Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File:                     BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier:          1u5+1ykRZYDmjNa0vI1AMiyEA+j4JmHaWWhOqmBxUg8=
Subject key identifier:   56:F4:4A:F3:A2:3C:4E:3A:66:86:87:E2:49:E3:BC:2D:58:A9:59:85
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       0662
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number:          0656
Signing time:             Tue 16 Sep 2025 22:59:54 +0000
Manifest this update:     Tue 16 Sep 2025 22:59:54 +0000
Manifest next update:     Tue 23 Sep 2025 22:59:54 +0000
Files and hashes:         1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: /rteFym7V87Q/qUurPVScOrQoG6SxvTz5GX0kHbMS1U=)
                          2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=)
                          3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 22:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Sep 16 22:59:54 2025 GMT
            Not After : Sep 23 22:59:54 2025 GMT
        Subject: CN=68c9ebea-b1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:54:05:ea:19:e4:32:3a:87:48:d9:22:12:
                    1e:8c:a6:fb:c0:9a:1c:15:23:ff:b8:20:0a:67:34:
                    a5:c7:5e:2d:51:c4:1a:b2:bd:1e:8f:3a:c7:ec:9b:
                    8c:91:99:3c:42:51:89:a4:a5:de:ab:f2:24:c9:71:
                    bd:b1:df:24:2c:97:55:94:fd:8b:aa:51:65:49:8b:
                    0d:6c:46:f3:b8:d1:2f:91:9e:7f:3f:12:68:c0:f0:
                    df:5b:6b:0a:00:8c:68:77:0a:68:74:be:ed:62:88:
                    fe:1a:f8:ad:94:f6:71:83:97:36:13:f5:06:2b:89:
                    a6:fb:db:3e:69:69:54:b0:24:c4:46:75:8b:ff:22:
                    5f:41:f6:53:c3:4e:bc:d7:21:85:33:cd:7e:ed:ec:
                    05:86:a2:3c:c9:71:8f:a8:46:26:ad:ac:9e:7f:cd:
                    f4:5e:ec:d2:60:e4:c2:e7:b3:df:26:4f:4a:c9:82:
                    7f:9c:3d:d4:96:0b:85:2f:a6:a2:02:84:92:b0:8a:
                    bc:59:15:9c:fa:16:f3:e6:26:27:0c:8b:93:9f:56:
                    5d:5d:ad:df:6a:55:cb:1e:71:31:0e:31:f7:19:ef:
                    94:59:56:09:ed:72:92:ad:70:c1:86:4b:ae:6a:86:
                    e6:4c:41:2a:2f:4d:c3:85:79:a1:12:bf:ea:4b:a3:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:4A:F3:A2:3C:4E:3A:66:86:87:E2:49:E3:BC:2D:58:A9:59:85
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e3:9b:61:12:4d:36:e7:7a:65:0a:96:67:48:c5:b2:3f:10:
         c2:96:b1:35:c0:87:70:bc:ed:9e:06:86:ab:0d:97:37:da:be:
         df:21:1d:00:57:0a:5e:4c:8e:c9:1b:43:f4:4f:ea:35:67:8b:
         91:91:d4:f8:72:a1:5d:75:28:20:5c:68:48:c0:9c:a4:12:7b:
         09:0d:e4:3d:6c:16:d4:16:8e:40:4f:58:38:1d:25:e3:c5:d0:
         38:0a:59:39:ea:31:aa:db:a6:f6:45:6a:f1:96:b9:bc:f0:d8:
         ea:13:1d:f3:4f:63:8d:49:fd:16:78:f4:64:5d:6d:80:19:02:
         be:42:20:de:d0:4f:c6:f7:d1:4a:ad:21:43:a9:2b:36:33:1a:
         ea:cd:cb:ed:85:e3:d3:7f:af:8e:b0:a2:55:ad:be:4a:7e:ea:
         6d:d0:92:db:47:9b:93:78:93:18:ae:c3:99:b2:49:df:a7:e5:
         6b:71:86:6b:53:0b:9e:d3:c9:1b:88:8b:cc:42:03:69:c1:8b:
         d5:f7:6f:88:83:64:86:9d:41:56:8a:96:75:5b:f7:d1:34:25:
         06:b4:24:97:ef:85:9f:2b:8d:15:0d:14:ee:66:ec:6d:c2:a3:
         10:80:f2:3f:27:04:e0:2b:09:57:13:96:06:77:1a:9a:33:49:
         c8:ec:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:26:40 2025 by rpki-client