Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File:                     B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier:          6uHp5YMGQ7by1sUFLYATHr9pjb7HIHFHTadXXwlFsPk=
Subject key identifier:   37:AF:0C:08:37:6E:D2:EF:BF:FB:63:39:EF:F1:3A:E2:A2:1D:6D:02
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0C17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number:          0BF2
Signing time:             Sun 26 Oct 2025 19:18:45 +0000
Manifest this update:     Sun 26 Oct 2025 19:18:45 +0000
Manifest next update:     Sun 02 Nov 2025 19:18:45 +0000
Files and hashes:         1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: 4RqsC8M1zbwKl0+tpF070rVD0ZF/E3OFxrWMwY5Ke6s=)
                          2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: mByxm9I42Bs2d4gYmGlnX4gxjstMQucwv5VLhWttHFY=)
                          3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=)
                          4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=)
                          5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 19:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Oct 26 19:18:45 2025 GMT
            Not After : Nov  2 19:18:45 2025 GMT
        Subject: CN=68fe7415-3923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:cd:f4:27:d5:de:9c:21:7d:65:1f:7d:ee:
                    dd:89:02:2b:2a:93:59:f1:8b:2a:aa:12:d5:bc:89:
                    cc:6a:1a:83:0d:5f:62:ea:ee:1a:27:cc:aa:d5:f8:
                    29:bf:20:1e:90:db:9b:84:ce:25:dd:f9:ce:6d:3e:
                    ea:a0:66:b0:21:fd:a2:67:cf:e2:48:36:cb:cc:11:
                    89:c0:05:57:2f:06:d4:a2:7d:a6:c1:ca:9d:6a:f9:
                    17:c6:2e:b5:f4:7b:5a:f9:e1:fc:82:af:d2:0d:c0:
                    4c:f5:d3:67:90:ff:19:81:b3:c7:9d:cd:3d:c2:0b:
                    a2:56:5e:62:a7:0c:1a:e7:8c:bf:e2:92:8c:be:9b:
                    0a:fa:7a:e4:8a:20:99:76:78:09:0e:94:8d:14:cf:
                    b0:9c:91:d9:92:ea:eb:25:de:db:9b:44:dd:31:ce:
                    94:9d:ab:3d:c9:f1:24:a2:5b:ac:b3:f7:57:2a:ef:
                    e8:28:ce:62:88:48:b3:45:40:e8:d8:6b:6d:76:ef:
                    72:c1:f3:1e:83:9e:12:cd:f5:73:1c:0d:02:9a:e5:
                    c0:42:8e:f2:34:cb:57:b5:a2:61:27:3b:5e:04:7a:
                    75:49:a1:d2:8e:63:a3:c8:56:0e:7e:a6:36:13:bb:
                    1e:fd:49:67:76:3b:e7:2c:bb:13:e8:6a:53:44:78:
                    15:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AF:0C:08:37:6E:D2:EF:BF:FB:63:39:EF:F1:3A:E2:A2:1D:6D:02
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2c:d1:ea:ac:ef:6e:74:ba:71:e2:69:44:30:86:32:2e:85:
         2d:ba:cd:77:08:81:fe:c3:e4:ac:9d:5f:83:4c:85:23:de:5a:
         ba:6a:e6:46:91:e1:c8:05:08:26:b1:96:5f:6e:11:e1:2d:db:
         02:5e:29:0d:eb:7f:26:55:d5:99:45:87:00:ba:c6:fa:f8:7b:
         9b:4a:97:5a:dc:00:16:15:f0:89:e1:22:28:0c:08:e7:e7:a2:
         b8:9e:04:1f:c4:9a:e1:2f:ee:f3:19:07:26:b8:55:e9:72:16:
         38:85:b4:fc:ab:c3:5e:37:9a:bd:46:fa:a9:80:11:c7:06:25:
         db:a4:e5:be:dc:89:02:2b:95:92:72:41:70:69:d3:bd:ac:7d:
         a7:51:cd:62:8c:03:9c:9e:f9:35:20:54:12:2f:88:fd:f4:0c:
         28:07:f7:dd:5e:06:bc:c9:b1:34:0f:5a:0a:ac:28:bb:96:4f:
         b5:4f:f7:a8:ac:b1:67:62:c3:31:fa:c2:d9:fc:63:2c:86:e2:
         f8:4c:89:0e:05:3c:1d:62:19:dd:d5:ae:75:94:20:c8:f7:ea:
         ac:3b:4b:05:ac:de:ec:08:40:d3:f0:c9:f4:f8:d0:61:c3:5b:
         39:16:f8:5b:d6:3b:2e:18:56:48:21:a6:70:4a:36:76:cf:8a:
         4d:93:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:00:01 2025 by rpki-client