Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File:                     B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier:          cOvrVEtIVe7f5/ESRx2WMUCQppVtX+LU/nuZlY0giDE=
Subject key identifier:   F1:6E:D8:FA:C6:CE:27:BD:44:8E:62:DF:36:BC:0C:1A:E4:76:60:ED
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0C13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number:          0BEE
Signing time:             Sat 18 Oct 2025 19:41:54 +0000
Manifest this update:     Sat 18 Oct 2025 19:41:54 +0000
Manifest next update:     Sat 25 Oct 2025 19:41:54 +0000
Files and hashes:         1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: XUQA6HnNd2gGnJEBQUo2SshCpoGi7s3780PUcF3d6as=)
                          2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: mByxm9I42Bs2d4gYmGlnX4gxjstMQucwv5VLhWttHFY=)
                          3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=)
                          4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=)
                          5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3091 (0xc13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Oct 18 19:41:54 2025 GMT
            Not After : Oct 25 19:41:54 2025 GMT
        Subject: CN=68f3ed82-995b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:15:91:1e:1d:9d:ec:98:ba:a6:73:46:1f:
                    61:30:0f:35:ee:30:a3:48:a8:fd:f2:27:43:af:1d:
                    b0:12:51:64:d1:36:ef:0b:8b:3d:fc:38:13:a3:97:
                    29:36:92:f6:45:b1:3c:06:bb:cc:db:d9:14:68:f2:
                    97:bc:cf:72:bc:d8:6b:27:a3:45:af:06:48:e6:20:
                    6c:21:bd:76:4b:2d:93:10:ff:31:3d:71:aa:da:a3:
                    eb:32:3d:fd:65:de:81:cf:66:e6:e6:8a:2e:bd:89:
                    a6:6f:3f:6d:07:88:3f:ed:2b:88:9a:df:2d:0a:5c:
                    7a:81:2e:77:9a:7c:3f:51:2a:75:18:6b:05:7b:d9:
                    a2:00:4d:e2:29:9e:be:c7:a6:66:74:19:06:55:7b:
                    01:c6:f6:cb:0d:d4:05:c8:f1:30:91:99:38:d9:0d:
                    c7:62:c0:21:e5:f8:4e:b6:d6:06:0a:a2:d4:88:05:
                    89:8c:6d:89:26:1a:00:c4:24:3b:d0:72:a9:bf:a4:
                    c3:fd:ca:8f:48:6b:8e:c8:16:0d:da:81:fc:c0:71:
                    52:78:47:d7:8a:5f:42:bb:69:c1:b9:84:d9:b3:5b:
                    d0:58:aa:2a:6c:d4:3e:59:d8:5d:ca:f5:59:4a:ff:
                    d7:ff:45:54:64:8e:42:00:ef:cd:24:11:ae:fb:55:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:D8:FA:C6:CE:27:BD:44:8E:62:DF:36:BC:0C:1A:E4:76:60:ED
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:9b:1e:bc:dc:ae:f8:fa:9c:9e:50:f3:96:57:f2:82:84:
         3f:a5:62:ff:8b:df:e4:8a:da:56:bb:2d:f6:4e:b8:65:25:9d:
         50:99:79:db:78:0b:ec:dd:ed:45:c7:2d:74:d6:3d:de:18:da:
         44:b5:a6:4f:89:45:5b:1e:5a:d0:4e:71:f5:47:bd:a2:9c:1d:
         3f:34:bf:02:2d:b2:c1:36:ea:66:21:fb:6d:42:49:53:78:8d:
         39:d3:1d:04:c3:33:02:79:b2:ff:58:f7:b4:3e:43:34:2c:eb:
         59:11:34:09:eb:8a:03:e2:ea:8e:c1:33:2c:51:c4:f2:a1:bc:
         d3:03:59:56:c3:34:bc:51:13:44:28:44:ee:9e:79:9d:5b:33:
         cd:bd:5e:52:fb:70:06:13:ae:37:76:3f:73:17:79:1e:84:d0:
         4f:1d:1a:3c:db:83:a0:07:13:40:11:97:ab:2f:2b:38:ad:74:
         b6:2d:a9:c6:9b:83:71:14:43:9c:1a:b4:0f:7b:c3:0e:43:94:
         d9:be:88:fc:bf:33:4f:f5:45:d1:1c:72:e6:ac:84:8d:35:75:
         8d:8f:b1:a5:8e:66:0a:b7:2c:20:d1:9c:f8:fb:e9:d6:a1:75:
         e3:b0:a9:54:6e:d4:b2:88:00:6e:d9:88:a2:3f:61:a4:27:8b:
         0f:f6:f2:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD
QTE2RDlDRDUwHhcNMjUxMDE4MTk0MTU0WhcNMjUxMDI1MTk0MTU0WjAYMRYwFAYD
VQQDEw02OGYzZWQ4Mi05OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA42YVkR4dneyYuqZzRh9hMA817jCjSKj98idDrx2wElFk0TbvC4s9/DgTo5cp
NpL2RbE8BrvM29kUaPKXvM9yvNhrJ6NFrwZI5iBsIb12Sy2TEP8xPXGq2qPrMj39
Zd6Bz2bm5oouvYmmbz9tB4g/7SuImt8tClx6gS53mnw/USp1GGsFe9miAE3iKZ6+
x6ZmdBkGVXsBxvbLDdQFyPEwkZk42Q3HYsAh5fhOttYGCqLUiAWJjG2JJhoAxCQ7
0HKpv6TD/cqPSGuOyBYN2oH8wHFSeEfXil9Cu2nBuYTZs1vQWKoqbNQ+WdhdyvVZ
Sv/X/0VUZI5CAO/NJBGu+1WgJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFu2PrG
zie9RI5i3za8DBrkdmDtMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2
MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs
cTAtYjlOcFN0dFhLRnRuTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxI5sevNyu+PqcnlDzllfygoQ/pWL/i9/kitpWuy32TrhlJZ1QmXnb
eAvs3e1Fxy101j3eGNpEtaZPiUVbHlrQTnH1R72inB0/NL8CLbLBNupmIfttQklT
eI050x0EwzMCebL/WPe0PkM0LOtZETQJ64oD4uqOwTMsUcTyobzTA1lWwzS8URNE
KETunnmdWzPNvV5S+3AGE643dj9zF3kehNBPHRo824OgBxNAEZerLys4rXS2LanG
m4NxFEOcGrQPe8MOQ5TZvoj8vzNP9UXRHHLmrISNNXWNj7GljmYKtywg0Zz4++nW
oXXjsKlUbtSyiABu2YiiP2GkJ4sP9vKx
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:30 2025 by rpki-client