Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          rx/03n57edzR/nzyn8l2pyEU/YBt+5y7iSwjt3ZQWwQ=
Subject key identifier:   BF:F8:AF:1E:E9:23:DA:11:CE:A2:12:48:B1:40:34:F0:0E:5B:CD:19
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       037D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          0376
Signing time:             Sun 19 Oct 2025 02:54:25 +0000
Manifest this update:     Sun 19 Oct 2025 02:54:24 +0000
Manifest next update:     Sun 26 Oct 2025 02:54:24 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: AmapMO/IOwcCj/pSap9i4fzlkUcnkraKxiP4OwVzg5w=)
                          2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=)
                          3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893 (0x37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Oct 19 02:54:24 2025 GMT
            Not After : Oct 26 02:54:24 2025 GMT
        Subject: CN=68f452e0-17b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:36:bb:37:ab:a0:f5:34:5d:c9:e3:3a:b1:
                    c2:02:71:0e:d3:15:9c:32:5e:a6:7c:3f:76:51:01:
                    55:ba:09:03:76:b3:32:47:d4:df:0e:56:0a:99:16:
                    fd:e1:85:7b:5f:07:f7:80:cb:a6:fb:59:82:00:69:
                    7f:c6:77:35:6a:b8:df:6e:22:00:fa:3b:f8:52:d7:
                    21:40:63:61:52:fe:2e:6e:a1:3e:b8:2f:43:9e:89:
                    5b:be:8f:42:b3:93:c1:78:11:4c:26:49:74:cb:f6:
                    05:47:6a:26:03:07:90:e4:4e:3d:e5:4e:2a:3a:a9:
                    5b:8a:91:8b:0b:49:57:38:12:5d:12:b9:6b:10:51:
                    ba:fa:78:7a:93:1e:10:de:c2:e0:73:2f:58:9c:eb:
                    20:b8:fe:b7:a5:aa:41:71:5e:7e:68:4f:8a:01:a3:
                    3c:66:7e:6c:1e:91:0f:e7:73:fb:9c:87:1b:3e:79:
                    20:13:6f:86:f1:fc:57:7a:2b:5c:d8:a4:9a:da:3c:
                    b5:83:f9:2b:53:1b:8b:50:b3:b7:07:6f:62:29:f3:
                    ff:31:c1:51:6d:1c:3b:7a:b4:9e:b0:ad:be:11:b9:
                    51:5f:14:b5:87:e5:57:45:6d:e0:a1:c0:94:97:7f:
                    fc:13:b6:1d:f2:bb:12:d7:3f:e9:da:59:de:8e:23:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:AF:1E:E9:23:DA:11:CE:A2:12:48:B1:40:34:F0:0E:5B:CD:19
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:54:da:03:75:4d:cf:32:5f:5c:98:e8:c5:0e:ba:44:33:ca:
         2f:cb:1d:e0:ce:96:5f:4c:f2:ab:fc:49:56:59:06:9b:45:62:
         d1:a7:ad:79:30:6b:6f:56:00:e3:f4:21:11:35:c5:58:8a:85:
         72:bd:b6:96:cc:f4:c5:e0:7d:9c:63:9e:5b:66:3f:07:e5:87:
         35:11:db:27:c5:e5:fb:de:00:a9:63:28:32:a1:a0:d8:9f:39:
         23:fd:92:d2:51:9d:21:e9:56:59:e5:91:d0:80:fc:ae:e8:14:
         dd:4a:e5:44:c8:40:e8:02:66:d1:ca:0c:8e:4f:0d:85:f3:69:
         18:23:cd:28:cc:8e:d5:fa:23:48:ea:f2:bc:b6:db:ea:27:49:
         04:6d:39:99:73:c8:9e:44:c6:89:af:42:47:e7:16:70:47:30:
         4e:fb:cc:05:fd:d2:3b:52:d5:a1:55:b0:ab:43:d3:15:cf:4d:
         a0:e5:eb:c2:46:be:07:67:ec:93:51:93:70:59:f5:c0:6e:b3:
         8d:31:97:6a:7b:02:75:ff:52:32:c4:e3:96:74:8c:47:60:a0:
         99:e1:c1:9d:03:34:41:bc:30:c2:f6:16:3c:bd:d2:5c:2b:4f:
         4b:27:6d:2f:a1:2a:99:04:fb:c3:3b:30:fe:7f:29:64:38:19:
         0c:6d:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:46 2025 by rpki-client