Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
File:                     pBG7PJekzTyP_HCtY6ny7JaSrbc.mft (raw, json)
Hash identifier:          mr02BG9YmmAJ9e5nc73L5qPwz1M/dGoZQpBg++IQCZ8=
Subject key identifier:   BD:FF:E8:4E:BD:F2:0B:EE:FE:0E:D0:C4:25:7A:39:4D:6A:CB:4A:91
Authority key identifier: A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7
Certificate issuer:       /CN=A91EFD20/serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
Manifest number:          09
Signing time:             Sun 19 Oct 2025 08:17:27 +0000
Manifest this update:     Sun 19 Oct 2025 08:17:26 +0000
Manifest next update:     Sun 26 Oct 2025 08:17:26 +0000
Files and hashes:         1: pBG7PJekzTyP_HCtY6ny7JaSrbc.crl (hash: 7yhgCrqhPnEipLkvd9kzbk/F7C8yVRMIrQvxP1WbV/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl
                          rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFD20, serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
        Validity
            Not Before: Oct 19 08:17:26 2025 GMT
            Not After : Oct 26 08:17:26 2025 GMT
        Subject: CN=68f49e96-4a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:76:f8:53:a8:67:77:9a:3f:18:45:9a:b5:
                    a3:74:73:ff:4e:76:71:11:1e:50:a7:24:b0:d4:c0:
                    61:37:42:bd:44:7a:8d:5f:6a:ca:6f:71:c6:c7:d5:
                    df:18:43:24:61:d0:5a:f7:61:fa:80:c5:47:cb:a7:
                    8d:7f:94:72:a4:b8:8e:1d:5d:f1:31:a7:55:1b:f0:
                    7e:a4:13:5a:1a:93:3e:72:d1:a4:0a:50:c3:c3:e5:
                    2a:e0:87:ec:26:49:d1:c4:d8:cf:94:81:00:07:da:
                    25:19:ab:ae:cd:4d:43:d7:7f:de:a9:fb:05:f2:4a:
                    cb:5f:88:46:ee:ad:11:60:4a:c2:a5:10:9e:9d:06:
                    c9:75:5b:a3:da:c9:bc:31:99:ec:db:5f:d7:00:50:
                    bd:45:65:3f:ee:fd:71:a1:72:91:63:ac:60:8e:a8:
                    6c:65:2e:c8:6b:89:d1:71:09:b9:4a:01:bc:6a:b4:
                    b9:90:b4:3d:39:3c:58:cc:65:34:8e:c8:8b:ab:6a:
                    48:dd:08:83:6c:a4:78:31:e7:0b:eb:53:0a:97:7a:
                    0a:e7:2a:d7:9e:a5:93:5e:f7:e3:e4:7c:9b:64:7a:
                    21:20:26:39:24:c4:97:2d:ac:bb:df:85:8e:0a:09:
                    2b:ae:dc:65:a0:fd:21:9d:14:bb:41:c5:a2:6e:7b:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FF:E8:4E:BD:F2:0B:EE:FE:0E:D0:C4:25:7A:39:4D:6A:CB:4A:91
            X509v3 Authority Key Identifier:
                keyid:A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:07:d2:1a:43:9d:3f:88:90:d4:7a:1c:ed:7b:24:21:ef:
         c8:7b:c8:79:48:f3:32:ee:77:5b:bc:8a:60:fc:3f:13:3b:c8:
         93:b7:e0:f6:2b:95:3e:5d:35:58:11:65:2f:27:33:ac:75:95:
         a5:8b:f3:26:33:41:a6:20:0c:01:15:e3:23:f7:57:18:47:aa:
         f4:aa:38:3f:57:0b:ad:32:e6:13:32:e6:ff:02:ee:58:16:a7:
         88:0e:de:71:7c:10:bf:93:4e:9e:9b:84:95:d3:28:7f:38:eb:
         22:79:63:cf:88:c3:fe:34:e0:a9:5c:47:dc:48:0c:67:dd:50:
         7b:1a:0d:49:03:ff:83:12:df:00:60:fa:75:ec:d5:24:3f:6f:
         00:83:23:50:8b:e5:b0:32:a5:93:f5:a3:8a:cd:f8:8e:72:10:
         ec:8c:e7:15:0e:0a:c2:1c:fe:25:4a:bd:c1:f8:e3:b8:6b:1b:
         17:0b:aa:c3:c9:a4:a4:ec:1d:06:fb:6f:de:1c:20:d0:01:4d:
         56:d0:5c:38:d8:3f:2b:6a:72:66:37:07:a9:d6:1a:f8:5c:4b:
         f0:4f:0e:10:3d:2e:89:62:c4:7a:28:df:92:b6:a1:0e:b7:13:
         14:0d:83:7b:5f:fe:60:f9:0e:73:8f:5a:71:45:72:3a:18:26:
         4a:55:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:37:20 2025 by rpki-client