Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
File:                     BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json)
Hash identifier:          upyVv05yiDm1r/I7Ke991ZvabbRa2FIUSGEHCs7YopE=
Subject key identifier:   0D:2D:C8:A9:63:66:7E:D4:6B:8D:CE:E5:D7:26:41:B4:94:B9:D9:5E
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
Manifest number:          C1
Signing time:             Mon 03 Nov 2025 06:01:02 +0000
Manifest this update:     Mon 03 Nov 2025 06:01:01 +0000
Manifest next update:     Mon 10 Nov 2025 06:01:01 +0000
Files and hashes:         1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: ma2HbFUeJRwnPun6ZxNIEjwnIALrpHbFcJhplbF/26c=)
                          2: 0576696C889311F0B21CA526C4F9AE02.roa (hash: 5eG8sDChja1gXmJsueTdz5dQwV5fJE7Ln4KJ9zejKk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Nov  3 06:01:01 2025 GMT
            Not After : Nov 10 06:01:01 2025 GMT
        Subject: CN=6908451e-94d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:de:96:54:41:25:d7:2e:58:6d:ba:88:98:
                    a0:6f:22:2e:34:bb:d0:00:dc:91:91:17:44:7d:c9:
                    57:95:f3:c8:3d:f3:fa:22:d0:1c:2b:f9:2f:2e:cd:
                    4c:e8:f1:4e:e2:56:5c:35:99:3a:12:45:2c:00:75:
                    ef:ff:d8:5b:57:65:d2:3d:fc:e2:f4:3e:f3:95:7c:
                    8d:df:a0:7a:15:80:30:94:ce:b5:4c:57:77:8a:d4:
                    31:a4:db:0a:ab:ac:07:3f:87:f4:ba:33:7c:d7:c1:
                    34:10:c3:7d:5b:30:4e:35:da:71:be:6b:44:c2:75:
                    1b:54:5f:5a:51:5c:6b:25:b5:9f:94:16:ef:5c:3b:
                    2b:b1:e2:da:b6:92:93:ec:5a:3a:69:4e:d2:57:d3:
                    33:b0:22:6f:5b:32:1e:d1:07:ea:18:20:cc:a7:ee:
                    3c:ee:9c:0d:07:32:34:74:4d:13:87:d0:08:9e:75:
                    d5:6b:cb:11:88:93:41:30:f1:8b:5a:35:a5:69:b9:
                    b9:ae:74:58:b0:3b:73:30:1c:b7:a7:0e:50:f3:bf:
                    89:9f:ee:72:0c:02:03:68:09:3a:26:b2:53:7c:d3:
                    7c:2a:b5:26:a0:46:85:24:fb:ec:f3:83:23:d7:3d:
                    36:89:66:8a:5c:8f:82:8f:91:6e:64:b9:be:77:24:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2D:C8:A9:63:66:7E:D4:6B:8D:CE:E5:D7:26:41:B4:94:B9:D9:5E
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:df:55:51:b5:c3:ae:64:2d:41:07:a5:0b:2e:e0:ef:c1:
         38:32:4a:8d:4b:23:9d:4a:ce:33:9c:c5:19:cc:50:fd:1a:29:
         bd:e5:b1:21:00:48:c1:1e:7d:c5:52:97:5c:4c:ce:3b:d8:3b:
         d8:04:b8:5e:57:00:ed:3f:ce:13:d0:42:a4:cc:fd:a2:f6:f8:
         75:1c:77:33:1e:de:45:fb:5f:55:f0:a5:17:02:e2:9c:60:17:
         f5:5b:b1:d5:1b:ac:cb:64:0b:c3:5f:c1:b2:8d:c5:d8:dd:da:
         08:f9:76:33:10:8e:7b:e9:5c:0b:d7:81:7f:a2:7f:d0:e4:2a:
         45:2e:7f:71:58:ad:2a:a3:06:5d:a8:e7:81:1b:85:ad:fd:fe:
         bd:55:14:4a:86:c8:69:33:a5:96:ea:94:92:b9:22:08:d5:b0:
         08:0b:2d:67:97:b5:03:08:ef:39:36:e9:ef:c2:3e:bb:15:9c:
         1c:73:5a:8a:4b:0a:b0:d9:8b:1c:a1:93:ed:40:04:b8:e9:13:
         40:f8:23:9f:c5:c8:39:50:93:5d:1a:2c:5c:4d:f0:c8:dd:28:
         41:45:a8:cd:a0:a1:34:ed:7f:ea:75:43:e5:ce:ed:a2:92:61:
         56:d8:42:fa:71:b5:ca:f6:34:34:dc:47:9f:9a:8a:13:ab:26:
         57:20:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 13:52:00 2025 by rpki-client