:35:46:4e:8d:
         54:50:69:3c:7f:93:14:9a:17:90:71:5d:84:47:58:e9:b7:35:
         2a:d2:84:43:e1:06:19:00:83:31:19:6c:4b:d2:8f:b5:ac:69:
         53:fb:ef:65:52:1e:80:75:6b:fb:e0:5c:8d:f7:f0:49:7c:0f:
         fc:38:ff:1c:d7:78:da:b3:22:06:73:ca:b7:db:59:60:b6:a9:
         5f:97:72:1a:aa:56:0b:06:46:3f:99:11:5a:28:c1:6e:6f:41:
         d7:9d:05:65:ab:ec:28:7f:8c:b3:bb:ab:dd:70:51:37:c2:03:
         73:30:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:33 2025 by rpki-client