Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File:                     BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier:          GpRAmtRNZyVuMbIXXp9rqMSKs4cODdGfU5CR8BeswGM=
Subject key identifier:   76:C3:C5:C5:B4:D4:F0:70:3C:F3:01:7C:31:73:E1:72:A0:41:0C:AA
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer:       /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number:          CC
Signing time:             Wed 05 Nov 2025 05:53:58 +0000
Manifest this update:     Wed 05 Nov 2025 05:53:58 +0000
Manifest next update:     Wed 12 Nov 2025 05:53:58 +0000
Files and hashes:         1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: 1gksVZ5FeVyCbzbst/130Mnpo8tBuGyj10w4en8LRdY=)
                          2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: 8S+MnfPAwwqJ4EDo87RkT/K1LmOYDK5SfddRm32GGQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
                          rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
        Validity
            Not Before: Nov  5 05:53:58 2025 GMT
            Not After : Nov 12 05:53:58 2025 GMT
        Subject: CN=690ae676-539f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:66:77:3e:4a:6b:81:91:71:96:0f:39:32:
                    9b:ad:90:c7:f4:60:fe:5f:ed:71:ea:53:0f:82:11:
                    01:5c:ef:d9:57:22:93:74:be:35:91:e5:dd:07:ec:
                    54:04:4c:8f:e6:80:b8:cd:18:de:2c:8d:d8:13:69:
                    56:eb:4c:21:d8:30:06:98:db:4e:89:96:55:4b:e6:
                    73:83:5d:cb:86:16:be:a5:19:e2:29:97:24:c9:ee:
                    6e:08:f6:67:49:a1:53:cb:9e:cc:91:3d:fc:e0:5a:
                    fa:11:2e:e7:06:81:6d:85:0a:5e:f8:75:06:9b:98:
                    43:53:4d:e3:46:64:f7:9b:1d:fc:85:16:8f:4a:f3:
                    e2:20:ad:cc:e8:e0:e4:3c:f0:2a:c9:54:45:d3:9d:
                    bd:a1:e0:7d:b6:1e:5d:bf:54:db:6f:48:f5:fe:93:
                    fb:f0:08:2d:14:bf:94:aa:69:33:94:a3:33:1f:cc:
                    ca:ac:b1:c7:e2:e3:c4:97:93:f6:c7:ae:cd:b5:2e:
                    f5:03:2d:fd:c4:7e:29:2d:1e:a3:50:4d:bf:27:8c:
                    f2:d6:66:60:c7:63:6b:5a:01:65:15:a6:e9:b9:d5:
                    8d:88:a1:5f:81:d6:53:9f:e6:ce:6e:d7:60:94:f8:
                    fc:76:b8:30:be:7f:c4:1a:07:99:68:b0:79:0c:c6:
                    46:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C3:C5:C5:B4:D4:F0:70:3C:F3:01:7C:31:73:E1:72:A0:41:0C:AA
            X509v3 Authority Key Identifier:
                keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c9:58:ef:e4:62:c5:56:04:6d:be:3f:13:a1:b8:da:8c:2e:
         5d:f3:9d:fc:19:52:48:99:99:4c:97:20:09:b5:c7:d1:89:d5:
         43:c5:58:2d:48:f0:65:f7:2b:b9:27:88:ce:0a:00:85:eb:ea:
         cb:93:3a:11:9b:2e:ac:e9:4e:36:7e:29:7d:71:e3:bc:22:d8:
         20:f0:09:ab:5e:31:22:98:0e:4f:9e:b3:90:15:99:ca:9b:ff:
         72:d6:16:09:cc:67:14:d6:9a:1f:ff:9e:c8:62:86:b0:9c:cd:
         b2:b7:de:b5:da:0a:b2:40:05:15:fb:68:44:0e:e9:29:2f:a3:
         8a:b0:28:a0:02:37:ed:e0:dd:ed:d6:07:e1:33:ea:f0:cd:e2:
         a1:e4:06:a1:a5:c5:66:eb:ad:68:bb:25:8f:fd:91:0b:7c:2f:
         b4:35:59:1e:50:3f:fb:2f:82:af:22:88:2d:c9:c1:b0:80:b5:
         46:56:97:94:fb:54:e7:ee:c3:43:06:d8:2a:2a:ad:9e:e8:ed:
         de:63:61:8f:74:bc:cd:be:36:00:e4:a2:92:ea:d8:ee:06:29:
         93:26:11:76:0b:f8:99:7d:de:24:d7:bd:57:aa:1b:bc:b7:7a:
         a0:96:b6:6c:1b:3f:6d:5c:ef:c8:28:2f:44:7d:e5:f7:bb:eb:
         84:77:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:05 2025 by rpki-client