Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
File:                     9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json)
Hash identifier:          Tb2wX3o5myn0c1MMwSh/N4ghQlW0I2ZMqzpm+S8uKSg=
Subject key identifier:   E1:37:0B:F2:DF:1B:A3:FB:F1:60:1D:E2:CE:00:CB:2D:BC:02:F9:ED
Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
Certificate issuer:       /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Certificate serial:       0446
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
Manifest number:          0441
Signing time:             Sun 19 Oct 2025 02:07:55 +0000
Manifest this update:     Sun 19 Oct 2025 02:07:54 +0000
Manifest next update:     Sun 26 Oct 2025 02:07:54 +0000
Files and hashes:         1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: WjgksH2bhwcLcCYVnAZvj17vCFL8uCKc7SC++s9mvTM=)
                          2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: QYcCnoMCfQ986vrEGW9wDEsLwINXTjV/NRBoNHmvHAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
                          rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
        Validity
            Not Before: Oct 19 02:07:54 2025 GMT
            Not After : Oct 26 02:07:54 2025 GMT
        Subject: CN=68f447fb-a5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:7d:40:d4:b2:10:d2:ca:67:f4:06:68:d9:
                    dc:a4:ee:07:c0:35:0a:62:c6:da:2e:c2:bd:3c:27:
                    41:70:c6:4b:85:46:13:cd:b2:85:a2:0b:a4:08:59:
                    9d:71:13:8b:01:41:d3:c1:9f:27:2a:9b:42:02:4a:
                    eb:6f:ec:df:1a:ed:3f:9e:c8:f4:89:71:01:57:7c:
                    18:0c:dd:2c:7c:b5:c6:b4:f5:4c:16:4c:02:1d:41:
                    81:6f:9d:05:56:60:ba:8c:7a:b7:cb:0e:a2:45:29:
                    9f:80:e1:7a:0e:d4:31:b9:e9:09:ae:9e:b2:b1:f4:
                    14:6c:08:5d:8f:45:65:bf:34:7e:c7:9e:39:ac:91:
                    f3:3d:62:35:3d:6a:6a:15:65:54:3f:b4:cc:7f:27:
                    9a:76:9f:5e:9c:23:3a:f1:f1:49:e3:5a:68:c4:ae:
                    56:2c:8a:d1:62:2b:2c:20:1f:53:f4:ab:88:e1:91:
                    d1:df:2e:01:86:f9:ea:62:eb:c6:c1:4c:dc:38:66:
                    b7:41:74:79:96:8d:87:28:3d:ad:a8:d8:54:e2:79:
                    5e:63:38:13:e3:6f:01:37:aa:35:59:78:62:51:b0:
                    ba:e2:94:03:2e:67:90:95:e2:7c:06:3d:74:24:6c:
                    d1:d6:76:2b:4e:d7:4d:b0:a5:76:ac:89:b1:22:39:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:37:0B:F2:DF:1B:A3:FB:F1:60:1D:E2:CE:00:CB:2D:BC:02:F9:ED
            X509v3 Authority Key Identifier:
                keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:7d:e8:09:b1:d3:da:bd:eb:51:14:6e:7c:1c:12:fc:47:
         a0:64:d0:eb:b8:e7:f7:45:31:75:53:3d:97:04:37:2b:ee:9b:
         2c:7e:8f:73:c7:55:88:87:e1:8a:95:0f:87:c4:c0:06:52:a4:
         24:3d:b5:a6:08:32:1e:e9:ca:e1:ad:25:2c:2e:05:6d:29:39:
         d5:63:69:71:53:5e:5b:a9:f5:7d:83:21:59:a4:6d:2d:f8:83:
         bc:a5:c7:6e:b2:55:b4:c1:25:31:a2:0d:06:4e:c0:5a:b2:da:
         6c:88:10:6e:6c:0f:ef:d9:40:80:35:a3:54:4a:3b:3f:7f:7c:
         ae:d8:f7:2c:ae:a2:e7:24:95:b4:22:35:59:55:f6:6a:35:b0:
         22:6c:31:49:c9:5f:a2:bf:0a:01:5e:f9:13:a2:06:5a:58:c6:
         39:ba:a2:7f:18:75:03:1d:0c:42:c3:a7:72:fc:5e:4b:ef:b8:
         56:f9:1e:f0:81:75:71:ab:60:d5:28:2f:3a:22:86:24:94:68:
         8d:c1:b6:73:ff:ed:15:2f:4b:34:a2:1f:a2:be:b4:2c:e2:d0:
         4a:eb:d4:4d:2f:75:91:ef:ec:be:e0:ff:e7:a0:d3:f3:d4:65:
         7a:3c:92:1a:76:2c:cb:2c:0b:5e:6c:88:96:9f:fa:57:be:7f:
         a6:72:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:22 2025 by rpki-client