Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
File:                     bvj-zvM56m3paYzCxfWGRc9l794.mft (raw, json)
Hash identifier:          Y5JEijAER94jjJTnU1GzPWe9FXc2u9g1LeVJBYGF02o=
Subject key identifier:   56:FC:71:A7:F3:9B:7F:93:C1:7D:DA:BC:1A:78:F8:E7:9D:1E:C4:6D
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Certificate issuer:       /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
Manifest number:          0B
Signing time:             Sun 19 Oct 2025 07:40:02 +0000
Manifest this update:     Sun 19 Oct 2025 07:40:01 +0000
Manifest next update:     Sun 26 Oct 2025 07:40:01 +0000
Files and hashes:         1: bvj-zvM56m3paYzCxfWGRc9l794.crl (hash: bHp47sQcK9/P0ODz9FjWr/BoTMUewz0bzbQnE+EtwM8=)
                          2: E047F204A4CC11F0AE32440DC4F9AE02.roa (hash: IbTCPbnBI2DL2kcBkW+LiJNqF8edylNBGRuBoI+lCNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
                          rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Validity
            Not Before: Oct 19 07:40:01 2025 GMT
            Not After : Oct 26 07:40:01 2025 GMT
        Subject: CN=68f495d2-61ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:be:16:38:03:14:92:dd:3e:e3:8a:61:4c:
                    1d:9c:ca:0d:c8:7a:14:d5:e3:f5:45:fd:26:88:5f:
                    b6:3f:99:b0:30:94:49:5b:a4:31:56:8d:42:fc:56:
                    52:3f:00:19:f5:92:99:cd:6c:de:30:16:9f:be:77:
                    9e:e8:fa:67:e7:94:b1:4b:3f:43:ff:0a:39:24:7a:
                    d3:42:0a:be:25:49:4e:2e:1d:99:7b:fa:9d:0f:77:
                    29:a0:63:95:cc:9b:3b:10:7e:8b:df:ce:b1:2a:2b:
                    2d:4c:72:d2:f1:11:92:0d:bc:70:31:3d:12:c3:29:
                    7f:03:64:7b:31:59:4f:bb:61:f8:e5:15:b7:c4:bd:
                    8a:0b:8d:fe:72:54:28:bd:94:d6:a2:37:a4:09:91:
                    06:8f:64:1b:95:26:40:31:6c:10:59:3e:06:ec:a7:
                    4e:9c:44:be:0c:d2:4e:c7:7f:0e:35:bb:b2:f0:5f:
                    a1:88:97:35:13:2b:d3:99:4c:8c:92:61:33:72:2d:
                    b4:34:3d:f3:4c:bc:ef:da:ef:2a:d8:89:07:24:3a:
                    be:5d:54:9c:74:bc:da:88:7f:17:b6:1e:67:cc:41:
                    eb:04:4a:e0:84:dc:26:67:0b:e1:3e:f0:b7:39:c0:
                    db:73:eb:00:d9:ee:6c:14:ef:c9:54:36:d8:10:21:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FC:71:A7:F3:9B:7F:93:C1:7D:DA:BC:1A:78:F8:E7:9D:1E:C4:6D
            X509v3 Authority Key Identifier:
                keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:43:ce:50:40:dc:09:e0:7c:f9:83:dc:e0:73:e7:b5:59:0f:
         da:45:9b:e7:bd:ef:e9:5d:db:31:9c:5f:3d:ed:28:6b:af:a2:
         1f:01:c2:71:4b:5d:60:f9:f0:5c:10:61:a0:77:1c:29:dc:06:
         1a:1a:6c:12:ef:07:7d:1e:ff:fb:9e:2b:b9:fc:9c:03:3c:a5:
         c4:a5:23:3b:50:26:77:af:3c:b0:e5:67:0f:50:87:0e:7f:bb:
         e2:88:ae:7d:a8:6c:05:8e:06:d3:fe:a4:3a:a7:f1:0c:3f:0e:
         78:13:a3:b1:97:a0:9e:55:f9:e1:72:00:74:f6:80:44:c5:c8:
         07:67:50:e0:f4:21:a5:b5:80:4b:93:a7:4b:d5:27:66:20:1a:
         7d:7c:57:8b:b6:d4:51:3f:b3:05:06:3b:05:ad:f5:39:74:6a:
         2e:7d:b4:b9:c4:13:65:c4:c9:c9:80:cd:25:82:24:1a:6d:df:
         25:8a:51:4c:15:5f:18:b0:0c:8c:63:9f:b8:3e:b0:1a:4a:ae:
         fb:75:de:36:f2:cd:db:01:66:d9:82:dc:f2:e2:92:33:78:08:
         3a:da:ed:b4:55:eb:36:e6:2e:91:84:99:91:e0:e6:ff:bc:54:
         29:5e:f8:10:04:3a:d1:90:11:98:5f:2f:17:87:fa:d4:f0:57:
         70:c4:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:34 2025 by rpki-client