Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
File:                     M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json)
Hash identifier:          TGCUx71vpqvdAB+MKsPcWg21/xhQ7NiwcVpKFfcNAjc=
Subject key identifier:   E9:76:9C:B2:85:B7:9B:CF:4B:7A:AA:48:97:66:30:5F:54:46:B9:DF
Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
Certificate issuer:       /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
Certificate serial:       0BFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
Manifest number:          0BF5
Signing time:             Thu 18 Sep 2025 19:01:18 +0000
Manifest this update:     Thu 18 Sep 2025 19:01:18 +0000
Manifest next update:     Thu 25 Sep 2025 19:01:18 +0000
Files and hashes:         1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: gY0W2h/5C6tQp/dR0xIX5jQYOTARmQzBL0VslPo6JUA=)
                          2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: +qrgEBTBD6O+YCDXfGBARZb1S4AOeFFb2M6qsvbOdkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
                          rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3071 (0xbff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
        Validity
            Not Before: Sep 18 19:01:18 2025 GMT
            Not After : Sep 25 19:01:18 2025 GMT
        Subject: CN=68cc56fe-daf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:6d:3e:85:72:e4:8d:84:ea:be:e5:3e:b8:
                    5c:7b:e0:17:01:59:cc:2a:a0:f0:91:75:7b:27:33:
                    54:01:a3:a0:55:6a:bb:3e:49:d2:2f:97:a5:59:06:
                    a0:6e:3c:f4:d9:35:20:30:61:68:dd:cb:03:18:ad:
                    4b:0e:05:76:de:0a:a3:b3:c6:3f:b8:3a:e8:db:d1:
                    c9:8a:d4:3c:02:a8:78:08:e7:f5:af:c2:80:3b:f0:
                    09:00:ff:4d:9e:08:85:52:b5:ea:a9:3f:74:79:53:
                    67:0b:a8:59:67:d0:96:5a:71:99:12:e8:50:5d:d5:
                    39:5d:7a:0a:ac:ff:9a:7d:54:1b:ed:19:0c:3f:a7:
                    66:68:08:54:58:1d:31:be:4c:d9:5f:bc:0f:38:6a:
                    37:87:21:d2:c7:cd:ce:41:af:98:d5:6c:f6:0f:27:
                    d8:25:03:57:ce:cf:38:97:13:e6:5a:b1:12:4b:9c:
                    cd:69:1c:5e:19:18:6e:24:0b:36:ad:e4:54:e0:68:
                    dc:74:ea:be:02:55:38:6d:36:63:6f:62:5b:c8:5c:
                    90:b8:fc:03:6e:73:5e:3f:35:e4:fa:8d:07:02:2f:
                    e8:df:66:5b:80:8d:72:4f:f0:a3:bd:e3:bd:9c:08:
                    d4:bd:71:56:23:f0:3a:51:39:4f:b0:10:2d:c3:15:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:76:9C:B2:85:B7:9B:CF:4B:7A:AA:48:97:66:30:5F:54:46:B9:DF
            X509v3 Authority Key Identifier:
                keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:50:0f:9c:83:ff:79:80:70:89:dd:6e:0b:aa:82:c3:eb:fd:
         b2:77:b6:97:11:a8:ef:13:7d:51:ce:b4:78:46:0e:f5:99:79:
         51:0d:8f:9e:bc:5b:95:5c:b9:8d:6a:b2:48:46:42:c9:41:09:
         98:8c:3b:ef:02:9e:5c:c5:c7:b5:11:e3:c6:a4:c2:b9:e8:3c:
         ef:f7:48:08:c4:47:2b:13:e8:a7:79:09:48:91:90:bc:83:41:
         51:34:c4:d9:89:46:dc:4f:25:4c:08:9c:37:74:64:71:e5:bc:
         2a:52:fa:c8:ca:29:6a:d8:60:84:be:56:8d:4a:ed:00:cb:33:
         43:29:c7:d9:5d:cf:2e:2a:c4:be:fa:e3:15:85:34:65:13:50:
         4e:59:ef:c7:56:15:66:92:92:ba:cb:90:00:8b:9c:4d:e4:50:
         07:9d:4c:8d:8c:b7:4f:fa:27:c8:63:8f:41:6f:4a:71:bf:00:
         c8:f1:1c:8e:a3:e3:e3:a4:62:84:72:e3:e0:58:05:6e:3d:df:
         05:36:c4:86:a7:a1:13:fb:9f:09:6a:84:d1:40:77:d6:6e:8b:
         58:fc:8c:4a:06:61:48:cf:e9:91:24:57:18:6a:67:97:f3:65:
         04:5a:c1:a6:cb:67:79:98:c1:c6:5d:02:50:ef:15:5a:d3:98:
         12:1f:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:57:56 2025 by rpki-client