Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
File:                     BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json)
Hash identifier:          IRPyZBlgl3lY4G6en7tjsEI+8nwbqWyekxd+I8+q3DA=
Subject key identifier:   F7:A6:5D:CC:EA:DB:D8:C7:EA:74:43:C3:E3:3E:66:57:01:52:E3:D9
Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
Certificate issuer:       /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
Manifest number:          0615
Signing time:             Sun 19 Oct 2025 00:25:47 +0000
Manifest this update:     Sun 19 Oct 2025 00:25:47 +0000
Manifest next update:     Sun 26 Oct 2025 00:25:47 +0000
Files and hashes:         1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: h83ahTWzuh7dTednLKuzOoydUfAF66tsELGsZsPdx1o=)
                          2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: SXzW5vEmVU+GCJ/5C4H8HxVaw63CXUsgN+mA1S8Q1HE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl
                          rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
        Validity
            Not Before: Oct 19 00:25:47 2025 GMT
            Not After : Oct 26 00:25:47 2025 GMT
        Subject: CN=68f4300b-ed6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:a8:52:6e:54:48:51:b8:8b:15:d4:ca:63:
                    e1:93:ba:35:74:9e:68:68:85:0e:14:8c:cb:a7:58:
                    96:4e:a9:af:2b:44:25:80:a2:7a:58:c9:f4:15:2b:
                    1f:b1:96:67:48:78:1c:07:cf:35:d8:a5:63:78:68:
                    a9:d0:20:63:80:28:0a:bf:1b:ad:41:c6:27:39:54:
                    69:9c:64:5d:0d:4c:ef:ae:6b:e6:2b:17:ba:1c:fa:
                    09:2d:0c:d6:6b:da:07:b2:a9:f8:c7:59:8f:78:bb:
                    79:3c:b9:1e:57:29:0e:63:fe:72:73:6a:c9:60:3e:
                    74:a6:e1:c2:24:19:69:99:b8:7a:78:5d:d1:01:9d:
                    51:3b:55:bd:c5:16:34:6c:2a:2f:3f:79:f2:16:35:
                    14:81:74:0d:de:a8:e2:1d:8c:c0:30:cc:22:54:63:
                    56:dd:65:7c:53:9e:0b:33:e9:9d:69:f4:1d:55:3d:
                    58:e8:e2:db:87:d0:5d:80:25:1d:93:34:b3:98:de:
                    f5:b2:8a:95:b6:51:63:91:e4:45:9e:ae:ff:17:d1:
                    70:8f:c9:e9:22:48:86:5b:2e:a1:52:b7:f4:9a:3a:
                    c3:3c:98:a1:9f:54:b1:6e:98:88:0f:ab:4d:61:30:
                    96:55:1c:c3:7b:45:78:a5:d9:30:6c:89:c2:0f:ed:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A6:5D:CC:EA:DB:D8:C7:EA:74:43:C3:E3:3E:66:57:01:52:E3:D9
            X509v3 Authority Key Identifier:
                keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4b:ce:10:9b:1c:2b:20:e4:01:7d:89:26:b9:03:ed:3c:e5:
         59:86:3e:0a:b1:d6:db:cc:6e:d9:11:1c:51:e6:a8:72:15:ad:
         e4:dd:63:a2:da:1a:03:1b:97:dd:cb:e6:63:d7:c4:63:91:e7:
         6d:ea:53:9a:08:ee:e7:fb:43:83:1a:56:1f:61:72:dc:0d:47:
         1f:b6:ef:7d:e0:e0:f5:52:3b:d9:e6:3b:81:61:71:aa:3c:46:
         b0:01:a4:1f:0f:6a:27:98:6a:2c:4c:a3:b3:8d:f0:65:54:36:
         c7:21:1e:75:93:8c:3c:33:d2:ba:5d:4c:c8:da:fd:d1:4c:0c:
         73:17:6a:d0:cb:dc:f9:9b:71:c0:05:18:b0:5e:3e:4b:e7:52:
         2d:7b:80:e3:a9:92:5d:76:f7:37:ca:0e:86:8d:9b:d5:bd:69:
         ed:04:c9:48:52:00:1a:03:ef:6f:d5:d9:53:37:21:d9:33:66:
         28:ff:61:2c:bf:b1:57:6a:60:98:f6:dd:6e:20:0c:a5:e8:ce:
         2a:f6:cf:00:c1:25:da:20:b6:4e:c0:4c:8f:c3:57:c7:57:b4:
         b7:03:3c:ed:30:75:bb:f3:22:af:0a:7e:9b:27:08:8b:ed:8c:
         c7:e3:bc:af:1b:de:81:2e:41:76:71:e2:3b:58:f6:8b:4e:50:
         b1:37:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:04:03 2025 by rpki-client