Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File:                     Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier:          ep5jhzZloCRUU0mVpFGHOG5tPrx/uMcFVJKu0ciA0wU=
Subject key identifier:   43:FD:1D:14:46:72:4C:42:69:FD:2E:84:38:84:A2:87:D2:9A:19:3A
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number:          0806
Signing time:             Tue 04 Nov 2025 21:11:04 +0000
Manifest this update:     Tue 04 Nov 2025 21:11:04 +0000
Manifest next update:     Tue 11 Nov 2025 21:11:04 +0000
Files and hashes:         1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: pnIRDiI3Ppfps09pYbpEBznrzkAjUX9kLGyBObgHf/Q=)
                          2: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: soxPBotfeGZJQtYFANg/AIsqymj558YBgTRf2OttWoQ=)
                          3: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: FmrrPxT3AQS1QsODrOl0Mag5fJkdo8yw7npJe5EvI48=)
                          4: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: XaSGJdVmQFwnCd+b3KdpqRusxazGj+qlh/KndRTEPfA=)
                          5: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: oPyKzL4O0xlhZZ92P0pzMtzovY+UYDC46Jkmm8P2idY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Nov  4 21:11:04 2025 GMT
            Not After : Nov 11 21:11:04 2025 GMT
        Subject: CN=690a6be8-7d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:1c:77:d7:17:c5:fb:43:73:39:1c:9e:94:
                    db:05:85:77:e6:8b:80:77:cb:eb:83:be:94:e7:b0:
                    d1:29:92:30:b8:f1:20:42:bf:ba:9b:9c:a4:05:b4:
                    ac:6b:65:db:a2:02:a9:75:59:3a:9e:e9:c1:90:54:
                    eb:88:33:27:4c:3c:1f:3f:04:83:b1:59:7f:16:fc:
                    e5:8f:e5:2d:f5:07:d3:27:03:59:d3:66:24:8b:a0:
                    df:57:64:25:d5:83:10:2a:6c:5b:38:9c:12:4d:59:
                    ef:c0:71:0c:66:78:96:b0:ee:04:bc:30:9d:32:c8:
                    d9:99:25:02:6e:5e:d0:65:d3:10:d8:c6:e7:ca:b1:
                    33:3d:f4:35:a3:47:ba:96:08:4b:5e:68:04:01:3b:
                    1b:cb:12:88:62:d0:e4:20:0f:67:08:69:83:b3:66:
                    87:67:6c:78:b8:1a:0b:be:06:a4:71:07:cd:5a:10:
                    96:1f:21:49:14:9c:b5:f8:20:02:37:49:a0:12:e1:
                    e2:cb:27:3a:56:15:ee:a5:1a:eb:f3:e1:67:f6:49:
                    f1:15:0c:e9:a7:ec:49:5d:ca:2e:59:63:94:48:6d:
                    d6:7f:0d:8a:1c:34:51:90:d1:fb:ce:d5:34:f1:4f:
                    70:cc:80:d0:e1:14:8b:ac:10:0d:64:d3:32:e3:bd:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:1D:14:46:72:4C:42:69:FD:2E:84:38:84:A2:87:D2:9A:19:3A
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:50:fe:a1:89:d1:78:5f:a8:63:e0:95:c3:2d:b1:17:f3:bf:
         96:d3:78:06:a9:a2:12:63:a4:be:c7:9a:3e:98:13:e3:72:26:
         a1:ce:fb:ff:89:fb:a7:72:a0:e7:95:c3:6a:84:44:10:91:d1:
         0f:0c:65:38:0f:a5:bc:ae:3e:d1:ef:d4:06:53:e2:5e:18:f0:
         d5:83:57:ed:6f:4e:0f:17:0e:7e:b1:b1:16:06:1b:2c:b0:d9:
         2d:3f:2e:4f:1f:4b:27:26:29:8a:52:89:39:82:be:de:53:95:
         18:a7:6e:81:cb:ba:38:71:34:00:ae:21:77:ad:60:ae:0f:97:
         46:04:36:2a:22:da:0c:24:c1:3c:22:77:94:d2:ce:fe:fa:e1:
         3a:14:03:8a:ef:09:08:c8:7a:63:b2:04:c9:8f:82:78:86:db:
         00:d4:3f:71:9b:6f:b3:ec:38:74:35:8c:66:3f:8e:0b:29:d9:
         a5:07:38:19:60:5c:87:d6:c1:be:9d:3f:90:96:b2:a2:9f:f2:
         2e:e8:73:58:da:9b:19:79:1d:2a:41:d3:68:70:b7:a2:c1:f8:
         2a:bd:93:fe:8c:51:1a:8f:b1:f1:10:24:8d:58:aa:cc:2d:44:
         e0:c4:4b:81:33:8f:f5:fe:71:d7:e3:1b:8f:29:96:c4:8d:01:
         1d:bf:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:43 2025 by rpki-client