Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
File:                     sbozBTw5ulhlU3dDESOJ4wDEiAc.mft (raw, json)
Hash identifier:          1wFKRjBhd61mNnogVrU15ws7Q/VAFqvXL3MmIVViZDQ=
Subject key identifier:   75:6A:54:01:2E:83:F2:64:82:33:A6:5C:C1:CE:AF:A8:C8:E6:4B:3E
Authority key identifier: B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
Certificate issuer:       /CN=A9150384/serialNumber=B1BA33053C39BA5865537743112389E300C48807
Certificate serial:       0CD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
Manifest number:          0CBD
Signing time:             Sat 18 Oct 2025 18:57:10 +0000
Manifest this update:     Sat 18 Oct 2025 18:57:09 +0000
Manifest next update:     Sat 25 Oct 2025 18:57:09 +0000
Files and hashes:         1: sbozBTw5ulhlU3dDESOJ4wDEiAc.crl (hash: uy2MCGzWx353SiB281Pyxt6ECt2YaZvlGfGIrBQlLBY=)
                          2: 3240ED82D62D11EFB0442B5DC4F9AE02.roa (hash: TMu5hEbfrLw2YdTkxYULJSdYTtAL2nPXUFAhyo3Mq1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
                          rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3284 (0xcd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150384, serialNumber=B1BA33053C39BA5865537743112389E300C48807
        Validity
            Not Before: Oct 18 18:57:09 2025 GMT
            Not After : Oct 25 18:57:09 2025 GMT
        Subject: CN=68f3e305-417e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:c6:7b:e4:46:e6:4f:64:c6:08:be:e1:ff:
                    eb:9f:33:1f:fc:4a:0e:37:c5:74:1f:f2:9e:ae:8a:
                    a6:12:69:43:23:c4:44:84:20:e1:6d:a9:cf:2c:ba:
                    a3:e6:78:78:66:cf:37:e3:01:e4:f1:5d:aa:24:34:
                    d9:85:70:84:14:77:2e:d4:d2:eb:47:28:98:4a:72:
                    56:1d:0c:bd:77:0f:af:6a:57:4c:33:c0:e8:1c:fb:
                    67:1d:2f:2d:79:d8:38:8e:bd:20:84:e3:e1:5f:d4:
                    7f:9e:0c:38:c1:a1:69:03:90:6e:f6:d0:ef:96:b5:
                    ec:36:a9:dd:99:82:c2:04:25:12:79:3f:f7:cd:80:
                    87:71:a3:9b:1d:96:73:af:c0:24:df:cd:31:d2:b9:
                    f2:a1:77:6d:20:5c:80:66:e1:c8:aa:f6:b5:a5:7f:
                    b0:71:c1:0c:b9:fd:1a:07:0e:15:d7:81:bc:7b:d6:
                    84:bd:24:82:f2:c5:29:c0:43:bd:77:fa:95:c1:be:
                    63:47:75:a6:40:8c:66:58:6c:38:e1:58:3f:b0:cd:
                    1d:63:c5:61:7b:3e:b7:c0:cd:30:bf:36:e6:4d:4b:
                    dd:ac:80:e8:5d:df:7f:48:27:45:eb:a4:02:fe:f8:
                    04:ef:f1:a9:de:4a:a4:51:f9:3f:2f:19:f6:18:1c:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:54:01:2E:83:F2:64:82:33:A6:5C:C1:CE:AF:A8:C8:E6:4B:3E
            X509v3 Authority Key Identifier:
                keyid:B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:92:97:c2:e1:8a:e1:88:d3:97:6c:22:99:b8:b1:6c:b8:7b:
         e5:fe:a4:54:6b:f7:83:e8:20:e6:96:3e:4f:8f:96:57:db:12:
         0b:9e:bd:15:3f:45:ba:ea:f5:95:f1:26:a4:74:8c:68:d3:33:
         42:57:be:ea:67:f4:81:24:9d:e9:4b:61:71:7a:09:f1:eb:da:
         cb:2f:7b:e2:c9:9c:4e:ab:3d:b1:10:bb:d4:52:4f:a3:81:d8:
         e4:c8:a1:f2:c5:a5:ef:51:c4:48:a8:db:e0:79:24:d2:eb:25:
         6c:06:d0:01:40:65:53:eb:0e:ac:ff:ac:e2:2d:0e:f4:da:58:
         0b:25:01:ea:81:d5:7c:12:fe:33:44:fc:53:ec:12:2f:c1:f0:
         e3:c9:91:fe:13:dd:ca:89:5c:1e:13:d2:f9:bd:99:38:b3:1d:
         a6:80:11:6a:07:76:f7:9b:ae:7c:d0:ce:58:7f:f1:d2:82:78:
         c6:ad:da:5a:e1:39:eb:36:32:05:be:83:24:a1:96:b7:4d:a5:
         bc:4e:8e:03:14:ab:0f:27:f9:ea:24:8e:4a:29:4c:14:20:cc:
         7c:af:db:59:d5:13:bb:89:3c:7f:3f:20:fa:55:fa:fb:d7:b4:
         18:8f:51:09:35:75:99:26:82:18:33:b2:85:4c:f2:3a:59:a6:
         da:93:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:09 2025 by rpki-client