Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File:                     bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier:          lDlsoa13QvLBRICubkIeMjCEcywez8OjvUkm3w9Ebfo=
Subject key identifier:   C9:CC:E3:A7:EA:B9:05:1F:2C:17:7B:60:C7:D7:CC:8E:36:20:2B:AB
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer:       /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial:       117C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number:          116C
Signing time:             Sat 18 Oct 2025 17:46:09 +0000
Manifest this update:     Sat 18 Oct 2025 17:46:08 +0000
Manifest next update:     Sat 25 Oct 2025 17:46:08 +0000
Files and hashes:         1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: 4uOnVoNEOAcLSOuCg45cqBe0N9BmwXSCqaVzpl7i8vs=)
                          2: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=)
                          3: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
                          rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4476 (0x117c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
        Validity
            Not Before: Oct 18 17:46:08 2025 GMT
            Not After : Oct 25 17:46:08 2025 GMT
        Subject: CN=68f3d261-3396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:da:1c:ea:8a:ee:eb:86:67:df:a1:e4:1a:
                    ab:af:c4:b1:b0:ae:98:31:4c:ea:4b:7d:06:60:59:
                    dc:64:3b:a6:df:d1:7a:36:af:46:22:84:62:cd:5b:
                    29:13:ed:b6:5b:02:5b:a1:12:5d:1b:1f:9e:2b:96:
                    ce:4b:fc:a7:c8:f4:3b:a6:fe:7b:91:38:22:5f:bd:
                    86:f7:f5:6f:2d:50:c6:e2:37:21:0d:e5:b8:bd:63:
                    28:d1:f1:46:fb:29:b0:e4:bb:2c:55:35:48:e8:7d:
                    7f:e6:95:da:2b:f2:d6:c1:56:3f:aa:14:9a:b6:b5:
                    bb:e0:af:f8:c8:26:6c:cc:96:52:06:cd:04:38:cb:
                    f4:ff:29:59:87:7b:89:38:c9:4a:f9:94:24:a3:7a:
                    2f:b2:a2:75:33:42:df:c3:29:82:89:6e:95:e0:1c:
                    a2:1e:ec:f1:cc:c4:5a:57:a0:d3:77:cd:32:e2:ee:
                    06:62:9d:ff:73:0b:ae:7f:cf:fe:35:f7:d6:62:26:
                    77:c7:4d:c5:45:65:5e:b3:a0:00:61:1d:53:43:51:
                    43:52:1a:ee:73:91:38:7e:7a:e2:76:b8:b4:76:23:
                    f7:1d:00:4a:fb:11:ab:6d:8e:3b:cc:b3:d4:8c:cf:
                    df:43:47:77:5d:0d:8d:77:fe:76:86:d6:24:42:28:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CC:E3:A7:EA:B9:05:1F:2C:17:7B:60:C7:D7:CC:8E:36:20:2B:AB
            X509v3 Authority Key Identifier:
                keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d3:c8:78:45:17:35:dc:2a:17:07:50:60:60:55:52:3c:aa:
         84:55:99:bc:86:3b:e0:2b:ad:d8:51:3e:91:aa:43:eb:c0:bc:
         82:d1:73:bf:4b:94:88:e8:64:5d:fa:94:3b:40:e2:5a:64:b3:
         97:1c:e7:b1:13:1d:c7:75:bb:bf:94:7a:86:9b:5b:9c:a5:8c:
         a1:ff:04:e8:9a:d2:3f:61:53:75:4b:b6:5f:f4:29:25:52:ea:
         11:10:f9:a2:6b:e1:c9:6c:04:c4:06:d4:cb:58:83:8e:be:9b:
         56:57:e9:c0:55:c3:9d:74:1f:93:81:2e:65:d3:48:aa:1b:4c:
         15:7a:dc:e4:a8:e0:1b:83:cd:8a:f9:75:ea:74:94:63:e1:6c:
         4b:f5:4f:67:4a:b8:af:4f:c8:f4:11:74:c7:d3:98:bd:b5:2d:
         67:fc:fc:4b:69:2d:08:f5:78:4b:d3:22:67:0a:2a:a6:a3:55:
         32:f8:86:d7:41:5a:85:11:ab:6c:8d:e4:50:85:26:4a:d1:d1:
         f7:74:4f:5e:be:4d:84:fb:4b:e8:80:70:97:c8:94:82:76:cc:
         5c:c7:14:04:d3:75:1a:f4:9c:33:69:dd:8c:19:6f:83:2b:ec:
         6f:e3:fa:14:b0:34:0c:15:25:84:fd:bf:62:a1:34:17:bd:a0:
         84:8d:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:53 2025 by rpki-client