Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
File:                     b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json)
Hash identifier:          ZHNTjaRwrA5o1s+itqk93iwe7/AcUCvytDfIxY43zWE=
Subject key identifier:   D9:75:B5:EC:52:9E:1E:68:B3:39:8C:B9:80:63:45:90:BE:59:C5:DA
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Certificate issuer:       /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial:       08BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
Manifest number:          089E
Signing time:             Fri 24 Oct 2025 21:25:36 +0000
Manifest this update:     Fri 24 Oct 2025 21:25:36 +0000
Manifest next update:     Fri 31 Oct 2025 21:25:36 +0000
Files and hashes:         1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: AqffR/qzG9Xr/CptYLAmcXCXjMUX9KetamkVeHXIMpg=)
                          2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: qCV1CGEKKAAFyjh2aY/pv/O3Ul0oy0qB9pbyOTWaQu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
                          rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Oct 2025 21:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
        Validity
            Not Before: Oct 24 21:25:36 2025 GMT
            Not After : Oct 31 21:25:36 2025 GMT
        Subject: CN=68fbeed0-443d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:40:75:84:66:ed:63:e2:82:3a:31:e8:2f:
                    ef:b1:f3:2a:dd:41:c1:15:0a:de:8d:5f:f3:e5:86:
                    d9:2a:a3:ef:4f:ae:ff:3d:46:47:f0:61:6e:6e:8d:
                    18:3f:a6:70:9f:f5:4e:2a:9c:92:ef:bb:00:fb:9e:
                    c6:60:d0:af:23:37:06:f0:98:53:67:10:0c:97:0f:
                    42:2c:d8:88:29:aa:e7:58:51:b2:2e:2f:11:d5:02:
                    19:97:80:a5:96:60:84:0b:83:c8:7f:32:8f:fb:40:
                    85:7b:93:43:23:1a:73:67:78:1f:e3:2b:df:8e:9f:
                    37:26:9b:6e:07:07:a2:f9:e8:d5:b5:57:f7:2c:59:
                    06:c1:16:4a:7c:3b:63:50:ce:b3:fa:db:12:7c:7f:
                    b2:43:12:3f:fd:39:c2:16:b5:a7:d0:62:16:09:99:
                    76:d4:32:67:c7:20:25:47:e2:70:50:84:6c:81:97:
                    72:57:8a:9a:71:a2:19:17:64:fd:e7:9b:51:e2:7e:
                    f4:b9:52:4c:08:aa:6c:fc:37:3a:cd:a6:64:34:6a:
                    c7:bf:54:0d:67:56:ba:6f:98:55:9e:fd:9b:54:20:
                    75:bb:de:7b:83:d2:0a:44:5e:06:0d:d8:e2:64:5e:
                    bd:0b:8f:d5:6f:3b:b6:2f:94:fb:3d:66:b9:de:1e:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:75:B5:EC:52:9E:1E:68:B3:39:8C:B9:80:63:45:90:BE:59:C5:DA
            X509v3 Authority Key Identifier:
                keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:69:57:74:d1:c9:22:f7:06:f9:31:b8:36:46:30:07:5f:54:
         0b:51:56:d1:fd:db:1e:59:f2:d8:97:f0:b4:e6:5d:bd:1c:67:
         c7:a6:7d:29:1a:c4:33:6b:ee:69:b5:d5:ab:fd:c8:76:97:cb:
         3c:2e:b7:06:13:e1:78:f3:9a:db:8b:98:19:1f:fa:79:d3:54:
         6d:68:ab:bd:57:a3:b4:c0:07:b6:6b:f4:61:7c:e5:84:14:88:
         b4:37:29:34:4e:b3:cd:63:41:63:44:15:5e:02:1f:bc:04:fb:
         fe:c9:8c:e3:0d:b2:b3:03:43:a3:67:90:44:2c:af:33:f8:22:
         2b:7a:35:31:9d:f0:7b:5d:e2:45:86:79:09:2a:8c:a4:01:33:
         18:fa:a5:7e:02:37:07:1e:b0:e0:8a:f7:1d:17:24:bc:d8:22:
         0b:d2:e2:d7:8c:de:3b:48:0c:65:2e:c1:1b:6f:49:d5:2c:26:
         c6:be:8d:9f:71:2c:02:a7:bf:05:2e:61:8c:b4:df:cc:58:65:
         3c:41:9d:47:4f:d7:07:4d:b7:52:be:46:1a:76:3d:b1:9a:2d:
         2d:56:13:4f:bd:59:d7:2f:5f:f0:ac:db:e3:9c:18:36:2d:de:
         ce:b0:6f:46:c8:56:b3:d0:78:57:b3:7f:64:c4:4c:bf:1a:18:
         08:8d:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:42:24 2025 by rpki-client