Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
File:                     d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json)
Hash identifier:          qOMhYa+7XAri3CZgA5bJ7CH85iTAObgKOJ/JJscY2NE=
Subject key identifier:   79:E0:93:BF:48:46:E9:AB:BD:E6:AD:96:3C:F1:6D:B5:45:DB:3D:AC
Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
Certificate issuer:       /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Certificate serial:       0BDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
Manifest number:          0BCF
Signing time:             Sat 18 Oct 2025 19:45:12 +0000
Manifest this update:     Sat 18 Oct 2025 19:45:11 +0000
Manifest next update:     Sat 25 Oct 2025 19:45:11 +0000
Files and hashes:         1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: 7oyLkAFuw9g8uRvq5aklZUR7MAOIMbPLYDQNxbUA8jg=)
                          2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: wE6z56gItRRwWH8NQGesjQ0xX5sSLBqbBFe4JVJ50FU=)
                          3: 951CA536C1B511EF87BCEA11C4F9AE02.roa (hash: GqSqhnn63EZ4p4JuVF5u2QSaZSQqUmP27m/tmKbsSUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
                          rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034 (0xbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A69E, serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
        Validity
            Not Before: Oct 18 19:45:11 2025 GMT
            Not After : Oct 25 19:45:11 2025 GMT
        Subject: CN=68f3ee47-c59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:cc:00:ba:80:63:42:ee:27:e7:3f:e6:2a:
                    37:db:79:90:f7:4d:e5:56:eb:8d:fb:50:72:cf:c3:
                    26:78:81:ad:51:b8:e1:18:9c:38:32:3d:e5:a4:6e:
                    5a:58:7d:58:c1:01:d4:38:0c:6d:59:ca:21:e7:8f:
                    a5:8d:60:0e:6e:13:4e:8a:1e:de:cb:4f:94:09:b1:
                    ff:c7:f1:2c:c3:f6:fd:94:99:79:8c:04:5a:2f:b3:
                    57:b0:e5:9b:4b:e3:8e:08:1f:53:42:b4:05:1b:5c:
                    be:42:6a:d3:d4:e1:cb:b7:f6:90:04:ad:37:ce:3e:
                    6e:a5:25:95:5e:c0:f0:d6:67:b9:84:70:98:f0:49:
                    16:06:88:8e:e2:5b:18:26:29:bd:27:63:82:3a:b2:
                    12:a1:02:07:80:db:3c:ca:e5:5e:8c:b2:0a:e5:96:
                    d9:cc:25:bd:c5:7d:e9:79:bc:51:66:25:92:85:5e:
                    49:89:17:e6:70:94:33:5f:00:f8:ff:c0:db:35:86:
                    6f:2d:7e:e5:d3:87:6f:66:bd:2f:61:f9:d7:e8:71:
                    e6:f4:b4:c5:ef:8b:ad:0d:77:38:69:f4:66:15:9f:
                    fc:1d:e4:a6:7d:ec:72:c2:0c:d0:58:0e:9a:69:7a:
                    62:6a:09:11:8b:de:fc:a5:51:80:31:20:b8:84:12:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:93:BF:48:46:E9:AB:BD:E6:AD:96:3C:F1:6D:B5:45:DB:3D:AC
            X509v3 Authority Key Identifier:
                keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:28:bb:69:b3:f6:8c:0b:33:6b:61:84:02:9a:66:ca:bd:ae:
         33:0f:70:e2:92:d8:20:3d:ca:92:4e:9a:86:2a:4e:bf:33:da:
         3c:6e:ad:35:17:64:2c:19:8b:aa:45:b1:de:e6:66:e8:d7:a9:
         cb:ff:9d:08:fd:56:26:8a:70:d1:2c:67:3c:03:d8:38:c0:22:
         8f:f3:13:d5:65:6c:e9:d0:ac:5e:fb:eb:ee:a1:f0:19:11:7d:
         31:c4:a1:1a:67:1e:fd:3b:2d:d0:2f:09:a5:a3:31:e2:dd:cf:
         de:c3:6c:61:4e:12:16:33:34:b0:26:2b:92:75:77:b9:69:de:
         cd:f9:18:51:ef:a0:d6:92:e8:01:11:ce:4a:18:fa:6c:fb:64:
         e6:cf:67:2e:66:ac:85:a9:7a:56:f0:c2:4b:e4:2a:82:42:45:
         c2:a3:4e:58:ee:0c:af:fc:a2:ab:47:cf:df:bf:b4:68:1c:d6:
         8a:f0:2a:a5:c6:08:61:ca:09:95:26:0c:02:e5:b7:69:29:e4:
         bd:68:69:ae:2c:37:e4:70:ad:eb:c8:40:f1:03:00:85:e4:6d:
         4c:a7:29:ca:ba:e5:e4:48:6a:75:0c:01:07:37:e0:8d:93:1a:
         ec:9a:50:02:b4:5d:fa:1a:c9:96:56:cf:42:f7:d7:5d:9e:8d:
         5d:66:8d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:22 2025 by rpki-client