Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File:                     BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier:          Irt9WqTHZjSsH/dZSOX3B1ad2BhkZ1Zz9/e4zZw7lNo=
Subject key identifier:   EC:79:20:4D:99:89:35:FB:19:27:EC:B0:58:6F:71:1A:85:D9:89:3D
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       0672
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number:          0666
Signing time:             Sun 19 Oct 2025 00:11:28 +0000
Manifest this update:     Sun 19 Oct 2025 00:11:28 +0000
Manifest next update:     Sun 26 Oct 2025 00:11:28 +0000
Files and hashes:         1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: 5JAf35EzfXC6nJntqR4tHP2TBk/uwu2vryXPcnlyd1c=)
                          2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=)
                          3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Oct 19 00:11:28 2025 GMT
            Not After : Oct 26 00:11:28 2025 GMT
        Subject: CN=68f42cb0-4301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:94:af:44:a5:e3:f3:61:d8:72:0e:3c:0b:
                    1f:9a:23:13:d1:92:97:46:91:aa:13:c7:e1:c8:d9:
                    22:0a:28:d2:dd:27:4e:95:de:e1:6b:55:05:12:18:
                    54:f7:36:e9:36:e3:44:6e:85:0d:a0:ad:30:2a:25:
                    5f:5f:c3:92:f4:6a:fd:a6:03:e3:27:9e:4f:f9:bd:
                    fe:76:11:f3:7b:91:a7:e8:1e:82:b6:91:6f:42:2e:
                    8c:f5:be:4a:ff:57:85:ce:dc:96:4a:5a:89:bc:d3:
                    2c:df:0c:e9:0d:6a:b3:a9:56:54:63:6c:8c:0a:f8:
                    da:74:79:32:d3:e3:24:7a:81:14:34:1a:d0:6d:e8:
                    9e:5a:95:ec:60:ce:1d:b7:31:cd:7a:61:52:ee:da:
                    b4:3a:37:0f:7d:57:c7:d0:e1:a6:71:cb:ca:fe:81:
                    43:b9:1e:f9:08:05:4f:a3:38:ca:5f:ab:0e:dd:2e:
                    82:fa:e5:7a:23:09:09:03:4d:e7:9a:b2:14:f6:cb:
                    4f:02:1f:af:48:a4:a6:23:d0:d6:fb:58:e9:e3:e3:
                    35:be:b9:42:00:b3:68:b2:ef:3e:f7:81:21:5f:21:
                    6a:f4:a1:f3:7d:3c:33:d5:a6:59:73:de:4b:a8:07:
                    c0:5f:c0:d7:65:90:49:12:9c:b7:cf:7f:55:67:76:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:20:4D:99:89:35:FB:19:27:EC:B0:58:6F:71:1A:85:D9:89:3D
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:84:4f:7f:0d:fe:c2:76:3e:0c:8f:6d:e8:57:64:a4:ab:96:
         96:d7:26:eb:a2:90:ea:67:d2:0f:07:a4:17:c6:f7:18:8d:48:
         ce:87:ab:98:5d:eb:36:11:5d:62:5f:83:cc:12:48:8e:61:d7:
         f6:89:33:5f:8f:1d:44:04:49:b5:16:93:45:d3:d3:17:e2:44:
         16:b3:44:d3:5d:00:3d:dd:ea:44:38:89:1a:0f:35:85:31:9f:
         45:e9:6a:9d:f4:17:26:2f:18:3f:6b:15:df:d4:88:06:75:60:
         20:93:16:99:2b:6e:4b:a7:26:0c:ca:00:57:5b:22:73:e7:11:
         39:1b:01:f7:8e:27:1b:3e:fd:d6:c0:11:0e:77:48:df:7f:9a:
         ae:0a:1f:4f:56:d7:e3:7f:00:59:cd:d6:a3:87:d8:4d:f7:e1:
         b7:df:56:6e:b3:d3:6b:4b:56:57:c5:42:c4:be:3c:d5:4e:04:
         39:ca:5d:ea:e5:8a:d1:d8:da:29:d6:45:13:d7:82:1b:f9:78:
         e2:96:b8:ea:9f:57:49:cf:88:55:98:03:94:1b:27:10:2a:c5:
         e7:82:4a:5a:35:9b:e0:67:bb:d8:fb:a0:68:ac:4c:23:83:28:
         81:10:42:cd:e8:86:bb:50:85:43:c9:df:27:a6:50:31:3a:99:
         1f:d2:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:45:45 2025 by rpki-client