Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          mo5FkLreaRNweSreC4sdtmqUTeTof50tEtEhSTlTaRQ=
Subject key identifier:   75:99:F2:7B:30:84:10:BC:ED:A3:36:58:EF:56:E6:09:57:29:9E:0E
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          10
Signing time:             Sun 19 Oct 2025 11:34:01 +0000
Manifest this update:     Sun 19 Oct 2025 11:34:01 +0000
Manifest next update:     Sun 26 Oct 2025 11:34:01 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: eBOOd91nu3wqxfynpX/kJtOC95RE8dJVMy3GXfv70XE=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: lUWsYl532wJJWUk+oUDmB7VdeqxtkYdMM4ni2vAOoF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Oct 19 11:34:01 2025 GMT
            Not After : Oct 26 11:34:01 2025 GMT
        Subject: CN=68f4cca9-1723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:2b:be:b5:4b:ab:21:fa:19:d5:1a:77:ab:
                    18:78:62:a9:31:3a:ba:57:17:eb:9a:70:b3:fc:18:
                    a0:ba:d4:c1:f0:c7:d1:10:53:93:9a:65:5a:33:f1:
                    47:46:02:7c:38:4e:48:50:09:80:cb:45:9f:50:04:
                    2a:fb:84:fc:4c:29:cc:5f:84:44:9c:df:80:c1:af:
                    fc:53:7b:40:f9:90:f6:16:e7:3f:c8:24:0a:26:e8:
                    e8:06:9e:aa:18:ab:d4:23:3b:38:28:67:ae:9e:b6:
                    48:b6:47:a0:c3:ac:e5:95:06:b9:36:96:74:4b:f7:
                    81:63:d1:73:74:b0:96:e5:41:42:ac:87:d7:72:2f:
                    4c:09:94:9f:0d:b8:a4:4c:8b:47:17:96:45:8e:12:
                    cb:d5:7f:99:0e:1e:9c:80:c3:65:81:7e:85:20:d0:
                    ae:b8:da:25:06:29:50:13:e3:68:2b:4e:64:1a:ca:
                    b2:ca:20:b0:7c:18:63:0a:e8:62:f4:fb:ae:f7:e9:
                    32:d1:a6:54:b1:3b:74:bc:64:73:58:f6:c3:86:e8:
                    c3:30:85:53:79:56:fb:d5:fa:00:54:c4:9a:49:01:
                    43:6a:34:ac:ff:71:ad:9d:e4:c4:04:3f:cc:b6:83:
                    b4:d6:aa:64:ea:df:ec:67:78:47:61:a6:89:c5:e3:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:F2:7B:30:84:10:BC:ED:A3:36:58:EF:56:E6:09:57:29:9E:0E
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:71:56:c9:50:d5:82:c9:59:08:5a:36:bb:ba:09:5d:aa:
         53:59:3b:ff:f6:0a:0c:9b:4b:48:4a:3d:42:63:bb:61:9b:27:
         df:04:75:92:47:89:9c:90:66:d4:08:8c:02:fc:ba:0e:57:a7:
         b1:a8:d6:c2:52:be:b6:19:9a:a7:2d:59:7f:38:23:4f:0c:e8:
         3a:a1:9a:b6:43:7d:aa:b2:10:38:1f:a5:18:eb:41:b9:03:f4:
         89:c1:8c:e1:0b:e2:e8:c4:bd:a2:7a:dc:e9:59:81:67:c7:4d:
         60:23:cb:24:37:ce:80:86:4c:b2:b7:ad:5f:99:fb:fb:5f:07:
         c6:8e:dd:6f:cf:81:25:6d:3c:98:a8:05:3c:1a:89:e4:9e:f0:
         be:78:a6:ec:c9:cb:45:63:d9:2b:80:94:f8:88:be:10:f5:24:
         4c:ec:a2:fa:c4:79:ad:d5:70:23:51:0c:2b:3e:b1:11:29:27:
         5f:4e:32:dd:bb:6b:ab:6b:1d:58:d6:60:78:ef:9d:aa:24:2e:
         77:bc:07:d8:47:cf:6d:3f:63:88:48:be:c0:e1:43:d5:1e:b2:
         65:91:c3:68:93:b3:18:5e:4f:10:25:09:92:11:b6:a0:de:7b:
         51:13:9f:ac:f6:ea:ff:b8:6d:54:6e:96:c7:84:1a:5f:27:d1:
         61:cb:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:54:29 2025 by rpki-client