Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
File:                     SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json)
Hash identifier:          zZPhvW1qies1J469V355AssVVuGON1YLZLkbiBVYdUQ=
Subject key identifier:   0A:C3:B9:66:74:05:BD:B8:7E:8F:CC:0D:28:BB:82:64:48:C6:D6:63
Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
Certificate issuer:       /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
Manifest number:          0176
Signing time:             Sun 19 Oct 2025 06:28:20 +0000
Manifest this update:     Sun 19 Oct 2025 06:28:19 +0000
Manifest next update:     Sun 26 Oct 2025 06:28:19 +0000
Files and hashes:         1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: r+JTrM1/j3l9FtEgXQ6SANFbqsl9Pm4AtgpbKh78GI4=)
                          2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 3QT9VgasquPbgXpBTFff0Gu2hJL8xTVrH9a//E9hWWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
        Validity
            Not Before: Oct 19 06:28:19 2025 GMT
            Not After : Oct 26 06:28:19 2025 GMT
        Subject: CN=68f48503-79e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:e5:75:a8:17:ad:92:d0:09:d8:24:ee:fc:
                    cd:a7:ae:43:58:bc:a6:7f:db:6e:20:98:62:8b:b0:
                    5f:d6:ac:04:72:74:0b:0e:75:1a:2d:b2:34:32:c4:
                    aa:6c:69:f7:66:9f:26:1d:8c:72:2e:83:39:47:79:
                    0b:03:91:eb:de:8b:71:cf:96:ed:c6:9c:21:ed:63:
                    c8:4c:58:2f:d2:e4:b4:4f:b4:be:8c:de:be:9b:65:
                    53:9b:ea:80:6b:61:29:eb:f9:f3:3a:1d:02:fd:62:
                    9a:41:0f:b4:5a:28:f2:92:23:7f:70:85:6b:ff:0b:
                    5d:ca:d5:5c:a9:c6:26:ca:7a:b1:eb:1f:7d:7f:ee:
                    32:ad:b5:f6:88:3b:7f:95:20:20:fe:bb:ed:66:aa:
                    25:dd:25:2a:d9:f7:8a:2b:7a:3f:bd:82:5c:51:d4:
                    6f:49:42:2a:89:4f:68:8d:87:4f:2c:72:22:c7:7c:
                    91:e6:86:d3:04:ee:f3:16:08:eb:fa:00:89:9e:cd:
                    ea:19:b0:0b:5d:1f:50:b5:12:23:7e:49:cf:ae:b5:
                    a7:b0:f0:89:ec:c1:11:e3:55:9a:2d:c7:0b:8b:4a:
                    66:a8:f4:c5:e8:fc:6a:09:2d:77:97:c9:d3:fa:90:
                    d2:d3:f2:c0:dc:43:09:98:29:cc:4f:58:79:74:05:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C3:B9:66:74:05:BD:B8:7E:8F:CC:0D:28:BB:82:64:48:C6:D6:63
            X509v3 Authority Key Identifier:
                keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:bd:21:aa:6c:ac:79:7d:83:46:52:02:e9:4c:a3:e4:9e:
         77:14:03:15:d0:38:4c:ef:85:ca:f4:7a:1a:25:72:5b:c4:7d:
         ef:36:29:19:85:5b:2f:3a:0d:f3:7d:b4:96:a2:f1:82:76:62:
         26:1b:d6:01:67:ff:5e:56:92:fc:50:3b:0c:4a:f4:55:4d:17:
         c9:a0:e5:53:72:b3:cc:54:f0:38:09:a1:35:1a:48:4d:ea:f2:
         7d:a0:45:55:89:ee:39:17:48:64:95:14:31:a4:89:ec:6e:47:
         53:54:48:c4:5f:f9:f9:ce:f8:67:cb:e1:65:12:72:d4:1a:3c:
         91:4e:17:78:2b:97:98:7b:98:83:a1:16:17:77:e8:24:61:68:
         51:f4:b1:36:3a:dc:84:fc:58:2f:eb:a9:c5:e6:fa:5c:85:c9:
         e6:c5:07:2a:dc:ad:ad:98:c4:60:76:28:10:ed:10:81:a2:f2:
         b7:1c:39:59:ba:bb:0d:59:5b:d6:4a:7f:d0:d7:35:b6:03:18:
         0e:22:f1:ea:31:82:34:1f:8a:84:ee:96:fa:45:c1:52:4f:b1:
         4c:9b:34:5b:88:9c:a4:68:fc:e4:a2:4d:40:f4:e2:e3:be:7c:
         ab:50:83:46:70:ed:21:6e:75:11:df:f7:60:63:00:2e:a6:88:
         95:77:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:42:44 2025 by rpki-client