Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File:                     bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier:          RH4zJ/CK7rCIhtUW0d+9febz8AiVN1grX+/FT8Z3a3g=
Subject key identifier:   A2:71:B6:2E:B6:2E:35:BD:BE:42:B4:A0:75:5D:7D:59:75:24:83:65
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number:          AA
Signing time:             Thu 07 Aug 2025 06:54:29 +0000
Manifest this update:     Thu 07 Aug 2025 06:54:28 +0000
Manifest next update:     Thu 14 Aug 2025 06:54:28 +0000
Files and hashes:         1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: pujHagaZe9JpqyhhhYlNV3b0Z/4pS2c1uQtQQXMMLME=)
                          2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=)
                          3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Aug  7 06:54:28 2025 GMT
            Not After : Aug 14 06:54:28 2025 GMT
        Subject: CN=68944da5-358f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:8f:d1:67:e2:dc:63:d0:90:43:96:55:be:
                    99:8d:41:c0:83:2c:9c:fc:bc:87:22:7b:0d:d9:f1:
                    ec:98:37:fa:81:cc:35:07:63:2a:97:ae:e0:17:7b:
                    88:8b:ec:57:49:c0:09:00:3d:64:26:46:08:5a:79:
                    46:6b:68:cc:8c:3e:c8:b5:54:96:46:bc:a1:70:12:
                    3d:4f:9a:eb:73:80:67:99:f8:51:44:32:d2:9d:a2:
                    f2:9f:6d:00:bb:d3:3b:68:7d:1f:6c:dc:42:4a:cb:
                    65:82:96:4f:2a:50:92:ad:3c:d1:78:15:27:b8:08:
                    a2:4f:e6:28:36:51:70:86:3b:78:41:7d:68:bb:a1:
                    16:0a:87:ff:0a:45:71:8e:b9:40:74:01:49:aa:66:
                    2d:ff:cb:e1:00:fa:fd:41:08:e6:f3:06:d2:b9:f1:
                    47:4c:46:f6:f4:a2:9c:19:df:c2:28:0f:cb:fd:10:
                    d7:91:34:05:a0:27:ff:fa:cc:b2:67:b0:06:dc:a3:
                    18:72:10:38:dc:c2:46:39:ea:dd:e1:12:65:f9:79:
                    0c:c0:3f:78:b6:3a:44:2e:43:a4:63:fa:b0:c4:56:
                    79:60:bc:9a:79:4d:26:bb:d4:f0:3b:8d:8d:20:2d:
                    7a:59:2d:4e:23:f7:7f:95:c1:77:0d:1d:5b:85:d0:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:71:B6:2E:B6:2E:35:BD:BE:42:B4:A0:75:5D:7D:59:75:24:83:65
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:de:8d:b0:3f:55:05:8a:af:28:ef:7d:93:78:b9:55:02:25:
         8d:69:5d:46:0c:c8:23:62:e8:23:2a:fe:9e:36:c5:6c:b5:43:
         56:3e:da:fb:a6:c1:59:79:65:e9:77:ee:a1:40:c4:10:8e:be:
         62:a5:f3:6a:a2:6b:54:eb:79:be:fc:31:23:fd:54:9a:33:11:
         a1:31:43:ab:87:f5:c7:e5:07:53:4c:57:a4:8b:2f:6e:97:72:
         b4:5d:09:b4:f1:5b:a9:9f:6c:ba:4e:ac:bd:8f:5c:1c:96:7c:
         a7:1c:a3:9e:1a:54:43:49:e3:bc:68:76:32:25:b8:d0:6f:5d:
         be:00:f2:a1:0a:ee:7a:9f:e0:c0:e4:12:07:b1:c9:d1:32:36:
         7e:28:ea:ab:d3:a4:99:e4:86:75:32:11:8c:37:46:35:20:25:
         f2:14:39:cf:ed:8e:92:32:d4:7f:ad:25:49:ec:a0:ad:96:c7:
         2c:31:d9:51:72:5a:61:4a:70:f3:0c:77:ea:c4:96:7d:b6:58:
         3a:1f:a2:1f:45:32:0f:ba:d1:57:05:3d:b3:5c:8d:f6:1c:df:
         f7:4d:ad:f9:f2:55:b4:0f:58:e3:32:18:a1:bf:df:8f:7f:8b:
         51:a6:26:52:fd:00:79:7a:7e:2d:09:61:b1:04:02:93:1d:83:
         e4:69:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:16 2025 by rpki-client