Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          5x/MVLynkiIzZQFLg/mOpw6amZlnIi62PlbpyznRSMs=
Subject key identifier:   44:CF:58:1D:F9:99:E2:14:99:E0:F0:6C:4C:DC:84:5C:27:D1:70:2F
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0944
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          091C
Signing time:             Tue 04 Nov 2025 20:26:58 +0000
Manifest this update:     Tue 04 Nov 2025 20:26:57 +0000
Manifest next update:     Tue 11 Nov 2025 20:26:57 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: BFH1QVu+8cBUj5Qvqu12oKsAlMMO0v31CJhl5qsTKsA=)
                          2: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: rHm1B/MSNJeVi9UgfBbJLqo7QtD6an1CT3aEkcYwbOk=)
                          3: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: jqFz3U7Y3jCz0qKu2eSK+/FBQRd4npoRB1g4Atfczgs=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: Z8zcoQtFS3z9ZE1TqMKGoB34rHpti60MXfkV1lqD5Ws=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: LK9G1J83bi3BUz0/qqWD4cotPJRvK4iVMh7A+P/u8DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2372 (0x944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Nov  4 20:26:57 2025 GMT
            Not After : Nov 11 20:26:57 2025 GMT
        Subject: CN=690a6191-77ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:99:4d:d4:0d:18:70:2e:58:02:c5:8c:20:
                    8d:c3:53:0a:2d:5c:15:62:31:00:63:93:a8:90:5d:
                    0d:05:83:01:73:08:89:b9:4c:4d:12:45:fc:b3:ef:
                    b5:c3:01:25:8f:ca:5a:32:46:d5:3c:b7:c0:73:5d:
                    56:c8:52:f3:fb:b4:75:8f:01:b0:14:28:b8:2c:e9:
                    43:3e:9e:80:53:92:84:1d:82:a7:a1:a6:74:f3:c5:
                    3e:ea:a5:27:e6:9e:f3:01:e2:3d:8e:44:10:0a:f6:
                    d7:fa:0f:ab:2b:5b:b4:88:20:e3:71:ec:75:b9:a2:
                    a3:8c:18:25:11:fc:01:55:af:b0:b6:68:ab:f5:30:
                    63:bd:2f:bb:52:cd:08:d9:7b:f5:d0:1f:63:ab:25:
                    b2:56:09:9c:d0:8e:4b:32:49:e3:5e:f5:c4:f1:c4:
                    fd:72:b0:dc:d5:14:10:8c:a9:6c:11:7f:7a:e0:ae:
                    9e:22:7d:ad:21:0c:67:14:24:6e:e7:8c:ed:09:a6:
                    d7:80:f4:ef:dc:91:4a:ed:62:90:6c:f7:07:d7:8d:
                    2e:f0:c9:9b:3e:7f:64:6f:c3:a3:b2:30:8f:4b:87:
                    46:dc:16:25:da:03:b8:9a:1e:55:72:ba:79:5f:2f:
                    29:bb:5e:c8:d0:f7:5f:a5:e7:56:bf:07:18:88:b8:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:58:1D:F9:99:E2:14:99:E0:F0:6C:4C:DC:84:5C:27:D1:70:2F
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8f:ee:08:3b:9a:f8:9f:d7:1d:01:d5:03:f0:1e:71:de:11:
         56:96:f4:70:60:3d:83:fb:0a:b8:b0:27:f8:61:d8:11:77:eb:
         b6:cd:47:3a:7f:d7:b3:b6:45:c8:7e:0a:aa:1e:35:e3:5e:83:
         1a:28:99:55:d4:73:bd:8a:e9:09:2a:ed:e3:eb:ba:9f:e7:36:
         cd:2d:cb:6f:38:01:85:18:13:1f:d2:5b:ec:a3:95:89:a6:94:
         9c:5a:fb:ed:cb:43:4d:c2:92:20:64:6d:4c:22:30:e3:f4:21:
         b0:53:f7:24:c7:82:a2:a8:92:e7:4b:66:10:bd:65:e0:fb:e7:
         71:61:ae:43:5a:f0:4d:2a:96:45:33:9b:71:54:66:67:75:84:
         fe:f8:72:f3:51:73:dd:e1:79:bf:74:d3:d8:7c:95:21:54:29:
         cb:55:d3:37:bd:1b:9e:63:c0:ce:cf:4c:9e:f1:b0:e4:21:8c:
         cf:e6:22:c3:1f:d3:26:66:a8:ea:94:93:e7:a9:e6:40:75:39:
         e2:e1:00:54:b5:ff:6f:bf:e6:d4:0c:f0:0a:86:ef:6e:4a:68:
         a3:35:93:9e:3b:6b:d6:02:c6:d3:42:a5:8e:cc:2c:5d:69:8a:
         9d:e5:77:f7:f6:f5:27:b8:3b:0d:0c:12:91:e2:9c:f9:db:06:
         2f:18:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:36 2025 by rpki-client