Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File:                     Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier:          kssZFcoBLE2RpTOIuzNFaFll0BJXfIgSw5ZfUfZK1Po=
Subject key identifier:   D8:CA:AD:27:E1:F7:94:B4:CC:46:89:2F:63:4F:38:55:90:E9:D5:37
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number:          7D
Signing time:             Wed 05 Nov 2025 07:03:00 +0000
Manifest this update:     Wed 05 Nov 2025 07:02:59 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:59 +0000
Files and hashes:         1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: FcLPrtQDwYiJphujhmn/KK762K4A8xzCItOhjXKFOV4=)
                          2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=)
                          3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: Nov  5 07:02:59 2025 GMT
            Not After : Nov 12 07:02:59 2025 GMT
        Subject: CN=690af6a3-1169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:2b:59:7e:f6:6f:35:3d:ac:30:1b:bb:4a:
                    54:02:e7:fd:68:50:53:44:a8:2d:7c:27:3e:6e:75:
                    bd:4c:2f:bf:5f:37:9e:db:31:87:fc:d3:cd:75:c4:
                    37:52:f7:75:a2:9d:1f:da:df:35:e8:a9:71:4e:ab:
                    b2:f3:47:61:25:b2:f9:3c:f9:bb:6c:7f:f8:c9:fe:
                    b8:92:cc:97:8e:82:1c:8b:52:24:74:de:47:bb:a3:
                    d4:d1:46:b5:17:a8:dd:f4:ca:40:76:02:0b:b2:14:
                    28:ad:be:75:80:62:48:12:4b:cf:42:ff:e4:24:55:
                    5c:37:6c:af:a0:39:fa:e8:07:0e:0e:58:fc:9b:11:
                    02:a6:a1:1a:0b:ad:f9:43:4c:ea:46:2e:5d:ab:94:
                    66:33:ca:ea:75:21:fc:38:5c:e3:49:61:64:3e:b1:
                    a4:7f:0b:41:57:f4:06:1a:de:89:a2:c5:03:92:01:
                    91:16:9a:e9:74:6f:b2:f4:eb:d1:fa:6f:a0:1b:ad:
                    a5:4b:d8:77:92:84:de:4a:a5:17:d1:59:3d:9f:99:
                    d0:2b:37:a5:d8:42:60:77:f4:31:7c:bc:d9:1e:6f:
                    ac:a6:92:56:66:1f:3e:68:9d:ac:bf:2e:d3:d3:bb:
                    b2:31:db:d3:48:1b:31:7e:ef:6a:61:de:3e:d8:c0:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CA:AD:27:E1:F7:94:B4:CC:46:89:2F:63:4F:38:55:90:E9:D5:37
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:50:60:f9:30:d9:1a:22:b4:39:b9:99:4a:0e:61:db:48:da:
         5f:31:19:d5:c2:2c:35:6d:46:9f:65:c5:da:24:61:9f:0c:1d:
         37:b3:85:18:37:9c:84:b5:8b:4e:48:f1:32:b5:60:41:24:3e:
         89:53:5a:cb:88:45:25:a8:1d:bf:e0:b5:48:fc:8a:08:30:8b:
         2c:5b:25:37:bf:5a:0f:c2:d3:a9:77:8d:9d:26:ec:2a:0b:6e:
         17:84:12:cb:77:58:f7:b8:6c:b6:5d:c0:54:60:0f:f7:45:5a:
         53:38:a6:71:18:ef:45:ad:cc:62:01:02:94:c6:ff:cf:c0:8f:
         d7:a7:4f:21:65:b4:ff:bf:ca:06:9d:39:c0:99:f1:68:59:a6:
         96:03:9b:ec:17:3e:1c:a7:68:0a:b9:b0:da:fb:fc:8a:5d:e7:
         7b:b2:eb:32:8e:ab:a2:92:52:bf:a1:58:fc:52:cf:9c:00:d0:
         2b:a5:9f:b9:71:d3:73:c8:bd:db:3b:06:2d:d6:e0:1d:c2:47:
         cc:d9:8e:fd:34:c9:9f:50:cf:2e:7a:3a:55:1a:ca:0c:84:7a:
         8a:f6:21:0c:c6:16:69:37:ba:a1:99:b3:f2:cd:14:3f:f2:7b:
         dd:90:84:8e:67:8c:d8:be:53:b6:08:e0:44:dd:e9:10:5c:aa:
         41:e9:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:39 2025 by rpki-client