Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
File:                     BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json)
Hash identifier:          SVHHXDj2q8lQ6pQgZTJCBXladKsgQr0Q1ux55jRyrM4=
Subject key identifier:   B8:CB:B9:31:3C:96:4E:A3:E7:26:EA:7D:C8:65:D0:47:12:CB:61:E0
Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
Certificate issuer:       /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
Manifest number:          068E
Signing time:             Tue 04 Nov 2025 22:28:26 +0000
Manifest this update:     Tue 04 Nov 2025 22:28:26 +0000
Manifest next update:     Tue 11 Nov 2025 22:28:26 +0000
Files and hashes:         1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: dtChAmraQ9ENf1HJVWC2QUCLsvRfdd0k9qdh9YxYwsE=)
                          2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: aGdwS0nqIDPQmrDed9aL2d/6MVOmtEOC5VWnxIsYspE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
                          rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
        Validity
            Not Before: Nov  4 22:28:26 2025 GMT
            Not After : Nov 11 22:28:26 2025 GMT
        Subject: CN=690a7e0a-60d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:26:5b:84:dd:cd:e5:40:4c:55:07:5a:78:e6:
                    79:d2:33:5c:b7:fb:54:d9:09:07:e5:3b:47:c1:9a:
                    18:0d:d3:f0:1e:cd:fa:f8:e9:f9:0d:a0:05:95:50:
                    70:6e:87:60:0d:fd:26:18:e8:cd:08:88:88:5d:e7:
                    cb:13:50:f9:dd:0a:12:b3:78:57:d2:7f:d2:ee:9c:
                    87:3d:89:28:99:04:47:bd:e6:e6:d2:4b:5d:4d:16:
                    d8:c5:25:23:99:27:18:ee:6b:c7:91:e8:f5:06:00:
                    8d:7e:9a:57:b2:3b:e0:da:70:d3:08:d7:04:a1:c3:
                    e0:e0:55:0e:6c:22:0c:69:0b:e3:e9:04:1c:d0:f6:
                    c6:0b:b9:e5:05:49:04:18:ff:af:a3:09:ec:07:53:
                    93:76:bb:87:2c:60:a8:1c:91:5a:b5:d2:7b:e3:4a:
                    d2:d4:73:51:b7:49:04:fd:d2:78:4b:87:07:3d:c2:
                    c6:59:f5:f1:0c:fe:46:95:df:0c:f8:34:6d:5c:38:
                    d5:49:a4:9d:fa:22:db:08:92:de:25:33:aa:1e:5c:
                    56:dd:f7:1b:ac:6d:94:fd:23:7d:54:a3:91:36:1e:
                    59:d6:9b:c8:18:a2:39:7d:78:90:a4:8a:c2:5e:ec:
                    dd:31:bc:0f:09:a1:b4:17:92:b8:f2:36:db:13:25:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CB:B9:31:3C:96:4E:A3:E7:26:EA:7D:C8:65:D0:47:12:CB:61:E0
            X509v3 Authority Key Identifier:
                keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:ba:2a:b0:09:3a:5a:40:59:f4:44:f6:b3:07:1c:5c:6e:
         e0:dc:d7:e1:de:90:6e:b8:6c:09:19:91:3a:c6:98:30:77:49:
         21:63:a2:6d:ca:17:a8:9a:8a:30:fc:27:67:7e:6e:05:63:18:
         e9:6a:8f:84:e2:ec:ac:e3:33:32:76:93:9d:98:47:c4:15:3f:
         25:b0:4a:62:6a:1e:34:d0:cc:c4:43:6f:a5:89:b2:a4:d3:86:
         21:d1:66:f7:4a:ae:95:9c:c7:8d:73:b5:0c:18:ff:a0:ce:32:
         f1:73:ba:ed:13:e6:06:b9:cd:91:b9:f9:9c:d0:8e:87:5c:e8:
         ca:bd:03:17:fe:25:2f:d9:2a:63:ec:9e:25:e7:37:15:11:bc:
         71:b3:21:de:bc:42:fb:29:17:b0:86:55:ce:dd:6f:ac:1f:d0:
         b8:af:6c:cc:4d:99:de:dc:27:0d:f4:fb:c4:6a:5a:6f:42:5c:
         bb:57:c1:d1:b6:4f:44:0f:06:b8:ce:a7:d6:d5:61:6f:eb:d7:
         95:04:17:cd:b1:92:84:cc:2c:05:61:51:16:0c:c3:59:1f:eb:
         15:6f:fe:a6:44:ee:c3:98:62:3c:96:5d:5f:5f:d2:3a:94:51:
         fe:35:66:3d:16:08:df:77:49:2a:ac:be:b9:73:76:f7:2f:9e:
         f1:fa:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:20 2025 by rpki-client