Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
File:                     R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json)
Hash identifier:          fjlE5a4d9/AmmM2AbJp4mj/I5ErN8LvFL/MP2gb3KBo=
Subject key identifier:   48:B8:C3:6B:3C:1E:F9:8B:F5:C1:85:94:88:16:12:59:0F:69:2A:3E
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Certificate issuer:       /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial:       02C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
Manifest number:          02BB
Signing time:             Sun 19 Oct 2025 03:36:47 +0000
Manifest this update:     Sun 19 Oct 2025 03:36:46 +0000
Manifest next update:     Sun 26 Oct 2025 03:36:46 +0000
Files and hashes:         1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: XCgMsqRVYdzVYC/m7xJAIEU2C+ro3IubHBrQHa3/zB8=)
                          2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
                          rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
        Validity
            Not Before: Oct 19 03:36:46 2025 GMT
            Not After : Oct 26 03:36:46 2025 GMT
        Subject: CN=68f45ccf-1652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:0f:6a:e0:91:62:a9:33:d3:91:f6:8d:ab:
                    31:7e:b3:0b:5d:40:c3:59:b1:c6:d6:5d:ba:29:cb:
                    ff:93:55:da:f1:55:d2:25:a4:93:49:88:77:38:3b:
                    fc:7b:87:fc:c1:6c:6c:23:b9:1d:79:09:f4:0e:e0:
                    42:8f:fd:49:a6:a8:b7:3d:37:32:26:c1:49:93:57:
                    4c:62:92:94:f9:d0:e3:bb:eb:d2:11:cd:93:c8:aa:
                    a8:c2:ab:bf:69:f7:61:f7:55:05:d6:cc:65:32:12:
                    cf:81:9f:0f:a2:ff:b3:f7:5e:e8:69:64:d1:44:e7:
                    78:34:73:8a:4a:1c:bb:78:d5:e7:be:15:4b:17:a5:
                    d7:ba:df:4e:ed:6d:6d:80:28:68:cf:1a:c6:eb:13:
                    f2:80:7d:27:30:79:be:1a:98:8f:57:22:db:19:cd:
                    d2:6e:2c:37:6d:7a:08:0d:74:29:c4:74:9f:ad:90:
                    79:cb:69:8e:b9:65:6d:70:1a:34:d9:5b:0e:3e:de:
                    98:54:a6:65:d1:3d:a1:b4:9c:97:bb:9a:8c:f0:53:
                    8a:66:61:74:f9:4d:18:c7:bc:3b:07:30:a7:86:a0:
                    b7:44:74:db:0e:61:fb:db:7d:c8:30:85:91:8c:59:
                    69:e6:69:fe:b3:ed:91:b5:f2:00:b2:b1:90:94:fa:
                    d2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B8:C3:6B:3C:1E:F9:8B:F5:C1:85:94:88:16:12:59:0F:69:2A:3E
            X509v3 Authority Key Identifier:
                keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b2:7e:14:df:18:cc:3b:c0:09:31:ac:7d:8c:9b:fc:49:92:
         2c:e8:ec:49:06:2c:ab:aa:8a:0d:7e:1a:13:b3:3b:e8:10:9d:
         13:5a:88:ce:09:5e:d5:1a:8c:23:b5:48:7a:87:5a:5d:05:41:
         ea:2d:3d:fa:53:37:d8:c1:b5:1e:4b:05:79:62:f8:b0:e5:27:
         87:99:68:a1:55:6b:a8:ec:6c:bb:93:98:a3:50:ea:c7:88:22:
         2d:e3:2a:9d:16:99:c0:ff:cc:ce:28:1c:4d:ae:41:7c:a2:eb:
         a3:7f:c6:0d:3a:02:26:b3:3e:cb:41:e2:bd:b2:f8:e0:f1:58:
         2f:da:82:c4:ad:09:f2:24:81:f3:1c:65:f6:c9:12:d2:3d:78:
         cc:96:a7:de:24:71:20:4a:34:fe:94:8e:66:23:e3:a4:ed:21:
         00:5a:76:22:16:33:c5:c9:26:04:6f:b8:6b:15:ce:19:09:f0:
         21:b6:e0:bc:9d:98:c2:8d:1f:ca:7c:66:d4:d6:2a:53:11:fe:
         4d:34:8b:28:9f:7f:0e:59:db:63:7a:a5:08:18:37:0c:dd:2b:
         e7:37:4f:1e:5f:c2:b9:ff:8f:2a:d1:e9:f3:9c:0d:a3:1e:29:
         96:3b:52:3e:b3:c0:f3:64:24:45:9d:4a:49:8c:b4:5d:3c:6f:
         5b:79:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:24:59 2025 by rpki-client