Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
File:                     RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json)
Hash identifier:          C+ZFICOQacu3Ebl6pHYEGRM/7+8qwZQ0HyocIWGZuTk=
Subject key identifier:   C8:D3:65:16:DF:41:BF:F2:A3:EB:2C:AD:C1:86:5F:12:BD:C2:8C:BE
Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
Certificate issuer:       /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
Manifest number:          B9
Signing time:             Wed 05 Nov 2025 06:10:07 +0000
Manifest this update:     Wed 05 Nov 2025 06:10:06 +0000
Manifest next update:     Wed 12 Nov 2025 06:10:06 +0000
Files and hashes:         1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: p6lt81oGVgtpqd5A3pAZ6xDnfQaW74cYYKsdwcahVGo=)
                          2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
        Validity
            Not Before: Nov  5 06:10:06 2025 GMT
            Not After : Nov 12 06:10:06 2025 GMT
        Subject: CN=690aea3f-d893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:5e:71:28:88:19:13:94:e4:18:f5:67:a4:
                    7e:7a:7f:a7:e7:9a:ce:2e:61:14:c5:f7:d4:a3:8f:
                    0c:f7:56:00:36:1d:cc:e9:20:df:c4:0f:5a:24:7c:
                    e9:d7:1e:0b:2e:1d:7d:59:06:83:09:97:2c:53:41:
                    fb:33:d5:5a:b2:80:e3:4a:94:90:0c:04:45:24:01:
                    1d:e5:9d:cb:e7:15:20:ba:cf:7c:dd:76:1f:78:f6:
                    4d:a5:90:79:57:99:e8:ff:b6:95:15:0e:9f:3e:a7:
                    18:92:e0:9e:c1:e6:fd:c4:7c:96:a6:34:8d:f7:92:
                    6d:f9:f2:d2:f8:1b:2b:24:94:5b:be:56:7a:18:ff:
                    2e:9d:a6:7a:62:a4:5e:c5:06:15:46:cc:c3:dd:94:
                    63:35:2a:e0:52:71:80:70:af:e1:fe:98:1b:97:ab:
                    c0:ae:7b:2e:e6:99:ac:ac:50:5f:d4:2f:61:24:90:
                    36:7e:d3:ea:1f:c1:35:db:c8:7d:e1:f5:94:38:1c:
                    d2:c6:17:da:9d:f4:8c:d9:d9:ef:d4:ee:08:47:5e:
                    d4:5c:3a:e6:6e:cf:eb:f9:e6:2d:d8:6f:57:52:e5:
                    ab:88:c3:2f:d8:4c:c6:30:3e:1f:f5:cc:5f:0a:f1:
                    68:01:84:40:90:47:2d:b2:c7:25:24:31:86:ae:37:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D3:65:16:DF:41:BF:F2:A3:EB:2C:AD:C1:86:5F:12:BD:C2:8C:BE
            X509v3 Authority Key Identifier:
                keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:65:0b:71:16:b0:f8:5a:e4:73:a3:a1:f2:93:16:53:1b:
         0e:11:91:1c:06:a2:51:a7:2e:39:04:b2:31:5d:7b:29:5d:d6:
         bf:40:8c:2b:84:27:6d:5d:e2:85:f9:ee:71:6c:da:05:75:b5:
         09:24:14:95:1e:57:37:17:b2:f2:57:2a:82:dc:d4:ab:76:aa:
         53:36:2e:af:07:e2:aa:80:4d:a4:f5:2b:ca:d7:bd:c1:48:d2:
         78:f7:da:ca:78:aa:7e:91:bd:e7:d7:01:90:49:f0:9b:34:9d:
         31:50:a2:40:e3:e8:69:01:18:b6:42:69:dd:13:8a:f6:d6:20:
         3f:19:e2:46:ca:c7:af:de:3d:4e:ff:4e:03:03:5d:5c:c9:b0:
         35:fd:3e:47:36:05:31:d8:a6:b7:ba:93:4d:3c:99:e2:4c:c3:
         d1:cd:9c:71:a2:25:c2:17:48:02:2d:a0:14:b9:ae:fc:c1:15:
         aa:76:27:03:45:16:7d:f4:88:95:71:ad:ae:db:94:27:e2:c3:
         41:86:df:05:3f:31:d6:ad:4c:ca:a2:58:90:fd:3e:58:36:1c:
         b6:63:93:22:3f:c2:c3:3d:c1:50:b0:95:ad:6e:85:82:26:90:
         c9:40:87:71:85:a1:2c:a1:cb:ee:6f:a2:72:f0:c8:2d:1b:db:
         1a:af:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:34:09 2025 by rpki-client