Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File:                     OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier:          N98HM6uld9Q2hkUqUqebFNBfnLn0WKNqGagEnGBO/5w=
Subject key identifier:   87:75:87:F1:A8:E9:C5:B9:CB:F8:2E:81:3E:4F:22:83:E1:E7:B4:58
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       0740
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number:          0717
Signing time:             Sat 18 Oct 2025 23:21:09 +0000
Manifest this update:     Sat 18 Oct 2025 23:21:08 +0000
Manifest next update:     Sat 25 Oct 2025 23:21:08 +0000
Files and hashes:         1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: oBRE4u/jB/us8fL8vExZgTXLp3f1YohbzuIsGMTiHvE=)
                          2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: o5gUgXmaKSWEv0MLbiES70rfGmATgfeJQNOpimJu/i0=)
                          3: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: PWv8/9+Uhep2yT4HPtU6HwobEUDh72i1to9IIzKKwYY=)
                          4: B8D1689472E411ED833AE326C4F9AE02.roa (hash: KnjjlwBGZGlHwB2/vZh3+dF2wHN6eqe/SSteWBcMXo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Oct 18 23:21:08 2025 GMT
            Not After : Oct 25 23:21:08 2025 GMT
        Subject: CN=68f420e4-892a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:db:cb:f7:c3:85:b7:3c:71:2b:d3:48:a8:
                    ab:f3:77:55:b9:be:08:43:d7:93:dd:c5:2d:cc:2d:
                    b3:86:4a:27:c8:b6:f2:cd:bc:ee:d1:99:ee:31:63:
                    11:33:d2:96:4a:f6:c0:49:28:f3:ca:7e:72:a1:42:
                    17:6a:af:61:35:6d:23:8e:39:db:1f:9e:5b:4f:23:
                    2f:8e:a3:0a:b2:2b:7d:0a:31:58:1d:b0:01:1e:b9:
                    7b:1d:64:19:65:11:70:07:a1:33:c8:94:c3:3d:c2:
                    f2:e3:bb:36:eb:21:55:52:1e:86:5c:7e:1a:ea:08:
                    dc:61:51:aa:50:c9:53:2c:48:c9:82:52:ac:22:58:
                    dd:89:c0:ee:e8:15:ca:68:9f:ff:ac:70:c6:33:43:
                    aa:3d:4d:6b:37:19:e7:3c:a3:c6:05:04:00:15:dc:
                    66:b6:6d:15:c5:00:f1:58:62:bf:8a:90:a8:8c:6b:
                    b6:83:ba:3e:e8:1d:21:17:3d:56:02:81:08:0b:56:
                    57:fb:7a:f5:15:b7:c6:10:2b:25:0b:65:b8:bc:3d:
                    6a:0b:64:87:00:35:ce:ec:c0:ec:fe:70:71:c9:84:
                    f5:07:9d:c8:7f:53:6f:ca:4e:0f:ea:6f:80:82:18:
                    51:45:9e:14:5b:27:d2:66:e0:fa:bd:2b:14:fe:79:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:75:87:F1:A8:E9:C5:B9:CB:F8:2E:81:3E:4F:22:83:E1:E7:B4:58
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1f:d4:66:6f:07:37:ef:89:e8:33:b0:42:d3:c9:36:9a:7f:
         2d:ae:9e:64:83:27:b9:6a:da:45:da:e0:51:13:1b:4b:6a:82:
         a5:3f:50:a0:70:a6:55:70:91:d7:66:9f:36:c3:80:c5:22:7b:
         4e:31:3b:07:c0:92:71:e8:90:87:b7:6b:c4:f8:ed:f4:f1:32:
         ba:8e:d6:0b:4f:72:5a:fc:47:ac:45:f9:dc:c1:2e:13:01:54:
         a5:ef:be:ea:a2:bb:8a:98:04:4a:74:ce:36:e3:58:62:5e:dc:
         78:a3:3a:64:dc:e5:a3:e0:06:5a:69:a4:b5:ff:30:91:e3:fd:
         f9:15:9e:fa:45:a0:da:51:30:1e:09:1c:a3:03:b1:3c:2c:ab:
         3c:4c:63:af:68:68:db:7f:da:6b:0f:be:98:b6:bf:cd:9b:9c:
         d0:45:bc:2e:28:62:54:00:67:37:82:3c:2e:41:7a:2f:79:60:
         a8:cc:aa:47:f2:66:ae:be:6c:dc:03:b9:82:82:a2:1f:ac:57:
         9d:ba:d0:72:6a:56:8a:87:9f:4d:25:74:b2:2e:9a:53:52:ad:
         1b:fb:df:c1:8c:20:ba:a9:f4:ab:7d:ff:db:3e:03:58:c5:94:
         2c:52:76:50:99:49:85:c8:a0:c1:01:4c:00:5a:18:34:23:50:
         dc:ac:a7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:16 2025 by rpki-client