Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File:                     bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier:          etD0bL6FFFS+o79cnDan4VWO3tExWYmD7TucIjEYNSw=
Subject key identifier:   61:B9:6E:5E:A1:FA:13:02:73:96:D6:52:FA:83:53:15:53:55:93:E0
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer:       /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number:          0183
Signing time:             Wed 05 Nov 2025 03:50:16 +0000
Manifest this update:     Wed 05 Nov 2025 03:50:16 +0000
Manifest next update:     Wed 12 Nov 2025 03:50:16 +0000
Files and hashes:         1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: KJmUbCMG46utYWqyIUUaOLayOhUm6KyzMLC2VBPjF8U=)
                          2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: sGfgOeU/fHIH2HrB1IOWJi3rlZbzHtByfN0MLcFepBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
                          rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
        Validity
            Not Before: Nov  5 03:50:16 2025 GMT
            Not After : Nov 12 03:50:16 2025 GMT
        Subject: CN=690ac978-1ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:73:87:06:70:d1:56:42:29:a3:a8:e2:4c:
                    82:a7:82:f3:f9:b8:fc:04:c7:cd:6c:48:21:6c:14:
                    08:8f:cb:f8:b5:7d:30:7b:6f:2b:26:24:9e:8a:4d:
                    e1:60:c8:9f:8d:8b:8a:5d:77:01:65:ba:b4:3d:d6:
                    f0:f6:06:fb:98:a2:bf:bf:f8:0a:70:03:78:39:14:
                    b0:66:77:6e:e4:41:84:6e:e3:1d:a4:14:7f:57:98:
                    49:76:5d:0f:06:5b:42:af:d6:c1:56:af:f7:15:cc:
                    18:75:50:2b:0a:cc:23:2c:bf:30:f2:80:6d:e3:2c:
                    fd:e2:e1:8d:8f:20:81:09:38:6a:d5:65:d8:84:09:
                    15:3c:bd:7d:91:89:cd:ff:8a:b1:d0:a6:ff:76:b9:
                    de:90:0e:b8:0b:6d:c6:1d:93:d1:9b:91:f7:df:88:
                    05:70:46:e6:e6:da:a7:3f:6c:b7:46:ba:05:ba:9a:
                    2b:76:22:c5:73:53:48:cf:a0:f8:5b:3d:61:de:ce:
                    7c:7c:55:f1:e7:19:7a:d3:29:8d:aa:e9:fa:3c:d4:
                    ec:2a:8c:20:e0:6d:87:09:c9:8f:7c:0c:8d:1d:66:
                    73:ec:c6:cd:b4:92:02:26:50:95:e4:d0:c3:ce:f8:
                    92:3b:a3:ee:12:95:74:8a:d7:79:5c:69:f1:c1:51:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B9:6E:5E:A1:FA:13:02:73:96:D6:52:FA:83:53:15:53:55:93:E0
            X509v3 Authority Key Identifier:
                keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:80:a9:ff:5a:96:cc:67:7d:c2:c5:7e:a7:2b:89:d5:ed:
         86:b6:f1:85:9b:53:b9:96:69:1e:1f:df:f6:e5:5f:23:91:d9:
         7a:ed:09:83:59:12:a8:d9:a6:0e:fa:11:55:c6:20:8d:dc:bc:
         c1:9b:49:35:33:94:19:01:0c:5c:6b:38:f9:45:9f:13:96:c4:
         44:0b:da:4b:f5:78:76:4a:8a:28:88:79:8d:d4:c5:b4:26:57:
         cd:ca:a9:87:d8:ec:be:53:15:54:fb:2c:c9:42:30:ab:55:e9:
         c8:a5:9a:e0:e6:5b:55:7f:b3:91:fd:21:bc:15:ed:ac:15:f5:
         24:d9:e1:93:ca:2b:67:39:a1:02:e1:ae:8a:7b:0a:d4:02:9c:
         3f:b3:ea:c0:e0:ce:5b:25:41:bd:f1:33:90:ae:dc:7e:14:4e:
         a9:b2:3d:4c:2b:ce:20:a0:38:33:c5:72:43:e3:e8:5c:cd:a1:
         37:41:87:dd:5f:f1:37:f4:16:9d:2a:ec:6f:9b:4e:01:d3:83:
         4e:7a:68:92:76:c2:9e:ae:9d:03:b9:33:6c:b5:a7:90:e9:e4:
         76:82:c1:49:c5:e8:28:f4:4a:fb:38:94:6f:00:09:cf:0e:2b:
         f3:cd:84:4c:00:63:f8:1d:53:98:29:e8:5e:10:78:00:82:8b:
         33:53:11:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBFOTgxMTAvBgNVBAUTKDZDRTJEN0QwRDk1OTgwRDc0M0NBRDQ4NDg2OTg0OERC
QTEyNUMyOUIwHhcNMjUxMTA1MDM1MDE2WhcNMjUxMTEyMDM1MDE2WjAYMRYwFAYD
VQQDEw02OTBhYzk3OC0xZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwuVzhwZw0VZCKaOo4kyCp4Lz+bj8BMfNbEghbBQIj8v4tX0we28rJiSeik3h
YMifjYuKXXcBZbq0Pdbw9gb7mKK/v/gKcAN4ORSwZndu5EGEbuMdpBR/V5hJdl0P
BltCr9bBVq/3FcwYdVArCswjLL8w8oBt4yz94uGNjyCBCThq1WXYhAkVPL19kYnN
/4qx0Kb/drnekA64C23GHZPRm5H334gFcEbm5tqnP2y3RroFupordiLFc1NIz6D4
Wz1h3s58fFXx5xl60ymNqun6PNTsKowg4G2HCcmPfAyNHWZz7MbNtJICJlCV5NDD
zviSO6PuEpV0itd5XGnxwVEjbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGG5bl6h
+hMCc5bWUvqDUxVTVZPgMB8GA1UdIwQYMBaAFGzi19DZWYDXQ8rUhIaYSNuhJcKb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEU5OC83NEZENUU4MjZF
NTMxMUVFOUI5MTdFNzlDNEY5QUUwMi9iT0xYME5sWmdOZER5dFNFaHBoSTI2RWx3
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPTFgwTmxaZ05kRHl0U0VocGhJMjZFbHdwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEU5OC83NEZENUU4MjZFNTMxMUVFOUI5MTdFNzlDNEY5QUUwMi9iT0xYME5sWmdO
ZER5dFNFaHBoSTI2RWx3cHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBt04Cp/1qWzGd9wsV+pyuJ1e2GtvGFm1O5lmkeH9/25V8jkdl67QmD
WRKo2aYO+hFVxiCN3LzBm0k1M5QZAQxcazj5RZ8TlsREC9pL9Xh2SoooiHmN1MW0
JlfNyqmH2Oy+UxVU+yzJQjCrVenIpZrg5ltVf7OR/SG8Fe2sFfUk2eGTyitnOaEC
4a6KewrUApw/s+rA4M5bJUG98TOQrtx+FE6psj1MK84goDgzxXJD4+hczaE3QYfd
X/E39BadKuxvm04B04NOemiSdsKerp0DuTNstaeQ6eR2gsFJxego9Er7OJRvAAnP
DivzzYRMAGP4HVOYKeheEHgAgoszUxEb
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:55:07 2025 by rpki-client