Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
File:                     bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json)
Hash identifier:          Es3JUKMFvrmkPJOjhStvFCQ7gXQl51T7SCgeHywQXs0=
Subject key identifier:   E1:85:79:7A:77:19:B3:0A:91:77:7C:48:E5:B5:2C:40:EC:D1:D9:C9
Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A
Certificate issuer:       /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
Manifest number:          50
Signing time:             Tue 05 Aug 2025 07:54:23 +0000
Manifest this update:     Tue 05 Aug 2025 07:54:22 +0000
Manifest next update:     Tue 12 Aug 2025 07:54:22 +0000
Files and hashes:         1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: Kbb2RKcq9XCGDb5cZry+FYsYI/BQHqID2ejahc9aDxw=)
                          2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl
                          rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 07:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A
        Validity
            Not Before: Aug  5 07:54:22 2025 GMT
            Not After : Aug 12 07:54:22 2025 GMT
        Subject: CN=6891b8ae-3c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:6b:1c:90:50:87:c7:fe:ff:41:51:f3:f4:
                    d5:dc:1c:96:a4:94:02:08:32:d3:3c:8d:f9:eb:e1:
                    99:f8:86:d5:4e:46:03:5a:ee:5c:89:63:c7:98:5c:
                    35:c8:5f:e4:3a:89:be:c4:1b:8f:6a:0d:ad:3b:72:
                    cc:f9:b7:d3:41:c3:4d:c5:6e:c6:7d:6b:1e:90:0e:
                    a9:5d:b4:66:0d:0d:99:77:65:fd:b8:46:35:09:b2:
                    0b:37:60:dd:4d:58:07:27:d2:61:83:8a:6c:1e:2c:
                    33:a7:8d:04:51:78:08:c8:97:af:fa:69:4d:8f:f3:
                    5a:11:d8:cd:13:c9:48:e0:0f:6a:71:b3:a7:93:8e:
                    64:e6:b7:f0:8b:4a:cf:03:99:c0:93:bf:f1:a6:e4:
                    39:39:84:62:e6:cd:b3:2f:f6:cb:e1:78:cb:f2:76:
                    96:0e:53:45:ba:8c:0c:32:06:76:6e:4f:28:04:fb:
                    ff:d0:47:23:7c:6d:3e:71:70:f2:92:9e:93:02:4a:
                    5e:61:b4:44:22:08:47:d6:60:0b:2a:8d:f0:4a:8b:
                    ad:f1:95:de:bb:71:4a:0f:41:08:d5:1c:0d:94:e7:
                    98:2c:f4:49:c5:2d:4d:c4:65:67:24:6b:80:3d:b5:
                    06:78:f8:7d:ce:3a:8c:17:9a:02:34:84:0a:52:9b:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:85:79:7A:77:19:B3:0A:91:77:7C:48:E5:B5:2C:40:EC:D1:D9:C9
            X509v3 Authority Key Identifier:
                keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a6:30:95:9b:05:70:b2:11:36:d1:c8:d2:b4:0f:03:4f:e6:
         a4:1f:b1:cb:6f:d4:3c:dd:e7:14:37:38:cc:0d:05:27:4e:2e:
         06:1a:d9:91:bf:f4:c6:b8:ad:e8:b8:6f:15:e9:0e:24:c0:b4:
         17:be:63:00:38:ad:dc:41:eb:d0:74:dd:d0:83:b6:aa:55:66:
         fe:b6:88:c5:5b:55:a4:dd:eb:63:96:4f:16:dc:8d:29:19:bf:
         78:b1:f3:41:bf:d3:14:66:89:08:51:07:67:79:05:8b:b1:36:
         15:1d:1a:af:c9:b7:fa:15:b4:cd:dc:ad:96:f8:15:0b:c7:8b:
         c1:25:c2:53:96:df:e1:a6:3b:e9:84:d9:23:ca:99:6e:17:4b:
         dc:5c:bf:26:eb:4e:f2:61:5d:c4:f7:d0:8c:88:ab:ff:52:0c:
         98:96:b1:8b:94:b2:81:0d:1f:02:5e:3a:bb:e2:cd:57:43:45:
         61:7e:a7:e5:bd:e1:0e:90:21:46:c0:ac:5b:76:08:c4:32:58:
         b0:eb:4a:30:e3:2d:4f:1e:f9:55:57:6d:cc:8c:24:24:bd:76:
         86:65:a1:54:87:ab:06:c9:31:f8:01:c9:2f:f7:ba:d7:c9:2c:
         bc:96:7b:73:d4:b7:46:8c:b1:3b:92:21:a3:28:5c:8d:99:b8:
         c2:5b:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:37 2025 by rpki-client