Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File:                     BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier:          acCGPdWXZK8HQu8Lk4wDP16ShSMzyrEutWoZ22s9XBc=
Subject key identifier:   9F:97:F6:CF:79:7F:54:62:5C:CA:85:0A:94:88:1D:82:3F:2D:6E:8B
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer:       /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number:          019E
Signing time:             Sun 19 Oct 2025 05:54:26 +0000
Manifest this update:     Sun 19 Oct 2025 05:54:26 +0000
Manifest next update:     Sun 26 Oct 2025 05:54:26 +0000
Files and hashes:         1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: UYcmKcQnQ3MJbnu123YpqDCoSyzeECZEogR7QaYRORk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
                          rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
        Validity
            Not Before: Oct 19 05:54:26 2025 GMT
            Not After : Oct 26 05:54:26 2025 GMT
        Subject: CN=68f47d12-4f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:5e:b2:d2:0a:2b:ba:7f:15:95:be:50:b6:
                    ed:0c:99:84:a8:80:1b:13:2b:94:fc:8f:38:e0:9c:
                    87:e0:eb:98:97:76:d2:68:c9:d5:6c:f5:f3:b3:19:
                    87:8a:1d:91:e0:f3:73:ad:6b:e1:12:39:f7:47:12:
                    88:98:28:9a:82:1b:08:29:0c:07:6a:e1:95:a5:3a:
                    66:0c:0c:28:6e:5c:4a:92:e9:c5:4e:34:3c:56:aa:
                    c7:81:ab:92:36:6b:42:b5:26:0d:1d:73:77:11:0e:
                    74:40:8b:1a:26:38:f6:bc:86:27:61:ac:f6:0a:bb:
                    54:e2:aa:1f:73:c4:00:62:ee:16:fe:94:45:c0:d7:
                    b3:e0:c5:57:c1:f1:bc:aa:8a:bc:be:a0:23:96:fe:
                    60:66:89:f9:fb:b9:94:a3:80:b7:19:5d:19:eb:d5:
                    8f:28:f3:16:a6:83:f0:ab:55:92:c2:c2:cb:af:18:
                    6a:13:5f:62:75:53:f0:00:fc:12:38:ca:fc:d5:be:
                    88:c8:53:3c:c9:09:2e:1d:db:c1:5a:b7:f9:c3:b8:
                    2e:76:08:fa:63:5c:c1:a6:aa:dd:48:0d:52:d0:31:
                    fe:56:e1:6a:06:b4:b5:bc:6f:1d:b4:a0:77:4a:7d:
                    13:99:f0:b8:c0:c0:e8:4b:50:ae:19:af:1b:06:99:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:F6:CF:79:7F:54:62:5C:CA:85:0A:94:88:1D:82:3F:2D:6E:8B
            X509v3 Authority Key Identifier:
                keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:73:23:9a:ef:16:f6:d1:d3:26:d6:5f:4d:7b:42:ea:8a:
         37:bd:8f:02:73:67:28:76:65:90:d0:4d:a6:d5:9f:60:d4:a3:
         07:70:62:35:2b:17:8c:50:84:b3:aa:d8:8f:a2:bc:e2:9e:6a:
         45:dd:1f:ea:cd:e2:96:83:df:7e:4e:c9:92:77:19:dd:ab:e9:
         ad:58:32:0e:23:c0:61:11:47:54:3b:f4:01:f1:a9:72:74:03:
         7a:8c:8d:8c:c6:d9:0b:f9:27:82:aa:4a:6d:da:c2:48:bb:2c:
         05:89:0e:f9:92:ab:bd:95:5c:01:69:df:f3:f6:bb:1e:28:17:
         b3:97:6d:f4:9d:56:22:c9:2d:c7:dc:dc:65:9e:19:7c:f7:1f:
         c8:aa:05:47:ca:02:0d:26:92:d5:ff:42:fa:89:cd:1d:1d:47:
         0b:ec:66:ed:4b:b5:f8:54:5f:d8:b2:33:77:a8:1b:ad:25:b4:
         bb:95:ff:05:d2:8c:1a:09:06:21:29:da:a5:ba:90:45:12:4a:
         10:1c:4e:7c:ad:9c:bc:d9:e3:b3:65:05:69:19:d6:b5:f7:1f:
         f9:a3:10:7f:11:2b:2f:de:de:25:f7:3d:30:b8:8e:51:4b:86:
         96:fa:6a:3c:a2:12:09:e0:66:f2:18:9c:76:da:19:51:09:e1:
         7b:dd:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:12 2025 by rpki-client