Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
File:                     BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json)
Hash identifier:          44QIiPtkjKz6jjtjqMRUVMKbLgcGNxcu/n0QJ1T+rw0=
Subject key identifier:   E8:7A:3C:CE:43:2A:93:01:1B:78:CB:C8:B8:E1:CA:EB:F2:B0:89:E8
Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0
Certificate issuer:       /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
Certificate serial:       02C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
Manifest number:          02BC
Signing time:             Sun 19 Oct 2025 03:36:14 +0000
Manifest this update:     Sun 19 Oct 2025 03:36:14 +0000
Manifest next update:     Sun 26 Oct 2025 03:36:14 +0000
Files and hashes:         1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: IXlUPgn125RZKpmZlsrnIdPw8iTtKXhhZ0bEFKDW9fQ=)
                          2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: 6uwFx8/ukSzKKH+6QOFIRRiywJ0AdBaXItyBqWPv0ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl
                          rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
        Validity
            Not Before: Oct 19 03:36:14 2025 GMT
            Not After : Oct 26 03:36:14 2025 GMT
        Subject: CN=68f45cae-44a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:89:0c:82:8e:04:54:0d:5f:d0:2c:72:f8:
                    44:7f:51:1b:3a:23:14:3c:13:49:db:11:0b:0b:4d:
                    d9:04:19:73:5f:31:9d:f9:88:0f:e9:9f:7d:6f:88:
                    d5:d3:56:ff:51:b0:03:7c:b8:b1:ab:14:88:01:73:
                    20:d5:d8:57:9e:1f:eb:58:84:67:83:1a:6f:5f:1f:
                    e4:24:40:bc:18:ab:26:56:c5:3c:6c:df:e7:29:ea:
                    20:21:8a:6d:7d:d7:dd:b5:d7:b0:20:f6:a4:92:db:
                    b9:25:bf:2b:20:5a:0e:db:0b:53:14:63:38:1c:7a:
                    c9:c7:6e:cf:a4:ee:c7:1e:73:9f:91:26:59:da:b2:
                    93:4d:bc:dd:f9:89:a3:f0:09:dd:15:2d:75:5a:19:
                    b8:02:e1:0e:02:8b:21:ff:4e:07:41:c1:24:8e:43:
                    bc:4e:b0:e0:ba:85:8b:22:d8:8f:18:6e:f2:ca:b1:
                    b1:42:b6:05:fc:3d:f2:c0:1c:48:9c:3f:33:b3:df:
                    05:17:fa:f9:9c:5f:5c:12:91:bd:de:d7:d2:1d:24:
                    de:e2:f3:e3:73:d6:7f:a6:f4:03:17:52:e8:b4:4b:
                    45:58:d5:5c:c9:ab:f7:b5:f7:cd:4d:18:5e:7c:3b:
                    2f:59:ad:17:29:0a:cc:4c:c2:77:95:80:b4:a5:ff:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7A:3C:CE:43:2A:93:01:1B:78:CB:C8:B8:E1:CA:EB:F2:B0:89:E8
            X509v3 Authority Key Identifier:
                keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:30:ab:5b:3a:3b:a0:ee:32:80:9b:61:59:65:9f:27:fb:
         a0:ed:9c:1c:be:2a:c8:fc:0a:03:17:2b:6a:09:7a:e5:fc:f4:
         4d:0b:59:bf:9e:30:95:e0:b8:b5:b8:15:c3:7d:e7:4f:b1:b7:
         d9:c7:de:b2:5c:0f:ac:c0:cb:47:94:ad:ba:7f:12:8f:56:ab:
         d2:c8:67:01:21:05:24:21:17:b6:20:13:10:1b:80:25:3f:92:
         93:15:f8:1a:84:90:d8:e7:a7:51:12:0f:27:e2:bd:0b:2b:4d:
         d4:92:04:5a:e7:04:83:98:af:29:3d:f2:52:35:40:c7:07:2c:
         e8:da:cc:c5:aa:c7:e5:5c:10:b7:57:1d:50:44:45:db:b3:87:
         3e:36:6c:11:e2:df:8e:f5:88:e3:66:95:ef:9f:14:1d:83:60:
         f0:b3:c0:d8:40:aa:16:49:2c:51:32:3c:3b:c7:e4:39:b5:f5:
         34:34:cc:18:9e:28:b6:c1:be:fd:bc:c7:e0:e5:e7:6f:82:fd:
         95:86:18:82:98:21:a3:d7:d4:17:15:49:4a:1a:c4:f9:4a:a7:
         c7:45:47:95:73:96:cd:0b:e8:46:b4:76:ae:54:d6:cf:9a:e8:
         33:01:9b:08:60:ee:3e:91:ac:58:17:f4:e4:d0:63:7a:a9:40:
         14:bc:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:03 2025 by rpki-client