Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
File:                     1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft (raw, json)
Hash identifier:          33Dee9h5xvmTZtlxVGLlJ295PDnLj9cmcShqRz9Hp6Y=
Subject key identifier:   9D:7D:FC:E0:04:76:5A:39:83:93:AE:F0:A0:B8:51:1B:5C:10:D2:62
Authority key identifier: D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
Certificate issuer:       /CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
Manifest number:          BD
Signing time:             Sun 19 Oct 2025 09:06:19 +0000
Manifest this update:     Sun 19 Oct 2025 09:06:18 +0000
Manifest next update:     Sun 26 Oct 2025 09:06:18 +0000
Files and hashes:         1: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl (hash: a92dVwmT0zrAkA5FEqcLc5GnjZ6HhJU5KF734oAizSU=)
                          2: E6721B6E908211EFAC47F726C4F9AE02.roa (hash: Db1IjAN6j335Sw0gQLUk68pP8yGCP41bxuCBDXUeviA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5C7, serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
        Validity
            Not Before: Oct 19 09:06:18 2025 GMT
            Not After : Oct 26 09:06:18 2025 GMT
        Subject: CN=68f4aa0b-6d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:15:92:d6:d4:41:7e:0a:9c:0e:6e:a8:a0:
                    66:5c:06:65:1a:a2:1e:4c:63:fe:6d:07:20:72:8c:
                    a6:b7:bd:73:58:f1:7a:be:2f:b7:43:2a:a4:33:ee:
                    09:59:74:0c:5e:8a:c3:df:d2:68:5d:c0:52:1c:45:
                    9e:de:53:dc:98:70:5c:d2:b6:c1:8e:5d:c8:c3:ec:
                    f9:83:e8:ae:94:14:26:a1:35:eb:43:c4:dd:55:53:
                    8c:5b:80:57:28:78:8f:9b:82:33:6e:c6:2f:3e:8b:
                    09:c5:c1:8c:a7:3a:43:8d:9f:f0:a4:0a:f4:02:5f:
                    d5:8e:eb:0c:57:e2:33:8b:fc:8e:bd:81:1b:78:ea:
                    e0:6d:89:c1:74:6f:66:e8:ff:87:e3:7d:4a:bd:06:
                    00:bc:c0:c3:44:dc:84:4f:8f:6e:5b:4a:49:e8:42:
                    42:7d:d0:dc:f1:08:0d:0c:e9:b1:51:1c:78:a7:01:
                    ff:f9:13:4a:82:50:c6:c4:93:ea:d5:f5:6c:19:42:
                    b0:4c:13:8f:cc:f1:f8:77:67:3b:a0:89:04:f7:f2:
                    4d:71:4b:99:a4:fa:17:37:84:c1:68:9a:1a:31:60:
                    de:a6:c5:9e:20:08:80:5d:34:69:c7:6e:37:d8:ca:
                    51:6f:ea:55:77:96:00:44:b8:47:49:c5:3a:00:3c:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7D:FC:E0:04:76:5A:39:83:93:AE:F0:A0:B8:51:1B:5C:10:D2:62
            X509v3 Authority Key Identifier:
                keyid:D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5e:55:03:f3:da:fc:42:1a:2e:5e:d9:88:e9:8c:68:7a:e0:
         02:46:71:5e:0b:91:cd:b3:9a:60:38:28:3c:6c:36:9f:5f:79:
         b2:42:b6:aa:58:77:6a:23:5d:5c:af:3c:e1:bc:4e:e1:c1:4b:
         ee:5b:ee:a2:33:5b:ed:0e:0d:ec:4c:cb:94:b8:a9:96:6a:87:
         55:56:01:de:7e:40:a9:3e:5c:5e:4e:d9:90:62:f4:ae:55:74:
         83:92:12:9f:3f:c6:b7:bb:72:37:8f:ee:27:c2:9d:3a:aa:d8:
         e1:af:18:12:df:04:0f:17:21:19:44:32:30:a7:5b:e4:dc:89:
         ad:e9:ab:a6:01:17:2b:d2:61:1e:ad:97:5d:4d:a9:aa:65:94:
         d7:c1:77:ed:93:71:d3:1a:fe:5c:44:f9:8f:aa:a7:91:3a:57:
         bc:0b:c3:9b:8a:47:50:50:65:fd:15:6c:34:3b:18:49:e1:de:
         b6:61:23:45:bb:ac:9d:60:e7:24:12:e9:40:75:4b:f3:f7:a0:
         28:4e:fb:fb:da:70:01:40:14:b9:85:ef:41:10:92:14:02:3c:
         89:75:47:0b:44:bf:a2:d5:4e:03:5c:81:b1:4e:a7:d2:3a:3e:
         4a:43:3b:95:35:f5:51:f1:74:6e:ca:56:19:58:e4:0e:1e:6a:
         a2:70:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:44:22 2025 by rpki-client