Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
File:                     BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json)
Hash identifier:          5j8z3Y5olLVJ5ECB4JT7BdJehmk4AJLOr9h0T6sCNkI=
Subject key identifier:   63:B0:FE:8C:3D:A2:00:3E:D1:34:3F:66:50:F1:33:63:BD:76:36:BF
Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Certificate issuer:       /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
Manifest number:          0120
Signing time:             Sun 19 Oct 2025 07:34:08 +0000
Manifest this update:     Sun 19 Oct 2025 07:34:08 +0000
Manifest next update:     Sun 26 Oct 2025 07:34:08 +0000
Files and hashes:         1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: IHMgV6yBHTIAQO1O0WudrzWicjsET+5JZZm8absQVlA=)
                          2: 08D1870EF0B411EE962EE784C4F9AE02.roa (hash: nrFzYe2K6I+fVS0WsJAv1h0mXVgQBFKENnTmsnUT3Jo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
                          rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
        Validity
            Not Before: Oct 19 07:34:08 2025 GMT
            Not After : Oct 26 07:34:08 2025 GMT
        Subject: CN=68f49470-75d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:c4:6c:c3:06:17:e1:31:8d:ec:9f:aa:ca:
                    b8:57:ec:93:23:d4:15:25:8b:98:cc:ad:dd:f1:9a:
                    1a:7d:90:71:8b:2b:36:c1:84:2b:48:da:28:1a:61:
                    c4:7f:d7:69:d2:36:c0:34:93:96:d7:c2:e8:d9:34:
                    22:73:a8:28:6b:f7:dd:e4:81:08:4a:7e:fb:93:d7:
                    b0:a4:f3:aa:4f:0f:85:22:a9:2d:1d:16:c5:20:b0:
                    3d:11:7b:f4:96:28:63:a9:ff:eb:fa:98:fe:dd:86:
                    62:0b:76:16:f1:0b:a5:40:ed:05:0f:8e:f1:a0:29:
                    1b:2e:0a:fe:f2:d6:0f:bf:5e:aa:08:7c:4a:cf:57:
                    78:83:5d:aa:5e:37:bb:8c:12:0b:a7:83:de:68:35:
                    cc:5f:c0:3d:ba:09:3b:b8:bc:35:1e:fe:61:7c:2f:
                    54:db:31:b2:1d:14:7a:76:e0:b3:40:9f:5b:d7:05:
                    21:98:fc:3d:03:54:92:69:d1:65:d4:22:98:5e:46:
                    b2:ef:4d:32:02:18:bd:9c:c0:0f:e3:b2:e4:66:44:
                    b5:e0:9c:11:59:56:3c:32:2c:aa:7b:f7:38:d6:ba:
                    f1:51:25:4e:82:52:2a:7a:9a:35:2b:b7:af:2b:18:
                    a2:bb:13:25:af:a2:bd:39:f4:c1:6f:f0:c5:51:b3:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B0:FE:8C:3D:A2:00:3E:D1:34:3F:66:50:F1:33:63:BD:76:36:BF
            X509v3 Authority Key Identifier:
                keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:71:7e:9d:49:9e:7b:15:5c:32:0a:6d:e4:8b:24:8d:97:fb:
         c8:9a:9b:a6:10:fb:95:7e:32:cd:a9:17:8e:45:57:84:a2:32:
         e4:23:72:3a:8a:c9:4f:bd:e5:53:a2:ab:fd:bb:e5:4a:74:8d:
         a5:22:0f:dc:38:f7:a3:ea:da:a2:3b:56:40:91:e1:c7:97:fc:
         58:4e:35:af:13:f3:17:52:23:bd:19:78:83:e3:0e:7c:62:b5:
         c1:fc:67:4c:64:fb:49:b0:23:d3:ed:a3:b2:48:17:d6:b9:23:
         ac:12:44:42:32:a3:16:be:ba:ca:15:f7:d0:5f:8e:13:2e:b6:
         f6:93:c4:41:c6:67:14:3b:e8:b8:1d:61:53:52:18:ae:54:cb:
         af:80:63:51:ba:89:6a:01:99:e7:12:f6:01:b3:f5:08:3d:af:
         1a:1a:00:f2:84:67:78:5f:96:33:9f:76:7d:c1:d6:3c:14:2c:
         6a:0d:f2:ea:a3:0c:e4:f6:c7:58:ea:7f:ff:7f:97:c1:9e:fb:
         6c:18:31:07:3e:87:66:13:f7:38:82:ca:df:c2:60:96:d9:ee:
         cf:83:a0:d3:0f:46:a1:10:54:bd:55:0f:0d:cc:89:3b:e1:7a:
         92:d9:b7:3f:88:61:63:84:65:b0:fa:ef:96:d9:39:88:7d:ff:
         44:a9:e3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:23:10 2025 by rpki-client