Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
File:                     bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json)
Hash identifier:          b9Rnim3HejuvuhsNyqcMdltr9BkW88TbKoBw4C/8uQs=
Subject key identifier:   CC:A3:D0:A1:8B:8D:96:4E:A9:3D:06:AA:6C:3D:72:CA:1E:28:25:CC
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Certificate issuer:       /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
Manifest number:          01BD
Signing time:             Mon 03 Nov 2025 03:04:43 +0000
Manifest this update:     Mon 03 Nov 2025 03:04:42 +0000
Manifest next update:     Mon 10 Nov 2025 03:04:42 +0000
Files and hashes:         1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: HzcikH+RsVKHaDPdFuhZ62kkDou/dqcweJaa80JdqdQ=)
                          2: 62A9A9AC240A11F0A6893962C4F9AE02.roa (hash: LvnWXi9L3u+fKG77QzH6WnEL9Cc/sS3Yn7M7dhZqrvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
                          rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
        Validity
            Not Before: Nov  3 03:04:42 2025 GMT
            Not After : Nov 10 03:04:42 2025 GMT
        Subject: CN=69081bca-56ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:ac:76:7e:32:6b:82:d3:87:a7:33:5f:b9:
                    ef:e9:2e:71:20:5a:59:ab:87:a0:00:57:a0:38:e7:
                    69:40:5a:be:65:80:53:f5:32:b9:17:25:33:ba:a5:
                    7f:d2:42:e7:5c:bf:03:62:ac:d7:2b:c2:04:02:71:
                    15:41:7c:7c:d9:0e:ce:e3:69:1b:b7:3e:f2:cb:5d:
                    26:9f:ec:94:fa:f9:48:0b:b3:c9:37:17:af:5f:7c:
                    4f:8e:9b:6d:77:fb:7e:cd:6c:b5:1e:84:b4:cd:d8:
                    0d:e9:a5:06:a7:c6:20:08:41:e9:04:da:e1:b8:b6:
                    43:0c:97:ef:e5:3a:d8:ab:ff:10:7f:7f:44:ae:23:
                    50:fa:20:e6:41:71:b2:45:b6:8f:ce:c3:00:8d:30:
                    70:37:b4:70:47:b2:4c:ed:76:05:61:dd:b3:b7:a8:
                    bc:91:6c:6a:6b:de:79:93:58:f6:02:ba:2f:ab:d5:
                    ec:b5:69:e2:dc:28:88:7b:a9:e8:e2:74:d7:61:56:
                    f7:41:5b:ca:59:6d:dc:84:bb:43:c5:26:6e:3a:53:
                    8c:8d:bf:10:7d:12:67:e2:01:a1:76:f6:e5:9e:9d:
                    8f:02:39:26:cf:82:1b:30:f3:39:d7:24:bd:8f:79:
                    39:8a:9a:4a:d1:ad:76:d8:89:98:ee:1f:c1:1c:03:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A3:D0:A1:8B:8D:96:4E:A9:3D:06:AA:6C:3D:72:CA:1E:28:25:CC
            X509v3 Authority Key Identifier:
                keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:26:34:7d:05:1a:7e:57:d2:3e:f7:f7:bc:7e:ad:94:4b:8e:
         d9:02:65:b9:c6:a5:83:20:29:e6:03:37:e9:ce:76:70:80:24:
         2b:73:1f:e9:23:05:28:6d:2a:f1:fd:57:03:2a:06:8c:66:3a:
         04:19:41:e8:5d:65:c0:18:57:5c:80:a8:b3:69:53:96:27:2a:
         fe:45:60:cf:20:6b:54:e3:48:3d:84:1d:b8:73:cc:8f:7e:05:
         1d:59:bb:b1:7d:a7:1a:fd:3a:c9:65:0c:b7:27:24:f2:76:b7:
         0e:52:12:59:01:67:39:54:50:ab:9d:09:ab:da:00:fd:94:58:
         1f:7e:2a:f8:6b:51:3a:be:3a:80:89:15:a3:35:a8:be:08:8f:
         e5:8c:4e:44:b5:7d:9c:3c:6d:3e:68:3e:25:f9:b4:7a:91:2e:
         f2:88:f8:ee:85:e7:f0:be:d7:19:01:3b:24:e5:fe:99:3d:4c:
         e0:c1:b9:36:cc:b3:d4:e7:75:2a:12:0b:48:86:8b:98:45:5e:
         ad:5a:b2:e1:b3:9d:45:a7:7a:19:a7:87:8e:80:e7:55:1e:51:
         e4:03:21:c4:f3:ca:b1:77:4f:a9:6c:e5:84:7d:bd:7b:ac:20:
         f8:4d:53:04:14:fe:6a:fb:79:af:13:2e:83:87:d2:eb:b8:d1:
         4f:f0:0f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:15 2025 by rpki-client