Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File:                     BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier:          3q/uMtJCF1l/he0C4J/PNfkin2X/MHUjgWmyZs5Fr48=
Subject key identifier:   16:A0:5C:F3:47:F4:46:96:0F:BE:E3:8C:3D:F0:F2:65:7C:A0:2C:82
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       0679
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number:          066D
Signing time:             Sun 02 Nov 2025 22:36:24 +0000
Manifest this update:     Sun 02 Nov 2025 22:36:23 +0000
Manifest next update:     Sun 09 Nov 2025 22:36:23 +0000
Files and hashes:         1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: LEhrjyQBHnyY5oqn2C64v35uhUuwI+E4rzmT6JCSyHU=)
                          2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=)
                          3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Nov  2 22:36:23 2025 GMT
            Not After : Nov  9 22:36:23 2025 GMT
        Subject: CN=6907dce8-30c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:08:11:50:0a:23:f0:81:01:d9:21:55:72:
                    7a:bd:b2:ef:eb:dd:e7:07:cc:93:16:97:eb:88:f9:
                    3a:a2:73:94:6b:ce:ce:7a:1c:fd:63:e7:41:d8:0e:
                    91:60:d6:52:c5:0b:7d:e9:4a:ff:68:33:ca:73:62:
                    fc:16:21:74:b2:36:ba:65:15:72:b6:fa:2c:8f:07:
                    dc:5f:21:8b:35:2b:2d:e6:77:62:32:60:c1:04:47:
                    ce:d2:ef:e3:d8:95:25:d5:f6:22:70:06:2f:6e:8b:
                    83:2c:98:00:df:e2:e8:21:17:c7:38:28:2d:c1:ee:
                    b4:91:fb:f8:9f:73:7a:69:67:ec:d3:16:fe:83:b6:
                    9d:2a:61:37:de:02:38:40:2a:57:26:70:71:75:71:
                    62:95:8b:af:44:40:80:3c:fa:ec:25:23:83:49:3c:
                    05:4d:57:06:03:5b:e9:d8:04:d0:22:36:15:11:6b:
                    01:bb:b5:2c:57:6f:cf:49:82:fb:0f:db:96:51:88:
                    99:44:62:3b:5b:bf:cb:af:59:3f:91:08:47:ea:a4:
                    83:43:13:8f:29:37:ea:27:8e:3b:c8:4d:a8:cb:0c:
                    37:0a:d7:30:3b:ab:e5:68:55:75:60:a9:f8:3d:79:
                    e9:5b:2d:02:51:cb:38:33:1a:03:1c:18:8e:45:08:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:5C:F3:47:F4:46:96:0F:BE:E3:8C:3D:F0:F2:65:7C:A0:2C:82
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:92:7b:92:ab:a2:5d:c9:4b:f1:f0:05:14:4a:d9:a1:6f:72:
         70:55:de:4c:ed:89:41:83:e8:62:b5:2d:a6:77:2e:8d:23:cd:
         57:5f:76:49:c1:aa:da:b9:bd:52:c1:c1:15:28:ea:8d:48:29:
         d2:5a:6a:50:56:4d:e6:bc:cc:e8:76:51:ba:55:e7:c6:bf:3f:
         c7:4d:4a:87:89:67:88:21:63:cf:18:c1:f0:df:7a:fe:d1:e7:
         9f:3d:2f:ce:de:cf:b0:99:23:a8:80:2f:a6:8e:05:93:ae:bf:
         2c:1b:12:3b:c6:1b:52:ed:64:b2:b2:a9:3d:b1:fd:9a:f2:c7:
         a0:8e:a1:e7:08:f6:fe:5e:6b:4e:c1:85:24:eb:98:17:1d:61:
         cd:2f:f0:32:cd:aa:e7:b9:1f:af:c4:d4:28:c2:88:d8:b9:d4:
         5e:19:7a:9e:68:6f:b8:b2:62:42:5d:84:82:eb:1a:e9:ea:e4:
         00:b6:85:37:1b:d3:19:2a:35:4c:d3:17:fb:5f:8f:8f:92:7f:
         9b:e9:bf:b4:e8:3b:ad:be:69:24:ce:f8:80:62:ff:09:c0:52:
         6f:e7:6a:fc:87:94:08:a6:64:ff:bd:24:68:19:95:61:b1:a4:
         ba:b9:c3:00:a7:11:76:86:8c:8e:af:40:20:08:9d:f3:09:99:
         e6:75:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:13 2025 by rpki-client