Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
File:                     byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft (raw, json)
Hash identifier:          uibmlLL3SMHP063UzDhL1lssYeu1ZXUGgIw7pXxd5tI=
Subject key identifier:   BA:E7:52:2C:0E:B5:6B:20:C6:1C:7A:2D:E3:AD:A0:60:9E:49:05:EE
Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
Certificate issuer:       /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Certificate serial:       0C29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
Manifest number:          0C15
Signing time:             Tue 04 Nov 2025 18:55:29 +0000
Manifest this update:     Tue 04 Nov 2025 18:55:28 +0000
Manifest next update:     Tue 11 Nov 2025 18:55:28 +0000
Files and hashes:         1: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl (hash: WDX/wWclhYEkppu5B69ef9BryGWW0cAdVJeyvGnRWbY=)
                          2: 54B32544D84711EF81BD1E0BC4F9AE02.roa (hash: n/Sc1HZXxr+QB2+UH8INg78Itmv5yzjeOuf4NXzLeAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
                          rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3113 (0xc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
        Validity
            Not Before: Nov  4 18:55:28 2025 GMT
            Not After : Nov 11 18:55:28 2025 GMT
        Subject: CN=690a4c20-68df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:e1:44:fc:65:db:d3:f7:8d:35:63:0b:43:
                    ae:4b:3b:7e:72:3e:15:b0:07:34:e2:68:34:3a:30:
                    9a:22:86:56:62:7a:b5:ea:0e:65:c2:e4:20:7e:4e:
                    59:cb:f7:00:75:1e:37:e7:cf:7d:47:52:da:86:b9:
                    39:90:7c:c4:26:b4:d9:ad:e0:6b:ed:4d:2e:7d:c0:
                    d1:a1:ec:24:af:e1:f6:40:21:0e:09:8c:30:ea:a9:
                    1b:01:4b:68:c0:a7:5e:a9:b7:86:9a:f5:87:87:24:
                    83:6b:cc:c6:ae:93:2c:15:14:99:02:19:06:99:66:
                    af:b0:26:d2:0b:fc:93:9c:ad:d9:92:79:fc:e1:bc:
                    b7:8a:53:05:b4:e1:6f:f6:af:13:0f:ec:69:52:78:
                    0b:6e:03:e4:bb:6b:e1:cd:72:74:53:08:93:d9:38:
                    ad:a9:e8:74:de:a0:eb:f3:f5:63:6f:5b:67:fd:dc:
                    13:c0:88:74:94:92:20:57:2e:62:bc:14:5a:9c:24:
                    1c:63:fe:fa:82:78:05:40:9d:cf:d4:b2:b0:ae:65:
                    dc:98:46:29:1b:fa:fc:9e:61:b2:e2:b1:c6:ed:3d:
                    9a:ea:da:46:fe:88:f3:75:e3:b9:c7:8e:0f:4f:90:
                    0d:c4:f5:c5:46:29:75:72:20:06:29:ff:b4:a7:dd:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E7:52:2C:0E:B5:6B:20:C6:1C:7A:2D:E3:AD:A0:60:9E:49:05:EE
            X509v3 Authority Key Identifier:
                keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:81:e1:1a:6b:66:ab:ac:95:39:f7:f3:0e:ed:1d:99:a3:ef:
         9b:97:e5:23:e5:16:50:f3:e1:12:1a:4d:e2:3c:58:14:bc:47:
         91:bc:27:01:09:e4:04:a4:60:f3:b0:87:23:b6:1a:a6:bb:ee:
         5f:ac:8f:1f:a4:67:81:59:6a:3d:b1:dd:d3:0e:ab:d5:62:8c:
         36:aa:61:20:46:84:65:dc:6e:df:8c:22:a5:c8:fb:7d:3f:d6:
         20:b4:c8:86:c0:d0:cb:d6:8c:9a:17:df:97:97:a7:9d:57:f5:
         4f:72:db:35:bc:2d:b2:68:bd:c0:d3:c1:08:be:a2:56:45:8b:
         d0:92:f3:98:c5:04:58:2d:0b:f6:74:77:7f:08:a3:dc:36:0b:
         a6:b2:b1:78:40:55:8b:63:c6:73:42:12:f4:aa:f7:12:88:6e:
         67:e6:83:77:38:5b:ee:05:e6:3e:f0:19:6d:11:c7:7d:ee:e5:
         46:aa:4e:7b:a6:ea:00:43:16:9e:e0:2f:42:40:d0:e2:86:6d:
         30:d2:1a:25:1b:82:cc:4b:fa:18:dc:d7:41:d1:b3:b6:d1:98:
         50:91:82:c1:f0:06:38:5d:09:ff:7b:77:99:58:50:43:0a:ba:
         89:b6:b0:08:48:c6:03:f5:1a:3d:ab:e7:86:22:ab:ab:f0:7d:
         16:4a:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:07:57 2025 by rpki-client