Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
File:                     B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json)
Hash identifier:          Y8QKYE6wZia90ihBGokbVVddjrZq12irEvBTXVzcp/E=
Subject key identifier:   51:EF:28:23:05:F5:54:5D:8A:30:71:52:53:54:7D:E2:A6:50:4C:7D
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Certificate issuer:       /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial:       091C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
Manifest number:          08FE
Signing time:             Sun 26 Oct 2025 20:59:22 +0000
Manifest this update:     Sun 26 Oct 2025 20:59:21 +0000
Manifest next update:     Sun 02 Nov 2025 20:59:21 +0000
Files and hashes:         1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: ILYMVcYfpn7bKLGo0pq0dtkHXxS8rIpKmdDbFMPYowc=)
                          2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: 9SsfPFEpNqBFgCdLY2IklkloHnAbZJJJLXhyoF85vCY=)
                          3: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: mrT/TQVc5LCUrmX9VtkN0plkNrICogqBYArk6etw7Y8=)
                          4: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: Leqb5XfRofLJ3cqjCHqmyKArkM3Rck1Tf0kybehmhSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
                          rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 20:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332 (0x91c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
        Validity
            Not Before: Oct 26 20:59:21 2025 GMT
            Not After : Nov  2 20:59:21 2025 GMT
        Subject: CN=68fe8ba9-23fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:e1:13:83:c1:bf:23:1d:5d:b6:aa:82:85:
                    4a:5e:c2:e0:dc:6b:8c:99:cb:47:a6:94:bb:fb:4c:
                    eb:c0:53:af:97:23:7e:4f:29:94:fc:de:2f:65:a8:
                    d8:0f:53:4f:00:af:e8:19:15:b5:3f:1c:d0:9a:a6:
                    0e:0d:75:75:56:2f:32:99:93:cf:8d:7c:db:33:bb:
                    92:2c:07:bd:39:37:09:c7:11:8b:05:5d:33:71:b6:
                    cd:4c:a7:b3:d8:59:74:bd:62:0b:5d:f3:1e:f8:78:
                    a2:fd:85:28:c1:93:67:1d:94:01:33:fd:c2:8e:a7:
                    19:d0:4a:69:ec:a0:f4:78:d7:ff:5c:5c:f5:a4:a2:
                    03:bc:dc:c9:c8:2d:1d:0c:d0:40:22:ee:1d:9f:dc:
                    ff:a0:c9:b9:7e:94:7a:32:ca:03:55:98:3a:c6:c8:
                    e1:b9:69:c2:25:51:c6:34:f3:b9:b1:3c:b1:2a:99:
                    62:38:86:cd:20:80:2e:a1:df:ee:b7:33:5a:d6:d5:
                    0f:f2:12:df:63:81:81:f0:54:04:ee:8d:8a:51:ac:
                    b6:e6:8d:cc:15:cf:53:5c:f4:50:ac:1d:88:a8:65:
                    51:1c:f4:3c:a9:c5:64:10:77:a2:83:9b:f9:5c:0e:
                    d8:87:bc:34:38:cd:38:a7:03:f7:5c:de:e8:ea:62:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EF:28:23:05:F5:54:5D:8A:30:71:52:53:54:7D:E2:A6:50:4C:7D
            X509v3 Authority Key Identifier:
                keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3b:bd:7b:d7:12:54:77:31:f7:c6:2e:9e:f6:b1:46:fd:e2:
         72:36:67:ea:5a:2c:dd:22:3e:cc:ab:11:cc:c6:94:47:ac:ae:
         c9:fd:8c:f5:4e:fd:05:b8:38:28:80:59:4d:fd:56:59:d2:b6:
         9d:a6:fd:a9:8a:1d:51:9d:b9:4e:39:2b:06:40:ce:56:b3:35:
         e2:aa:53:d4:95:e8:71:37:3c:fd:66:25:38:5b:d2:2c:51:6f:
         26:ee:90:4a:46:77:ba:40:66:b4:4c:43:21:2b:71:47:e5:35:
         a7:13:80:91:78:d7:b8:4c:22:2d:9b:d3:4f:9d:ee:f4:5c:a2:
         8b:a7:68:22:f1:40:8c:23:b5:f5:36:cc:e0:03:99:da:2d:af:
         4f:b6:b7:f6:e6:a3:f4:9b:cc:37:db:7d:05:4d:d1:98:b3:fe:
         a3:d8:56:ef:e5:ee:30:95:5c:6c:7c:64:73:84:be:92:63:c7:
         d8:91:09:ee:62:2f:7b:12:4f:de:8c:78:9d:c4:e2:a4:59:0c:
         d5:29:35:59:6b:01:62:a2:17:63:c7:cf:44:44:df:f0:dc:86:
         16:17:49:95:eb:3b:c3:c0:aa:0d:60:c2:8e:a2:90:aa:02:0c:
         8e:13:5e:eb:16:32:cf:65:3d:01:00:b4:39:9c:ec:63:2a:eb:
         8b:84:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:00:51 2025 by rpki-client