Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File:                     967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier:          7Eh3ODylagWK/5O/emChuqGdyqOp7q/C4+Pb5BjAnVw=
Subject key identifier:   91:C1:C8:68:21:5F:AF:1E:83:DA:5B:D5:CF:69:4F:66:1F:69:B0:E4
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer:       /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number:          01BF
Signing time:             Wed 05 Nov 2025 03:10:24 +0000
Manifest this update:     Wed 05 Nov 2025 03:10:23 +0000
Manifest next update:     Wed 12 Nov 2025 03:10:23 +0000
Files and hashes:         1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: NSvEtX+nihACgi1FhGy5z6KRjH989q/IP4lw9jls+uE=)
                          2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: 9NHfjKZ92JKgdcrA4N9M5ns+wKMTAc0NwSsWt7LXuOk=)
                          3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=)
                          4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Tr1GoB0OJ0WV/koJHwH589Dyk++1e8UfDHIpzpMoMFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
        Validity
            Not Before: Nov  5 03:10:23 2025 GMT
            Not After : Nov 12 03:10:23 2025 GMT
        Subject: CN=690ac020-c0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d3:60:25:69:84:0d:01:ed:9a:d4:2c:c4:2e:
                    75:10:1d:0b:c1:af:28:56:ce:1d:75:c8:f0:b9:09:
                    e5:81:f9:71:a6:eb:38:6e:33:54:62:30:08:ee:1b:
                    c4:91:bb:75:5d:7d:95:ed:18:d1:9f:c7:72:15:48:
                    f2:52:07:0d:2a:04:fc:71:d6:52:cd:5f:58:c8:29:
                    ee:6f:01:99:1d:f1:79:77:bc:b2:ff:b8:14:6e:b3:
                    91:05:c6:f1:9f:2b:38:90:4e:9a:6a:99:fa:2b:fc:
                    9d:3b:56:51:d3:32:ce:de:54:5b:b4:a7:d7:de:8d:
                    33:7c:02:3a:a8:69:da:72:a2:b1:a2:58:06:38:f9:
                    31:d3:79:50:9c:f0:60:ee:af:34:f8:82:35:7e:69:
                    10:13:ce:11:c9:56:af:99:96:f8:c1:e4:69:9e:05:
                    7b:b6:43:7a:4f:86:48:64:51:12:2c:9d:b8:4e:ad:
                    e8:c7:c6:c3:1e:c9:ab:05:70:17:b1:78:59:04:74:
                    ac:01:22:4d:61:12:08:f1:ae:32:82:e4:c7:7d:e5:
                    84:e2:77:87:3e:5e:b1:07:81:44:5e:d6:a5:eb:5d:
                    9f:42:9f:6f:3f:08:0c:cd:bf:d9:9f:6e:c8:e3:8c:
                    1b:bb:59:f9:c1:12:b9:a4:b7:de:34:f7:94:d7:a1:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C1:C8:68:21:5F:AF:1E:83:DA:5B:D5:CF:69:4F:66:1F:69:B0:E4
            X509v3 Authority Key Identifier:
                keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:16:1f:a3:c6:bd:c6:5c:c4:1b:7a:6d:f8:72:5a:7e:b9:90:
         b1:1e:bd:34:97:cd:19:8a:d4:08:ee:ad:f4:59:de:82:94:9a:
         02:00:87:32:7a:2c:8f:ca:dc:77:a6:05:fc:b8:ec:69:1a:e9:
         f6:58:79:a6:bd:b6:8d:6f:bd:1c:cc:a8:1c:fc:f2:c0:b4:9f:
         29:0a:00:50:9a:9e:95:3e:60:35:dd:d1:36:fa:cf:70:bd:87:
         0d:86:69:bc:e5:10:e6:ea:b2:98:12:51:8a:73:62:a8:fc:68:
         d0:35:93:fc:6d:88:ec:f9:37:c3:2f:eb:a2:ce:da:3d:7d:2a:
         a7:4e:a0:5a:a4:5f:b6:b4:5e:02:00:99:0f:32:97:5b:9d:35:
         3c:b9:5c:35:9b:a0:08:7f:81:ca:ad:cb:48:4d:92:6d:3a:e8:
         ab:c2:1b:58:93:0b:cb:fe:bc:47:87:c9:59:74:89:19:2c:1f:
         cd:2a:53:af:a8:58:35:19:86:01:a0:22:69:e2:11:b3:4b:28:
         3a:f8:f2:ea:2a:72:f6:8f:55:68:c8:9d:98:5d:aa:42:0a:aa:
         47:bc:a6:2c:e9:08:1d:ac:55:8e:1f:43:99:e1:4f:cb:ca:05:
         84:73:f4:31:e7:6d:3c:e6:bc:b9:bd:fb:45:ca:06:de:ac:70:
         48:57:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:30 2025 by rpki-client