Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
File:                     bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json)
Hash identifier:          XN5jWRvpuvD07GriICGOTN52LR3zH5CXBhl4mDzf9y4=
Subject key identifier:   E1:05:28:CB:C4:7F:3D:8B:C6:B4:1B:90:55:5C:B8:79:03:43:0D:DF
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Certificate issuer:       /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
Manifest number:          01B6
Signing time:             Sun 19 Oct 2025 05:40:21 +0000
Manifest this update:     Sun 19 Oct 2025 05:40:21 +0000
Manifest next update:     Sun 26 Oct 2025 05:40:20 +0000
Files and hashes:         1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: a+5am2+zKnp+hkpEtTNnTen45RVE/fzQvIBqQmbAVUU=)
                          2: 62A9A9AC240A11F0A6893962C4F9AE02.roa (hash: LvnWXi9L3u+fKG77QzH6WnEL9Cc/sS3Yn7M7dhZqrvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
                          rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
        Validity
            Not Before: Oct 19 05:40:21 2025 GMT
            Not After : Oct 26 05:40:20 2025 GMT
        Subject: CN=68f479c5-bee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:01:39:56:7a:e5:70:22:e7:c5:3b:b6:76:
                    e9:64:b6:c6:ad:fd:ad:de:ae:55:d0:97:bd:4a:9e:
                    81:55:32:71:06:39:cd:3d:7b:d7:77:a5:75:76:47:
                    1c:fd:7e:24:20:83:a4:d8:77:0d:e1:0e:03:7b:67:
                    c1:5d:2f:d5:84:52:19:55:86:9d:ee:22:44:ff:6b:
                    06:f2:e3:af:7d:dc:a6:e2:d9:9b:44:57:db:a8:26:
                    d3:76:91:62:48:f8:59:ba:cf:8f:76:68:84:41:51:
                    55:cf:f3:eb:5a:90:c5:e7:d3:2c:d9:59:a4:8c:40:
                    c1:a8:3a:e0:55:69:8d:ab:56:0e:23:37:93:9c:52:
                    d2:71:32:d8:88:6a:74:19:1a:5f:1c:39:88:24:9f:
                    4c:85:e0:06:0b:65:f3:9c:34:e9:34:41:a1:b3:22:
                    fe:88:3e:00:8f:33:be:8c:53:f0:53:0d:07:28:e0:
                    21:e9:5d:86:80:55:3f:8e:d3:b0:d4:ac:6a:59:71:
                    7e:26:70:c9:24:50:14:08:d6:49:b0:fd:81:fd:a9:
                    a5:02:5b:1b:06:07:8a:70:21:5a:96:bc:11:88:10:
                    2c:49:1c:83:6c:af:ae:3d:56:9a:1b:5a:97:67:a2:
                    d3:58:ac:40:7e:5c:01:42:47:16:69:21:52:1a:05:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:28:CB:C4:7F:3D:8B:C6:B4:1B:90:55:5C:B8:79:03:43:0D:DF
            X509v3 Authority Key Identifier:
                keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:75:76:ac:c6:78:3c:82:d6:8b:e4:8e:4a:3d:39:da:0d:
         d2:48:3b:99:79:90:8b:8b:60:6d:ec:07:ff:5d:f3:41:fb:12:
         f5:50:1a:00:1b:25:86:d5:74:49:44:53:50:bf:33:ec:0c:90:
         46:80:16:b0:0d:e8:ea:30:9e:fc:73:96:11:66:b4:11:05:ec:
         4d:9f:d8:34:c2:0b:ba:a8:07:f8:b1:03:19:e4:46:02:83:47:
         e6:25:6b:9a:c9:87:cc:19:23:08:85:41:30:91:50:6a:9b:7d:
         f6:e6:52:dc:b5:2b:5f:83:dc:d8:72:79:4a:ee:9b:e5:b0:04:
         dd:25:94:c7:26:e2:b2:4a:f1:3f:4f:18:88:5c:1f:21:e3:fe:
         f2:f5:86:13:7e:74:cd:75:e0:8f:d0:5b:25:f1:39:bb:94:9c:
         fe:13:bf:14:f7:ac:b2:7d:d7:05:a6:1f:b9:07:ea:48:3b:f4:
         d7:bf:b4:9e:98:3d:cc:5e:26:21:e5:99:05:da:63:1e:62:cb:
         b7:61:da:32:cb:f3:e9:53:91:fd:bc:42:39:1b:b2:f7:1a:18:
         eb:19:18:e5:fe:33:14:cd:c0:5e:b8:a5:71:1e:fb:99:60:49:
         2b:cc:44:4c:6c:0e:c6:d5:8c:87:ad:89:41:07:07:73:79:15:
         4a:9b:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:27:39 2025 by rpki-client