Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File:                     xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier:          EMC/pMGS5sPEerxSTsQEcvbzbaJQcNOzC3rquc5KJ0A=
Subject key identifier:   22:F0:39:64:BB:AD:7D:73:10:59:D8:0A:5C:24:4C:AA:36:50:67:22
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer:       /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number:          BC
Signing time:             Mon 03 Nov 2025 03:53:42 +0000
Manifest this update:     Mon 03 Nov 2025 03:53:42 +0000
Manifest next update:     Mon 10 Nov 2025 03:53:42 +0000
Files and hashes:         1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: xrdIPfhGgWsbOvblgccdMrtkQk1V+YDEtEyXsvbZewI=)
                          2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=)
                          3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
        Validity
            Not Before: Nov  3 03:53:42 2025 GMT
            Not After : Nov 10 03:53:42 2025 GMT
        Subject: CN=69082746-5c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:d4:91:fc:1e:f8:9d:af:c5:0b:cd:b7:8b:
                    74:5c:3e:41:79:54:96:aa:f1:00:2c:f0:9b:1b:c3:
                    ff:a8:93:ac:f9:81:13:b9:9d:63:6e:9d:a7:de:91:
                    dc:f9:28:89:1e:4e:a8:62:f7:9e:bd:b4:27:41:82:
                    a4:c2:cc:fd:08:90:b1:05:33:12:fa:0b:03:39:85:
                    e4:8c:47:ba:bf:cf:90:19:a3:01:e4:0f:b4:05:23:
                    c0:de:41:45:2e:eb:5f:80:5d:96:6d:75:91:b7:f4:
                    bc:f5:ed:c8:4d:30:1f:97:c2:68:c0:8e:42:30:cd:
                    f2:d1:99:15:8a:e3:c0:12:48:2c:c6:e6:af:58:f0:
                    d6:21:fa:f2:98:9d:24:dc:4b:aa:da:24:e1:3b:6a:
                    49:6d:4f:63:5d:38:80:3b:89:0b:a9:82:46:6b:a2:
                    2a:c1:0f:5f:10:fd:22:53:2b:c5:bd:91:d0:fe:c1:
                    0a:77:0a:b6:ca:f3:5e:c4:82:74:c0:a9:52:50:e5:
                    30:38:30:d9:0a:1e:00:49:52:00:36:ab:36:cc:c9:
                    5d:c7:ae:cb:c6:cb:29:b6:c5:31:22:33:29:7c:88:
                    22:e9:32:2b:9d:b7:72:37:31:8c:fd:46:c5:95:a0:
                    31:5a:7e:12:50:f7:87:a4:61:4e:e9:25:e2:56:e0:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:39:64:BB:AD:7D:73:10:59:D8:0A:5C:24:4C:AA:36:50:67:22
            X509v3 Authority Key Identifier:
                keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:ed:76:1c:11:a7:9b:37:dd:ae:ea:b8:cd:8c:90:44:74:
         50:3f:f5:74:1a:dc:08:c0:16:81:f7:77:cb:28:ea:11:20:d2:
         f7:e9:1b:7e:eb:1a:12:10:d4:95:15:29:fa:3a:4a:bf:0a:2c:
         97:ab:71:82:07:24:73:4a:cb:70:c3:b5:82:a1:84:48:d3:f9:
         71:12:09:bf:2d:24:d7:d0:ed:6d:d1:80:b5:56:d3:3a:60:0e:
         69:92:8c:e4:7c:68:71:0d:77:ef:e4:64:24:03:6e:63:ba:aa:
         91:f1:14:b9:30:b0:3e:63:3f:e8:8d:e6:54:5b:76:02:2a:06:
         a3:ef:2f:b4:69:2b:93:d4:2e:e8:5b:1e:e0:64:8c:67:eb:2a:
         5b:88:a3:c3:1f:95:a5:14:26:13:22:ab:d9:d4:59:1f:9a:46:
         2c:55:77:03:b1:17:69:b9:55:20:33:e0:21:bb:e4:23:76:bf:
         f0:d7:0b:d4:15:32:0b:67:1e:87:95:01:fa:0e:84:0d:bc:2c:
         31:5b:d8:14:d0:c8:45:c5:6b:22:c2:92:4f:9a:ee:cd:ac:c3:
         86:64:8b:1c:53:19:a3:3d:a7:2f:d6:e9:25:48:07:9a:47:c5:
         dc:74:6f:0b:cd:0e:6a:bf:01:b0:9f:de:6a:2b:50:b0:9e:57:
         17:cc:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:54 2025 by rpki-client