Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File:                     OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier:          RBeSqhz+//tTgsPMQcVRNNMLXpDtHk76lnIkLJrpXjw=
Subject key identifier:   2B:06:10:C3:B2:53:4A:B4:32:03:55:E8:71:46:7E:D4:80:78:21:CE
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       0704
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number:          06DE
Signing time:             Wed 02 Jul 2025 22:22:35 +0000
Manifest this update:     Wed 02 Jul 2025 22:22:34 +0000
Manifest next update:     Wed 09 Jul 2025 22:22:34 +0000
Files and hashes:         1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: jrmPwBg/17fR2k8zR/IQ3rGdyy0USsi1tE0NHasbjc8=)
                          2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: jUyUfVKqSzdQ1Jiv0y+K/4ZOmbxn+iVK0WY87xliBD0=)
                          3: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=)
                          4: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Jul  2 22:22:34 2025 GMT
            Not After : Jul  9 22:22:34 2025 GMT
        Subject: CN=6865b12a-fa45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:03:00:da:6e:10:03:98:72:6a:9a:80:fe:
                    26:cc:10:0e:cc:75:82:05:88:fe:be:05:6d:15:97:
                    f3:a9:12:d9:f4:94:71:cd:87:a3:6b:50:a4:5b:05:
                    b3:6e:90:e8:45:59:3f:bc:52:34:74:f0:7a:48:3d:
                    48:10:0d:c0:6b:d9:be:38:0a:54:b2:b6:6b:61:f5:
                    eb:74:3a:e8:e8:fa:93:40:ac:6a:6a:39:78:31:64:
                    2e:f1:e2:93:91:a9:5a:4c:5f:e3:d6:0e:6a:7a:dc:
                    93:d4:f1:ca:3c:a7:5d:68:9c:93:c2:70:8e:ae:91:
                    42:67:e9:44:b1:7e:20:a6:e1:73:d1:b8:20:4e:1b:
                    a5:04:8b:85:2c:ce:b0:96:2a:49:ad:6d:02:b8:9e:
                    14:81:1b:65:90:35:63:13:10:3d:cd:1c:88:28:e0:
                    ae:03:a6:08:87:c8:bb:d7:7d:7a:fb:f3:df:66:2a:
                    3a:2f:7f:32:08:64:8a:82:c3:83:47:63:59:1a:26:
                    11:81:83:9e:ee:2e:b2:78:ad:79:b4:43:54:fb:3c:
                    bf:f8:17:7f:2c:13:99:a9:83:f7:29:ab:5a:ba:56:
                    29:30:d2:24:b8:b2:8a:ba:70:dc:23:70:67:6a:09:
                    be:6b:a0:12:08:7a:f9:a7:63:44:43:da:28:02:b8:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:06:10:C3:B2:53:4A:B4:32:03:55:E8:71:46:7E:D4:80:78:21:CE
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1a:da:6a:bf:de:c1:22:3e:2c:be:f8:2b:88:b5:15:9d:b4:
         50:af:2c:9e:b3:62:c5:ee:3d:d0:0b:97:3b:80:3c:8d:59:c4:
         be:a0:ca:ca:c6:70:62:32:0f:92:74:06:f1:bb:dc:8d:59:b9:
         06:d3:38:78:b1:6d:52:ab:55:ed:88:c9:ca:59:11:d9:99:a6:
         bb:d9:d7:31:4b:e3:ee:7f:3e:d4:79:40:8a:17:7c:f4:a3:86:
         54:1a:81:d6:c3:b4:c1:0a:f8:56:52:7c:bf:35:51:e8:18:fe:
         67:58:a9:f1:b7:2d:ba:d0:3c:83:f2:31:19:01:40:ad:cf:13:
         53:22:6f:4f:46:2a:c6:ac:c1:3d:9e:60:77:a1:52:cb:e2:6c:
         62:6d:7d:6b:5c:37:b4:f3:6a:e0:a0:3e:62:bf:65:d6:cf:a5:
         0b:dc:f9:b7:3f:5b:af:68:16:33:65:7c:a5:09:e7:56:60:bf:
         97:7b:2b:31:0f:5d:69:41:66:f7:4e:70:3e:33:b2:40:3d:3f:
         76:e0:83:c0:36:44:43:f0:6a:62:4c:6c:59:25:ba:c0:b9:34:
         d1:37:51:3c:1e:e8:34:e2:3a:25:25:d9:b8:34:16:75:a6:bf:
         4a:59:de:d4:b7:2a:62:ef:fa:7c:09:91:a6:65:77:82:8c:63:
         98:a0:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:35:59 2025 by rpki-client