Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File:                     oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier:          p3pPoq5HL1P8dNU1G9km1DvE2Fved9xxAEEZDUC4FAc=
Subject key identifier:   BF:E7:06:C9:B7:4B:5F:FC:17:C4:FB:9C:AF:3F:4A:00:07:DA:EC:44
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer:       /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial:       0534
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number:          0529
Signing time:             Sun 19 Oct 2025 01:17:55 +0000
Manifest this update:     Sun 19 Oct 2025 01:17:55 +0000
Manifest next update:     Sun 26 Oct 2025 01:17:55 +0000
Files and hashes:         1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: 9Spb7YvXgS6jz63E9VU1KCmy4xKX+ffd8yz7xpWD2Gc=)
                          2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: Uv/DIuVOqvX05vXkqfaNSYJYxyqVmNJFQQZ426t0Ang=)
                          3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: X2R7fBr7byP7M3KR3cBhw+xawX2t49iSaQy5emSoxD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
                          rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
        Validity
            Not Before: Oct 19 01:17:55 2025 GMT
            Not After : Oct 26 01:17:55 2025 GMT
        Subject: CN=68f43c43-6f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:29:76:81:32:96:1e:4b:78:95:f4:46:cc:
                    bc:0d:0b:38:dc:76:e4:76:57:cc:19:98:40:33:64:
                    16:18:27:8b:69:30:53:d6:15:be:6c:65:17:9f:57:
                    ef:e8:15:c3:29:5b:a0:c7:f7:80:03:ed:1c:3f:77:
                    0c:c7:70:90:10:8e:ca:58:31:52:6f:df:a0:bc:5a:
                    23:3f:e3:c0:75:d8:11:96:20:03:42:c3:f4:a2:3f:
                    0c:11:e4:6e:bc:f8:ee:cc:b9:c8:99:39:fd:e1:32:
                    88:81:eb:c5:5e:a9:1a:5d:87:d1:31:26:d9:4a:0a:
                    f3:d9:ef:ee:74:6f:23:8a:e6:de:95:b7:f6:ed:92:
                    21:e1:8c:77:3e:c5:62:c7:70:64:74:cc:d1:f5:6d:
                    81:8a:bc:a9:a0:a6:02:a2:bd:ce:35:e8:7f:48:ad:
                    de:d6:72:00:d4:17:19:5d:d5:ec:61:05:c2:db:ea:
                    f8:69:b5:45:f9:9e:1e:e0:3b:df:fb:8e:40:2a:18:
                    3b:fe:f9:f3:c1:c5:32:21:ca:64:42:cf:96:7f:95:
                    0c:40:2e:4e:3c:91:49:13:fa:5d:19:05:85:82:75:
                    d2:24:40:ef:8f:e3:04:f0:83:06:0f:cd:02:f1:8a:
                    dd:aa:ce:b9:10:7b:31:0e:6c:4f:14:88:37:53:d7:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E7:06:C9:B7:4B:5F:FC:17:C4:FB:9C:AF:3F:4A:00:07:DA:EC:44
            X509v3 Authority Key Identifier:
                keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:26:9a:72:61:40:ad:f8:47:9f:5d:a4:bf:99:bd:5f:c2:6f:
         b2:4b:78:11:dc:47:39:db:d0:ed:94:66:b2:b8:10:e7:2a:bb:
         86:3d:48:3e:fe:3c:92:b7:e0:9a:7d:d8:8a:54:dd:40:54:89:
         ed:f9:c4:79:0f:83:bb:f9:b4:4c:53:c7:24:8a:95:a8:8a:28:
         23:e3:9a:eb:86:dd:24:2e:50:92:66:41:cf:00:b9:4b:a7:c5:
         6b:0b:b3:3d:65:29:67:1a:56:20:c5:42:4f:7f:3e:68:1c:f0:
         46:8b:8f:29:cc:22:10:04:4a:50:d2:60:e8:7d:d5:68:0f:4c:
         dc:a3:d5:44:d6:2c:85:79:17:4d:4a:8d:28:c9:fb:3f:ac:11:
         73:5e:56:ad:29:ce:c7:e1:15:2d:49:77:23:61:e3:2e:3f:a8:
         47:27:d6:6a:87:26:80:0c:29:eb:9e:bf:cd:e6:b8:7e:21:3f:
         20:6c:a5:e7:c5:d7:6e:b2:d6:9f:6e:27:a2:f8:15:f4:cd:55:
         89:11:60:6c:7e:9a:32:b1:c9:34:ce:6a:c6:4f:c9:1d:21:ee:
         b6:6d:fd:dd:26:6d:5a:6b:53:4c:35:20:7a:92:77:84:85:60:
         7d:74:6b:83:6f:2e:8f:c0:d1:e9:b7:51:15:33:91:3a:10:99:
         4b:2d:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:15:49 2025 by rpki-client