Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
File:                     Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json)
Hash identifier:          m4+7TjO2zoqc2SUvAOQ1srNAfbg7tHlFHs3aA7O3evE=
Subject key identifier:   6A:00:FA:43:55:AA:D1:08:7E:9F:59:5A:22:BD:8F:BD:DA:8D:40:63
Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E
Certificate issuer:       /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
Manifest number:          89
Signing time:             Wed 05 Nov 2025 06:48:06 +0000
Manifest this update:     Wed 05 Nov 2025 06:48:06 +0000
Manifest next update:     Wed 12 Nov 2025 06:48:06 +0000
Files and hashes:         1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: vpUnRhdMnasNG2z2PW1CIpEyMLBHAOYVLDASinYYTqk=)
                          2: 8291E388EA0811EFB385192AC4F9AE02.roa (hash: Ca2pEWIV/EJ5w4q8uyfY/09SxRF8GtoaKpWxctigiRA=)
                          3: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: oTDfgY49fmT+y8+2GJaPDtK7EdeEE+LjLlZzrGykmgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl
                          rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E
        Validity
            Not Before: Nov  5 06:48:06 2025 GMT
            Not After : Nov 12 06:48:06 2025 GMT
        Subject: CN=690af326-f372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:10:86:c0:33:96:92:3f:90:ce:39:ae:28:
                    2d:90:cc:2b:db:87:d5:33:ed:97:8a:89:91:4c:7a:
                    34:e9:c0:9c:e4:30:97:aa:99:90:da:98:ec:ad:e0:
                    6d:7b:94:92:70:bf:f5:73:0d:eb:fa:96:73:ba:e9:
                    af:2a:a7:9d:e6:41:d8:59:f2:4b:3c:14:cf:06:02:
                    45:a2:f1:f9:8e:ec:67:0e:7a:b8:a3:f1:b6:b8:4f:
                    61:51:2c:76:63:2a:f2:1f:9c:69:c3:1a:e5:19:c5:
                    35:05:bd:a7:70:a4:97:31:ef:f5:c3:08:3c:3e:9a:
                    e8:23:df:e4:02:e5:76:01:3d:be:1a:b6:ba:22:6c:
                    7a:43:57:21:8d:60:6d:d2:37:ea:e2:c1:8b:cd:27:
                    e0:31:1e:23:85:f8:95:d8:34:45:84:b7:3d:a0:23:
                    fd:34:49:eb:00:a8:91:65:e7:a4:be:9c:34:03:fb:
                    b3:86:69:15:27:64:e5:e4:7d:8d:b4:33:4b:5e:20:
                    bb:7d:6b:d9:5b:ce:18:34:17:cc:2e:17:5d:53:e9:
                    8a:fd:7c:6a:03:d0:e6:13:ba:63:3b:0d:32:21:24:
                    37:d7:b0:8d:0d:45:82:e7:5b:88:66:8d:66:69:1c:
                    bc:2b:e4:8d:37:13:68:65:07:32:3d:99:8f:ce:d2:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:00:FA:43:55:AA:D1:08:7E:9F:59:5A:22:BD:8F:BD:DA:8D:40:63
            X509v3 Authority Key Identifier:
                keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3c:cd:de:21:aa:c6:88:2c:96:9d:f6:da:0f:5b:91:74:62:
         c6:9b:5b:6f:32:57:03:b6:dd:a5:02:b8:6a:b5:f0:44:9d:61:
         75:bc:de:1d:15:a1:ef:84:06:2c:4f:8f:c1:8e:74:bb:03:61:
         5f:51:e2:ab:02:a6:2c:14:52:d9:1e:98:93:1b:ba:3a:f1:d8:
         b1:a0:1f:37:cc:60:a0:ed:23:c5:4e:a5:8d:fa:90:31:6d:9c:
         d7:5f:a9:13:97:0f:76:0b:b7:80:3e:25:29:dd:c3:f5:1c:73:
         72:0e:f7:ca:a5:14:53:b9:48:56:37:13:4d:8f:67:fa:ba:59:
         db:e0:13:79:49:48:42:71:da:cb:74:f4:a1:1f:13:72:ae:62:
         8f:dc:28:dc:4b:02:0c:c0:04:31:ce:da:44:2a:99:ce:b4:7c:
         6f:f0:6b:f7:5e:d9:23:81:14:dd:e2:74:ad:79:4b:8c:a6:9c:
         da:94:20:ce:d4:19:e2:da:ba:40:d9:d5:71:6c:8a:67:ed:e1:
         ab:ff:10:ca:49:2d:25:33:9b:e6:84:62:dd:ca:81:bb:c9:c2:
         4c:bc:ae:d7:cf:76:1d:88:78:f2:b7:78:c4:fd:a4:38:9c:53:
         42:2e:b5:d6:46:45:00:4f:03:aa:e9:5a:de:6d:0a:c4:fd:cd:
         78:e6:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:10 2025 by rpki-client