Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File:                     Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier:          KLcveRO+vbOv98xIZNM9kfbAYFTqN5DPq/UpXCqumdQ=
Subject key identifier:   25:48:32:98:79:B3:78:60:2B:D0:59:D8:B8:B9:DE:D6:33:4E:8B:16
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number:          75
Signing time:             Sun 19 Oct 2025 10:17:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:17:25 +0000
Manifest next update:     Sun 26 Oct 2025 10:17:25 +0000
Files and hashes:         1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: l2bgxudqxb4S49v8+Ydp9910DCUAmGcJXceuaAG8HlU=)
                          2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=)
                          3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: Oct 19 10:17:25 2025 GMT
            Not After : Oct 26 10:17:25 2025 GMT
        Subject: CN=68f4bab6-03b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:15:f0:a5:d2:ba:28:d8:5c:2e:4a:1d:3d:
                    c7:18:4b:63:dd:d3:9b:79:cc:31:d5:ac:50:1b:6c:
                    b3:37:4a:a1:d9:5f:c9:dd:83:8f:7f:3d:84:f0:d2:
                    6a:76:30:54:e8:d1:f2:9c:52:7a:0c:8a:32:06:53:
                    eb:ed:dd:38:ab:c8:f8:a3:79:c1:38:77:9f:94:58:
                    70:64:24:20:14:40:a8:df:d0:eb:b6:82:5a:82:3f:
                    3c:10:de:de:a6:39:84:c0:ff:a9:8e:a8:ba:3c:78:
                    1c:2e:25:42:a4:bc:a7:70:49:b7:68:03:b6:65:ef:
                    01:ba:f6:b5:c7:b6:b6:00:5e:e3:a6:ce:8a:ae:d7:
                    55:2d:ec:8b:c3:68:86:e7:7f:5e:f0:50:42:26:aa:
                    6a:6f:cd:3b:06:fa:7f:a6:e5:34:bc:f2:c0:98:1a:
                    85:4a:0a:43:b2:c4:2a:ec:16:dc:69:2f:f1:b7:ea:
                    65:22:34:2b:2b:71:71:42:b2:4f:7b:99:f3:f0:b9:
                    64:09:d4:db:b1:7e:17:f4:a2:42:f7:f5:fe:95:23:
                    96:8c:32:94:24:37:8f:e2:2c:43:8d:7a:64:8b:90:
                    2e:9b:4c:8d:39:06:63:31:0a:7c:a5:12:e8:31:95:
                    e0:64:12:51:b1:e9:b6:27:c5:3c:2b:39:44:d3:0c:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:48:32:98:79:B3:78:60:2B:D0:59:D8:B8:B9:DE:D6:33:4E:8B:16
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c0:a5:c9:33:ce:45:40:44:21:e6:ef:3a:4b:b0:32:61:a2:
         18:f3:1a:d6:5c:1e:8e:67:e7:24:4b:5c:27:54:bd:39:16:4e:
         01:4b:83:5e:91:4e:de:a4:75:be:0e:5c:f7:3c:04:30:7c:f3:
         e5:72:d5:d0:f3:4d:d4:2b:bc:b3:dd:4a:37:03:f5:05:5a:57:
         e3:9f:ff:24:bb:65:97:9a:f1:9c:36:7b:90:38:8c:9b:ac:33:
         92:70:d8:5e:96:32:16:b4:20:7f:91:fe:5a:16:a2:a7:18:25:
         f2:8d:d1:22:60:69:9a:bf:1b:bc:7a:52:ca:3a:4f:39:af:02:
         3e:fa:88:dc:1c:ab:7c:6b:83:94:02:62:aa:27:af:b8:06:41:
         c7:e3:c3:6a:bc:20:60:f1:49:00:a5:7d:5c:3a:37:02:d0:f0:
         36:94:a6:59:1d:51:8c:e1:de:27:c9:ae:a7:1a:5a:52:41:22:
         a7:f2:d4:db:17:8c:d6:87:64:0e:03:b6:b3:84:03:74:72:10:
         bd:29:0a:f8:21:bd:4f:f9:18:44:cb:80:21:6b:af:9f:27:27:
         9b:59:b5:05:a5:40:26:17:6c:0e:6f:c3:ca:31:d2:d9:12:bd:
         da:b0:00:0b:52:dc:b4:6d:56:5e:82:b9:5b:5b:0c:c5:64:03:
         cf:4b:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:53 2025 by rpki-client