Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft
File:                     ByjuraGOzeT7fFAuuEu2kD1lMvE.mft (raw, json)
Hash identifier:          oG8VPv1MVl/okfbLk1cFp9t9R+2dJCzXCHxMe7hH47Q=
Subject key identifier:   33:3F:65:6D:EC:50:D1:00:99:6B:BD:B0:8A:A1:4D:24:31:A6:7D:B9
Authority key identifier: 07:28:EE:AD:A1:8E:CD:E4:FB:7C:50:2E:B8:4B:B6:90:3D:65:32:F1
Certificate issuer:       /CN=A912E82F/serialNumber=0728EEADA18ECDE4FB7C502EB84BB6903D6532F1
Certificate serial:       09C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft
Manifest number:          09C0
Signing time:             Sun 10 Aug 2025 20:00:43 +0000
Manifest this update:     Sun 10 Aug 2025 20:00:42 +0000
Manifest next update:     Sun 17 Aug 2025 20:00:42 +0000
Files and hashes:         1: ByjuraGOzeT7fFAuuEu2kD1lMvE.crl (hash: Kdd0jqz4LSAbdmcKwOJFbCVh2WC1Wh06sZpHepue5DU=)
                          2: B1E17EB08A1C11EAA328EB41C4F9AE02.roa (hash: H7FNcnGytiJ1b8lqQF/vjIDhag6o2/tMiNRQMdS8LlA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.crl
                          rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Aug 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E82F, serialNumber=0728EEADA18ECDE4FB7C502EB84BB6903D6532F1
        Validity
            Not Before: Aug 10 20:00:42 2025 GMT
            Not After : Aug 17 20:00:42 2025 GMT
        Subject: CN=6898fa6b-72ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f4:2a:83:0c:37:1d:7c:6a:2a:79:05:6e:37:
                    7b:cb:95:ae:98:6f:7b:a0:39:f4:35:6f:d2:2a:6e:
                    6f:7b:4c:d7:1c:dd:35:bd:31:4d:ed:57:9d:0f:4e:
                    dc:c1:73:ac:00:fa:22:7f:a2:ea:68:40:cd:47:d9:
                    1c:f3:33:a5:48:45:a2:65:67:fd:be:2a:e7:4f:73:
                    12:60:e4:ae:42:40:ec:a0:b2:28:26:f1:c9:93:85:
                    2a:60:28:c6:79:0a:39:5f:9c:19:fe:0b:41:71:67:
                    17:00:ce:55:fe:8b:91:47:5c:23:eb:9b:3e:a6:58:
                    fd:e3:2f:8a:6d:44:88:cd:ba:0a:96:8e:ed:9e:a1:
                    75:de:14:b0:f3:ce:21:27:48:28:e2:7a:f3:34:fd:
                    75:2d:31:6c:1b:ce:e9:8f:6d:37:d8:67:2c:43:a2:
                    ba:f9:32:da:c4:ce:33:dc:bd:d4:df:2e:5c:68:01:
                    f6:2b:ef:5a:93:2d:e9:51:ba:30:62:92:e7:8b:ef:
                    00:a4:33:02:89:c9:bc:e6:f8:50:d1:ef:da:69:e7:
                    32:e5:fc:dd:e3:d9:50:e9:45:9a:aa:18:80:78:08:
                    2b:f2:e6:53:5a:0a:29:83:ce:f1:7f:29:95:d8:ba:
                    6a:8b:a2:af:de:38:d2:96:79:40:8d:70:63:c9:4e:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3F:65:6D:EC:50:D1:00:99:6B:BD:B0:8A:A1:4D:24:31:A6:7D:B9
            X509v3 Authority Key Identifier:
