Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
File:                     bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json)
Hash identifier:          3RuqfbGJR/J2AG/QcB+boXy3M3jkQApJsZluw8598M4=
Subject key identifier:   7D:70:46:F1:C6:CB:A1:5C:B4:48:C1:F5:18:10:34:8C:84:32:83:73
Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
Certificate issuer:       /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Certificate serial:       044C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
Manifest number:          0445
Signing time:             Sun 19 Oct 2025 02:08:22 +0000
Manifest this update:     Sun 19 Oct 2025 02:08:22 +0000
Manifest next update:     Sun 26 Oct 2025 02:08:22 +0000
Files and hashes:         1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: HC80KmwaOm2C9vTeK38OtuAhT3Rn+JyeB23kL3JwY4M=)
                          2: 8B729608B62F11EFB2DE315FC4F9AE02.roa (hash: ERP6Y5/dUFxszjFDuuFfjwGYbKhjm1R8qrQOrEiUTKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
                          rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EA16, serialNumber=6E148A0D085780386A817DCD8D64695411C76838
        Validity
            Not Before: Oct 19 02:08:22 2025 GMT
            Not After : Oct 26 02:08:22 2025 GMT
        Subject: CN=68f44816-d21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:f6:12:3d:af:6c:25:f0:2d:c3:72:8f:72:
                    4a:05:2b:f1:1b:47:ad:be:40:a8:04:be:90:aa:7b:
                    e3:82:73:12:3b:0c:d4:2b:45:38:ad:81:ab:76:07:
                    41:55:73:ce:7b:1d:08:d0:ef:44:7b:61:6e:35:c9:
                    e2:51:cc:8a:c9:17:a4:d6:79:82:14:a9:6e:1a:cc:
                    e2:2f:b7:fe:05:9d:8a:a2:3a:78:65:14:91:26:5e:
                    dc:72:14:6e:63:52:e0:73:e9:bb:7b:b7:b3:08:ad:
                    dc:a8:f9:0a:db:9b:e4:d5:21:cb:37:f7:84:c2:76:
                    57:1c:91:bc:56:fe:ac:df:75:d2:bc:90:4e:95:d6:
                    03:57:ac:e8:e8:71:78:ab:88:56:bd:3d:f4:74:4b:
                    74:78:99:51:f9:a8:90:65:19:a7:4b:1d:1a:e4:03:
                    7d:b9:9b:8c:e9:69:ba:a5:d2:ba:2d:8b:29:1a:30:
                    7c:c0:2a:1d:99:1d:d0:9f:83:98:a9:c9:6c:c2:a9:
                    10:09:62:58:b8:81:4d:ff:59:30:e0:7f:10:d8:a4:
                    c9:ea:1a:eb:4e:84:3e:bb:70:96:0d:b4:6b:cd:0d:
                    34:f0:47:4f:3c:26:01:3d:23:4c:95:da:79:0e:5e:
                    c7:3a:86:7c:ef:ca:98:ec:8e:9a:a0:6c:50:92:3c:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:46:F1:C6:CB:A1:5C:B4:48:C1:F5:18:10:34:8C:84:32:83:73
            X509v3 Authority Key Identifier:
                keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:00:21:11:a2:d9:4b:06:02:38:db:7d:6a:f8:a2:3b:06:95:
         e0:4d:eb:d1:ab:8b:ab:61:ae:4b:a0:e4:39:52:7a:e0:35:b8:
         83:0b:fb:46:ad:ff:64:1d:b1:2d:61:90:67:5e:ea:ee:4b:b1:
         3e:1a:c6:7c:bd:49:60:e4:12:42:4a:c2:28:86:fd:e5:5e:59:
         42:87:89:20:25:2e:71:1d:c0:7b:78:04:33:bb:5a:08:40:70:
         a9:fa:2c:ed:38:f9:71:88:e0:78:1a:ac:78:22:6b:c1:af:8b:
         4b:69:eb:d8:43:eb:05:60:20:79:35:85:d7:ee:e0:fa:84:c3:
         48:60:2f:87:ef:7a:b9:8f:67:b2:c5:94:07:31:fc:93:79:5b:
         30:79:44:65:e2:fe:34:3a:1a:f7:c4:52:c5:64:a2:3a:dd:f0:
         60:65:25:b3:cd:da:0a:02:f5:6f:81:b7:7d:19:a2:68:e8:cc:
         2d:81:08:6d:a4:19:45:c2:72:0b:44:ed:93:ff:48:33:61:ca:
         6f:11:c4:61:5d:bf:be:eb:e1:16:03:c9:33:53:18:56:95:49:
         61:5b:b2:ae:95:f0:45:2d:6f:05:0f:5c:dc:6b:f9:e0:31:94:
         b6:6a:8c:2e:99:37:5c:16:2c:be:06:92:82:77:06:58:91:a9:
         b4:7f:1c:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VBMTYxMTAvBgNVBAUTKDZFMTQ4QTBEMDg1NzgwMzg2QTgxN0RDRDhENjQ2OTU0
MTFDNzY4MzgwHhcNMjUxMDE5MDIwODIyWhcNMjUxMDI2MDIwODIyWjAYMRYwFAYD
VQQDEw02OGY0NDgxNi1kMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9r2Ej2vbCXwLcNyj3JKBSvxG0etvkCoBL6QqnvjgnMSOwzUK0U4rYGrdgdB
VXPOex0I0O9Ee2FuNcniUcyKyRek1nmCFKluGsziL7f+BZ2Kojp4ZRSRJl7cchRu
Y1Lgc+m7e7ezCK3cqPkK25vk1SHLN/eEwnZXHJG8Vv6s33XSvJBOldYDV6zo6HF4
q4hWvT30dEt0eJlR+aiQZRmnSx0a5AN9uZuM6Wm6pdK6LYspGjB8wCodmR3Qn4OY
qclswqkQCWJYuIFN/1kw4H8Q2KTJ6hrrToQ+u3CWDbRrzQ008EdPPCYBPSNMldp5
Dl7HOoZ878qY7I6aoGxQkjxvEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1wRvHG
y6FctEjB9RgQNIyEMoNzMB8GA1UdIwQYMBaAFG4Uig0IV4A4aoF9zY1kaVQRx2g4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUExNi80NTJGN0FFRTc3
N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdEaHFnWDNOaldScFZCSEhh
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoU0tEUWhYZ0RocWdYM05qV1JwVkJISGFEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUExNi80NTJGN0FFRTc3N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdE
aHFnWDNOaldScFZCSEhhRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDOACERotlLBgI4231q+KI7BpXgTevRq4urYa5LoOQ5UnrgNbiDC/tG
rf9kHbEtYZBnXuruS7E+GsZ8vUlg5BJCSsIohv3lXllCh4kgJS5xHcB7eAQzu1oI
QHCp+iztOPlxiOB4Gqx4ImvBr4tLaevYQ+sFYCB5NYXX7uD6hMNIYC+H73q5j2ey
xZQHMfyTeVsweURl4v40Ohr3xFLFZKI63fBgZSWzzdoKAvVvgbd9GaJo6MwtgQht
pBlFwnILRO2T/0gzYcpvEcRhXb++6+EWA8kzUxhWlUlhW7KulfBFLW8FD1zca/ng
MZS2aowumTdcFiy+BpKCdwZYkam0fxw8
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:34:18 2025 by rpki-client