Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
File:                     bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json)
Hash identifier:          N9/8VRH7Ttu81EBIgq+APpSXIcAQxQ0YuymX1ADo4Bw=
Subject key identifier:   E5:FC:6C:72:AE:B3:D4:23:A0:BC:62:48:E3:81:6D:77:C0:6D:79:4F
Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
Certificate issuer:       /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
Certificate serial:       1B73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
Manifest number:          1B6B
Signing time:             Sat 18 Oct 2025 16:36:19 +0000
Manifest this update:     Sat 18 Oct 2025 16:36:18 +0000
Manifest next update:     Sat 25 Oct 2025 16:36:18 +0000
Files and hashes:         1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: QqZ9DglZQZgxLal4NAz5buPSPxO9d//IvORGt8KTiWQ=)
                          2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl
                          rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7027 (0x1b73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
        Validity
            Not Before: Oct 18 16:36:18 2025 GMT
            Not After : Oct 25 16:36:18 2025 GMT
        Subject: CN=68f3c203-40b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:2e:8b:43:76:a7:96:f6:9a:81:1c:34:81:
                    00:4e:a7:ac:4b:6c:69:4c:fe:a3:d8:62:fa:e9:4d:
                    5d:f7:3c:07:18:64:5b:ba:c2:ea:50:47:b0:d7:f6:
                    b9:9a:33:04:3c:e4:94:42:1b:05:82:b4:b6:70:ee:
                    02:16:85:61:df:10:45:3a:63:a0:2c:52:23:bb:64:
                    10:76:a6:96:1e:30:a0:66:03:50:5f:97:7c:e3:9c:
                    38:f7:3e:24:c3:91:fb:4d:f8:e4:4f:dd:d5:b7:f8:
                    aa:84:3d:aa:1a:3b:39:97:82:b7:e4:51:c3:93:56:
                    03:ea:5f:8c:41:84:c8:0d:83:3a:80:86:84:86:ea:
                    7e:ab:02:96:a2:01:6e:6b:3c:41:c2:2a:b4:9d:48:
                    4d:8b:0a:82:24:d3:ea:40:75:af:33:8c:db:1c:1c:
                    20:e7:3b:75:ba:fd:df:5b:79:ae:aa:08:84:fc:52:
                    64:4d:18:8a:c7:ca:ad:0f:63:21:53:1a:8d:09:5d:
                    5f:b4:44:76:1d:93:8c:81:6b:e6:0f:20:2e:17:82:
                    df:da:be:f4:9a:2a:39:bb:ab:e9:f4:af:b9:24:a3:
                    f0:c7:1d:06:2f:14:85:c3:b7:cc:8b:8d:0c:8b:37:
                    cd:96:31:de:7e:77:03:42:41:0b:40:bb:f4:59:04:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:6C:72:AE:B3:D4:23:A0:BC:62:48:E3:81:6D:77:C0:6D:79:4F
            X509v3 Authority Key Identifier:
                keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:36:0d:04:03:3f:40:f3:99:12:f2:7f:a2:36:77:f3:b4:e6:
         6c:8e:ff:5a:bd:ae:00:85:c7:94:db:08:90:b0:9f:dd:45:d5:
         42:3a:a4:60:36:5f:86:61:4b:98:c8:03:18:12:8c:b5:3c:d4:
         6c:09:9c:f9:3c:cf:8f:9e:0c:5e:d7:c8:0f:1e:c5:b0:cb:86:
         5e:3c:5f:8e:d9:0b:2a:d6:38:27:01:e9:88:f7:d9:34:f8:f5:
         fd:60:34:a8:49:bf:fe:3d:55:bf:88:01:53:fc:a5:7e:83:dc:
         11:cd:3e:42:86:98:b9:f5:37:52:2b:e3:85:c2:4d:41:13:db:
         fd:19:75:73:7a:6b:e8:03:b9:e3:90:06:3c:7d:d0:12:da:0b:
         27:d1:92:69:14:b0:f0:af:b4:c5:8a:89:27:ac:fe:e6:62:a4:
         f6:35:0d:c9:20:07:55:89:df:23:78:f8:e2:5c:21:a8:c4:0f:
         e7:60:e4:35:fb:63:0e:56:5b:37:67:22:b7:a2:f5:11:fa:07:
         ea:52:6d:45:a1:3b:69:74:30:30:78:c6:f5:9a:a0:cc:3f:84:
         be:85:f9:f9:c2:39:5d:5f:94:e5:31:41:8c:a1:f6:66:7a:a8:
         a6:93:11:27:11:c0:07:a7:e5:bb:f0:11:ad:61:e1:41:14:6a:
         79:1b:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:49 2025 by rpki-client