                keyid:07:28:EE:AD:A1:8E:CD:E4:FB:7C:50:2E:B8:4B:B6:90:3D:65:32:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByjuraGOzeT7fFAuuEu2kD1lMvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E82F/E9E0D67C8A1B11EA9DC84341C4F9AE02/ByjuraGOzeT7fFAuuEu2kD1lMvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:0f:ea:54:c3:13:27:aa:e9:f6:ce:36:25:e6:c6:28:8d:
         f5:b3:fe:c3:b4:e1:76:a1:a7:ac:54:2b:73:1a:3f:65:99:0c:
         e2:fe:6e:6e:1a:96:88:43:d2:76:d1:84:94:81:35:b4:31:22:
         55:e2:2c:f3:b4:4d:c9:b5:48:d5:99:aa:a5:4d:79:b9:cc:a5:
         ad:13:e9:87:b8:84:7e:43:97:a5:c9:3a:b0:79:5c:35:31:d4:
         08:80:e5:83:70:a4:fd:94:6c:7a:1a:c5:29:de:d4:af:6f:aa:
         ba:3e:1d:e0:2e:eb:8c:54:3c:f5:e4:b4:ab:47:4c:78:f8:6f:
         85:19:e4:2d:aa:8e:68:3e:02:fb:a9:37:d1:0f:1e:60:de:04:
         d5:9d:72:c6:72:9e:17:97:43:75:f6:ed:d2:44:e4:eb:42:c9:
         f4:ff:16:09:f5:b8:87:5c:de:d0:b9:ad:cd:ff:3c:b1:ae:06:
         97:b5:12:9b:d0:28:0a:21:dc:44:10:50:0e:da:e1:31:16:18:
         d2:40:40:0d:d6:97:77:ab:49:b8:df:a8:ce:af:ac:f3:7d:e1:
         a2:cb:b2:06:cf:2e:b3:97:43:81:f3:97:8d:f8:3c:18:ed:b8:
         51:e2:a1:f4:e7:af:51:a7:b8:01:c3:d1:e1:08:24:0b:2d:84:
         da:e5:0c:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU4MkYxMTAvBgNVBAUTKDA3MjhFRUFEQTE4RUNERTRGQjdDNTAyRUI4NEJCNjkw
M0Q2NTMyRjEwHhcNMjUwODEwMjAwMDQyWhcNMjUwODE3MjAwMDQyWjAYMRYwFAYD
VQQDEw02ODk4ZmE2Yi03MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+vQqgww3HXxqKnkFbjd7y5WumG97oDn0NW/SKm5ve0zXHN01vTFN7VedD07c
wXOsAPoif6LqaEDNR9kc8zOlSEWiZWf9virnT3MSYOSuQkDsoLIoJvHJk4UqYCjG
eQo5X5wZ/gtBcWcXAM5V/ouRR1wj65s+plj94y+KbUSIzboKlo7tnqF13hSw884h
J0go4nrzNP11LTFsG87pj2032GcsQ6K6+TLaxM4z3L3U3y5caAH2K+9aky3pUbow
YpLni+8ApDMCicm85vhQ0e/aaecy5fzd49lQ6UWaqhiAeAgr8uZTWgopg87xfymV
2Lpqi6Kv3jjSlnlAjXBjyU6AdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDM/ZW3s
UNEAmWu9sIqhTSQxpn25MB8GA1UdIwQYMBaAFAco7q2hjs3k+3xQLrhLtpA9ZTLx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgyRi9FOUUwRDY3QzhB
MUIxMUVBOURDODQzNDFDNEY5QUUwMi9CeWp1cmFHT3plVDdmRkF1dUV1MmtEMWxN
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5anVyYUdPemVUN2ZGQXV1RXUya0QxbE12RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTgyRi9FOUUwRDY3QzhBMUIxMUVBOURDODQzNDFDNEY5QUUwMi9CeWp1cmFHT3pl
VDdmRkF1dUV1MmtEMWxNdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAftg/qVMMTJ6rp9s42JebGKI31s/7DtOF2oaesVCtzGj9lmQzi/m5u
GpaIQ9J20YSUgTW0MSJV4izztE3JtUjVmaqlTXm5zKWtE+mHuIR+Q5elyTqweVw1
MdQIgOWDcKT9lGx6GsUp3tSvb6q6Ph3gLuuMVDz15LSrR0x4+G+FGeQtqo5oPgL7
qTfRDx5g3gTVnXLGcp4Xl0N19u3SROTrQsn0/xYJ9biHXN7Qua3N/zyxrgaXtRKb
0CgKIdxEEFAO2uExFhjSQEAN1pd3q0m436jOr6zzfeGiy7IGzy6zl0OB85eN+DwY
7bhR4qH0569Rp7gBw9HhCCQLLYTa5Qz5
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:36:10 2025 by rpki-client