Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
File:                     bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json)
Hash identifier:          iHmAfCSvT1H+o+cS1G0igK+pxWcZPDjhq7DddDNqa9Q=
Subject key identifier:   93:B3:05:92:41:96:CA:B3:67:65:89:BB:D4:A2:4A:A0:97:B1:34:6E
Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71
Certificate issuer:       /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71
Certificate serial:       06B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
Manifest number:          06A4
Signing time:             Thu 18 Sep 2025 22:29:51 +0000
Manifest this update:     Thu 18 Sep 2025 22:29:51 +0000
Manifest next update:     Thu 25 Sep 2025 22:29:51 +0000
Files and hashes:         1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: FPgCwFWiJB/N7fsiOkpGKZF2XBciRa4D+lYyi5ba7sA=)
                          2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: //P4Dwc0yC8aNI6dL5grZWmAPuUGPAB2QMNisS1s91o=)
                          3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: sO+5ZUlz1ZfgN4m9jGacz4xKmgRg5xQ7WfaHnr5n8EY=)
                          4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: VneqGQNP18iG+RzoK9rzGT1v0y/EKMK88ucBZjMvCCE=)
                          5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: hmEwq8j3GlUgHO4QkFMDsLDsFyKYgDX+OadwrR+PhRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl
                          rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 22:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71
        Validity
            Not Before: Sep 18 22:29:51 2025 GMT
            Not After : Sep 25 22:29:51 2025 GMT
        Subject: CN=68cc87df-b356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dc:3d:4d:a1:2e:84:35:12:ad:03:e3:0b:c9:
                    c1:36:5d:96:5b:61:89:4a:97:0a:f2:f6:c9:cb:2c:
                    ae:db:85:50:0a:67:2d:20:e6:92:13:b5:8e:6a:56:
                    30:80:97:cc:7e:f6:67:c3:09:3b:b9:cb:8a:28:f0:
                    ef:76:f4:99:dc:8b:8a:2f:21:bb:46:e8:2d:08:7c:
                    64:41:44:c6:4d:23:6e:85:fc:b8:19:10:77:aa:46:
                    0c:9b:0f:aa:23:a3:78:39:e3:de:16:f7:a1:d8:0c:
                    83:67:ba:f2:d8:23:21:cb:c8:98:7d:ce:16:ab:04:
                    d6:52:29:3f:a3:10:cd:9d:41:68:0e:e0:0f:93:5c:
                    43:46:d1:81:8a:b2:14:e2:15:ec:23:b8:7a:ef:86:
                    8b:d1:1c:1a:6d:cb:41:7b:ab:c9:a1:97:ab:a8:0c:
                    a9:92:ab:61:02:21:ec:02:15:be:93:66:2b:78:8f:
                    1c:da:a1:72:73:c5:b1:2c:ce:28:a1:8f:18:fc:62:
                    bc:4d:71:a5:18:e6:e7:63:eb:be:3b:6a:f2:d6:fd:
                    30:62:e4:d8:31:42:45:fc:81:ef:4f:eb:40:74:3b:
                    0b:f5:4b:37:c6:ae:54:57:75:ef:05:dc:9a:7b:b0:
                    4c:61:a0:97:42:ec:b4:08:da:6b:f0:e8:3a:67:7f:
                    82:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B3:05:92:41:96:CA:B3:67:65:89:BB:D4:A2:4A:A0:97:B1:34:6E
            X509v3 Authority Key Identifier:
                keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e9:e1:a2:6e:7f:54:0b:aa:c8:18:aa:42:70:18:ad:bb:fb:
         e1:4a:5a:9d:1a:73:94:46:75:dc:13:ab:c2:88:38:92:dd:0e:
         84:fb:46:e5:12:68:aa:29:2d:82:70:d5:ec:f6:3b:94:86:8e:
         92:7f:e7:87:13:e8:97:02:77:83:66:fd:68:bd:48:4c:2a:87:
         df:bf:95:88:fb:f4:01:37:15:0d:a3:85:9b:a5:dd:ff:dd:d3:
         17:89:d5:b0:4e:f0:15:e0:4b:6b:3b:cb:26:0d:9a:38:b4:e5:
         c9:11:e1:92:dc:dc:a3:34:7b:e7:95:98:0b:90:2b:a1:a7:a8:
         2a:ef:d4:a9:1f:5c:28:0a:3e:b5:70:a1:8f:0e:cd:6c:e1:c7:
         71:12:a0:ec:74:bc:8f:47:a6:37:af:c7:39:56:bb:b9:b7:0e:
         06:71:f1:02:4a:f5:f6:8f:17:77:81:03:8a:b6:b1:2f:a9:8d:
         b0:e5:c2:98:81:b8:03:9b:16:a5:6d:b2:ca:e2:8c:13:3f:27:
         2a:cb:d7:86:c3:be:ae:40:97:82:e1:a9:ca:bd:5b:93:bd:06:
         d9:32:f3:9f:dc:9c:b0:24:da:e5:b0:84:20:5d:c2:9b:ee:b8:
         8a:11:78:81:33:ab:b0:e3:fd:d3:3f:23:a6:0b:ca:d5:22:11:
         ea:41:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:57:00 2025 by rpki-client