Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          TsjP/zsecU9cCjcdgtQ7E1UGfNFdSMufUOjI6qvisWM=
Subject key identifier:   FB:68:44:C5:E7:F0:1D:AF:90:DB:44:80:6F:A4:6E:1E:2E:64:35:17
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          6F
Signing time:             Tue 05 Aug 2025 07:29:51 +0000
Manifest this update:     Tue 05 Aug 2025 07:29:50 +0000
Manifest next update:     Tue 12 Aug 2025 07:29:50 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: +PlpPxigUZnQFGNrIMgbZRRkPbK5B3TjGGhm43+rDx8=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 07:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: Aug  5 07:29:50 2025 GMT
            Not After : Aug 12 07:29:50 2025 GMT
        Subject: CN=6891b2ef-8495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:3e:ff:ef:06:b6:5a:c4:ff:80:b1:12:21:
                    e1:86:dd:e5:61:db:cc:50:f6:0c:dd:90:b7:e6:08:
                    8c:ad:55:ee:3a:9e:18:7d:b5:60:97:ca:d3:01:0c:
                    2f:03:6a:e8:f6:2d:0b:fb:ab:21:59:52:81:24:2e:
                    3f:93:63:8a:3d:92:84:df:47:55:e4:23:db:9c:8e:
                    c6:67:f1:7b:62:ed:62:4c:cc:86:b5:b9:ef:fa:79:
                    fc:db:d6:d2:5b:7b:c1:97:47:eb:22:c2:4e:04:a4:
                    3f:9f:a1:2d:5a:2d:82:e9:32:33:67:f4:06:af:93:
                    15:5f:0c:2c:26:90:83:71:48:51:77:dc:f9:69:40:
                    d9:66:a0:ec:5f:13:cd:3a:70:56:0a:5a:ae:dc:06:
                    ca:a7:79:34:4a:87:46:36:2b:3f:f1:75:31:08:8b:
                    3f:37:03:e5:14:8e:27:f6:b8:5a:0e:53:42:5a:a0:
                    3b:f7:63:22:44:0e:4c:f1:d8:43:a4:c8:41:4f:1c:
                    6b:83:44:d8:3c:2a:12:86:d9:da:e0:a5:cf:ba:93:
                    33:6f:c1:fb:16:0d:e0:db:5e:0b:cc:5e:2c:4f:87:
                    fa:d7:a8:e8:a1:66:bc:c1:7c:1f:26:27:f5:d2:c0:
                    26:b2:56:20:18:89:8b:26:ae:58:da:4b:18:68:5d:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:68:44:C5:E7:F0:1D:AF:90:DB:44:80:6F:A4:6E:1E:2E:64:35:17
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:23:04:62:c0:89:f0:a7:63:f3:10:a3:e5:96:1c:52:d8:
         aa:3b:8c:0d:52:3d:f5:e5:31:ab:86:5e:37:26:18:72:5b:f0:
         bd:ef:25:c1:45:30:e3:76:11:0f:5f:11:3d:31:0c:88:db:b5:
         fd:ec:64:4b:5e:14:06:ef:d7:4e:ec:8e:41:3f:d0:d0:e7:e8:
         17:b8:5c:f3:d4:d5:3d:86:42:14:fa:1e:19:b4:91:80:3b:8d:
         6e:8f:ea:82:a6:98:39:96:9b:94:d4:fb:0a:2d:f2:86:3e:f3:
         ac:dd:6c:c6:99:7d:6f:bd:ab:68:2b:21:a5:6f:ed:ea:e1:04:
         99:42:cc:06:5a:b7:4e:4e:2c:5d:76:b8:df:2b:31:27:96:5b:
         f0:49:4f:4a:98:85:17:92:25:f7:83:96:e1:50:50:6c:9f:ca:
         07:31:2f:a7:1a:24:36:93:39:c5:88:85:b4:5c:04:61:4a:5b:
         98:fa:b5:2f:ab:f3:7b:20:e3:7e:db:14:9e:9b:48:98:13:4b:
         2d:fb:cb:d4:ff:9b:78:92:cc:f7:fe:39:f1:f2:79:0b:8e:d7:
         ac:09:50:24:43:78:ba:9a:65:f5:56:45:24:f8:88:ea:8c:cb:
         74:dc:45:46:d3:e2:c1:ff:64:9c:04:8c:74:49:ca:5e:83:33:
         11:b8:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:53 2025 by rpki-client