Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
File:                     OM4nbIW20tDq_p0_ilpQjN26uWg.mft (raw, json)
Hash identifier:          x2a1vvX578C2cH2/dTLUHSnZ7jzd7cZyfzX8zY+JT2I=
Subject key identifier:   F9:B8:D8:B3:CA:BB:A6:9A:A6:9A:1D:8D:AB:7E:0C:1C:E4:1D:A1:04
Authority key identifier: 38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68
Certificate issuer:       /CN=A91F053E/serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968
Certificate serial:       06D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
Manifest number:          06CC
Signing time:             Fri 22 Aug 2025 22:13:38 +0000
Manifest this update:     Fri 22 Aug 2025 22:13:38 +0000
Manifest next update:     Fri 29 Aug 2025 22:13:38 +0000
Files and hashes:         1: OM4nbIW20tDq_p0_ilpQjN26uWg.crl (hash: Dx/o+IkzOv4TWRxnZjU83CVB1dfBjvQrs4L8txJACrQ=)
                          2: 6473BE24979811EB97001639C4F9AE02.roa (hash: 2h+gg3bjxIldHS97Lzce3I89lkJGy2giiZHmYtJCKjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl
                          rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F053E, serialNumber=38CE276C85B6D2D0EAFE9D3F8A5A508CDDBAB968
        Validity
            Not Before: Aug 22 22:13:38 2025 GMT
            Not After : Aug 29 22:13:38 2025 GMT
        Subject: CN=68a8eb92-4d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:b2:39:30:31:92:e1:d9:35:ea:f1:04:4a:
                    96:84:41:2c:fc:d1:80:b6:52:70:c8:12:aa:81:ae:
                    95:0e:f8:b4:41:16:c0:02:de:1f:3d:5a:16:da:bf:
                    33:8d:53:90:ee:37:d2:ef:02:be:0f:5d:ac:b9:e4:
                    9a:10:0a:8e:0b:79:3e:78:47:bc:ba:c8:0d:8d:25:
                    39:df:87:7c:08:e6:9b:0e:a6:43:f4:93:e4:18:a9:
                    64:43:23:d0:54:ec:e8:ca:11:96:96:90:1e:82:58:
                    4e:de:b9:43:e7:28:cb:ed:09:d0:80:9d:1a:29:15:
                    8d:fb:00:3a:e4:29:ad:49:82:de:6f:76:e0:a8:1f:
                    9a:0e:0f:83:57:c8:92:07:65:e1:77:63:8e:3a:ca:
                    d4:29:2d:08:a9:6e:4e:c7:f1:77:6a:03:7e:7b:2f:
                    76:5d:81:ad:40:d9:b7:1d:2e:f0:67:04:bc:30:ce:
                    f0:36:59:af:ae:20:d3:db:6f:57:6a:1e:db:84:95:
                    e4:03:1c:57:49:36:50:be:cc:45:94:a4:7f:b1:7f:
                    d6:44:c4:76:7b:a6:39:d4:72:f0:d3:63:46:69:54:
                    7a:4a:5d:78:80:5b:0b:ba:8e:58:dc:15:7d:a1:04:
                    4c:73:a3:01:f7:e0:7a:a1:17:eb:f8:93:c1:b3:0b:
                    ac:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B8:D8:B3:CA:BB:A6:9A:A6:9A:1D:8D:AB:7E:0C:1C:E4:1D:A1:04
            X509v3 Authority Key Identifier:
                keyid:38:CE:27:6C:85:B6:D2:D0:EA:FE:9D:3F:8A:5A:50:8C:DD:BA:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM4nbIW20tDq_p0_ilpQjN26uWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F053E/4EEBC2086B6B11EB85124B2AC4F9AE02/OM4nbIW20tDq_p0_ilpQjN26uWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8a:55:91:2e:8d:1c:b3:92:31:ec:10:b2:8c:d6:96:11:9f:
         ce:2b:e6:69:ee:2e:e1:00:e2:44:02:94:d0:74:cd:30:9a:10:
         cc:d2:51:90:12:c9:67:80:ba:43:97:2a:84:8c:be:4f:99:1b:
         e7:02:8e:f8:44:49:7a:08:34:9d:bf:7f:77:17:cc:e3:3d:54:
         39:4f:f1:5e:fc:1c:76:97:6e:be:f3:c6:8d:8c:49:2a:36:8c:
         10:e3:31:e0:55:d5:dc:2c:eb:1f:c6:65:c8:67:e7:4a:89:49:
         48:e8:69:81:b6:3d:15:4e:a4:19:29:5c:5f:d7:51:a0:23:07:
         2a:8e:f6:ce:c0:06:f8:53:a3:a8:d5:d4:e1:9d:b3:fa:61:e3:
         bb:15:1c:b9:49:e7:ba:e8:49:b0:65:ee:ea:35:88:fc:d3:ef:
         5c:4f:e7:7a:fb:1f:bc:c2:ea:d6:b9:06:9d:d6:ee:4d:b7:3c:
         07:76:eb:43:62:0a:be:87:53:3b:ec:29:f4:13:2b:82:15:2d:
         1d:49:f3:84:a6:dc:4a:bf:96:f5:13:79:8c:e6:e4:bd:35:df:
         3b:81:79:ce:2a:f0:5e:ad:d3:4b:28:a0:ce:fc:17:6c:d5:30:
         45:a3:61:f0:ac:0b:71:64:95:62:06:b0:5a:22:80:95:24:3c:
         fe:8b:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:38:02 2025 by rpki-client