Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          RIxTVeK3lbKwUW8w0oKWRffx48XjqPEIZPRyuJ6XrFM=
Subject key identifier:   2D:95:3A:DF:3A:03:20:3E:CA:60:17:55:22:4D:58:64:2D:B7:A4:F1
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       08EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          08C9
Signing time:             Sat 14 Jun 2025 20:20:36 +0000
Manifest this update:     Sat 14 Jun 2025 20:20:36 +0000
Manifest next update:     Sat 21 Jun 2025 20:20:36 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: YTAwd4ulKZ7LP78ecuSs5whUscF6ORJ4+NAwN0c68zY=)
                          2: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: TccZk/TGvx3r9QdnASoZVSxv2kMWJg57Q5cy6O+RFSA=)
                          3: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: ty5BYEXKZV5AWkkmYV4pnoWKf56lpR/zLBDndr/xc/8=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: fcDSO/sb2ishtHrFu2bzf2l9xwmLRSMg0lfcyJWjJ+k=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: lUm2TNPxrCXgL1T7LIO3Y79aFpYIYcK/d2SLX4eq438=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Jun 14 20:20:36 2025 GMT
            Not After : Jun 21 20:20:36 2025 GMT
        Subject: CN=684dd994-9a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:a8:73:4d:ac:af:4e:fd:16:bc:98:7d:49:
                    94:78:f5:3b:ad:5f:2c:ec:79:fa:26:1c:e6:45:f8:
                    f9:eb:29:31:6e:2a:94:d9:05:fa:a4:b1:16:5a:8f:
                    fc:d6:9c:6f:0e:04:09:ba:d7:c7:3e:3a:99:f3:51:
                    c6:4f:eb:3a:51:a1:4e:c1:3c:2e:c1:f4:40:21:8d:
                    d7:d1:9b:1f:cc:b9:b6:a2:7d:1a:02:de:a7:9c:3f:
                    e9:74:76:e1:02:10:e9:16:90:60:35:4f:ec:a4:c2:
                    7a:52:eb:15:4f:c2:b0:cb:1c:4d:1c:f2:de:49:01:
                    26:d3:ee:56:2d:78:96:db:36:db:f9:92:c0:16:3e:
                    a2:7e:ce:47:18:5d:7e:22:54:d0:59:75:b3:3c:36:
                    9d:83:32:95:ed:a5:2c:ee:dd:27:05:de:a8:2e:0b:
                    18:76:10:c7:54:34:6a:f4:86:99:03:b9:1f:89:f1:
                    93:d0:26:3c:cd:ea:d9:e4:72:33:44:19:3c:9e:74:
                    02:f4:bc:7a:14:1a:fe:94:af:a2:dd:d6:59:1b:59:
                    43:fa:be:3e:f4:d2:44:4d:a0:35:42:88:94:ed:a1:
                    74:44:f4:a2:96:7f:08:a6:44:6e:50:fe:e1:8d:db:
                    e4:2a:eb:35:6d:ba:ab:62:80:18:f7:e9:74:7c:16:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:3A:DF:3A:03:20:3E:CA:60:17:55:22:4D:58:64:2D:B7:A4:F1
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:28:84:db:6d:fb:86:74:db:fc:bb:ce:dd:cc:a9:7e:41:
         fb:47:26:a0:28:41:31:e9:1f:ad:c4:1c:67:46:fd:e4:c9:ef:
         2c:e2:b9:33:d3:26:71:bb:18:67:9d:ca:65:02:ff:8e:3d:05:
         d3:e7:c6:42:ed:60:2a:45:72:b7:62:e0:03:a8:82:e7:72:af:
         c0:1f:15:2d:1b:02:b5:14:0b:92:ec:3e:a8:9e:9b:d2:4f:b2:
         e8:ec:6a:b8:6c:d9:ad:77:a6:96:45:70:67:79:77:7e:3e:a0:
         d0:11:04:79:b3:32:bd:24:6b:4c:4e:e1:3a:81:68:f6:bd:4d:
         13:ca:0e:36:04:b7:6d:8f:53:4a:9a:ef:fd:ba:72:0a:70:bf:
         36:cf:8f:e5:91:1f:95:11:f9:b3:3b:75:56:8b:2d:d2:42:bb:
         28:58:d1:c6:78:66:64:01:78:5b:3e:c2:e4:86:b1:85:78:08:
         65:aa:56:99:84:3d:07:54:63:ae:cb:6c:5d:b7:25:d6:aa:e0:
         a6:24:38:d9:d2:58:f2:04:87:13:e2:81:34:af:c4:ec:7f:db:
         58:83:3e:a7:2c:a4:bb:13:77:e3:86:82:81:d2:82:8d:af:53:
         d1:33:20:ff:82:f9:9b:b9:d0:84:a8:ff:e3:46:02:62:be:69:
         12:b2:15:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2
RUY2Qzk1MTcwHhcNMjUwNjE0MjAyMDM2WhcNMjUwNjIxMjAyMDM2WjAYMRYwFAYD
VQQDEw02ODRkZDk5NC05YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJeoc02sr079FryYfUmUePU7rV8s7Hn6JhzmRfj56ykxbiqU2QX6pLEWWo/8
1pxvDgQJutfHPjqZ81HGT+s6UaFOwTwuwfRAIY3X0ZsfzLm2on0aAt6nnD/pdHbh
AhDpFpBgNU/spMJ6UusVT8KwyxxNHPLeSQEm0+5WLXiW2zbb+ZLAFj6ifs5HGF1+
IlTQWXWzPDadgzKV7aUs7t0nBd6oLgsYdhDHVDRq9IaZA7kfifGT0CY8zerZ5HIz
RBk8nnQC9Lx6FBr+lK+i3dZZG1lD+r4+9NJETaA1QoiU7aF0RPSiln8IpkRuUP7h
jdvkKus1bbqrYoAY9+l0fBYytQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2VOt86
AyA+ymAXVSJNWGQtt6TxMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD
MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkNCMS9EMDBERDQ5OEJDMDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExL
LTlzRW1qTlduLXB1OXNsUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjxSiE2237hnTb/LvO3cypfkH7RyagKEEx6R+txBxnRv3kye8s4rkz
0yZxuxhnncplAv+OPQXT58ZC7WAqRXK3YuADqILncq/AHxUtGwK1FAuS7D6onpvS
T7Lo7Gq4bNmtd6aWRXBneXd+PqDQEQR5szK9JGtMTuE6gWj2vU0Tyg42BLdtj1NK
mu/9unIKcL82z4/lkR+VEfmzO3VWiy3SQrsoWNHGeGZkAXhbPsLkhrGFeAhlqlaZ
hD0HVGOuy2xdtyXWquCmJDjZ0ljyBIcT4oE0r8Tsf9tYgz6nLKS7E3fjhoKB0oKN
r1PRMyD/gvmbudCEqP/jRgJivmkSshUk
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:29:49 2025 by rpki-client