Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
File:                     f-Bbou6G6oexhMP_X7EbO6oUiuw.mft (raw, json)
Hash identifier:          97o7bd+PaWEf6tKYO7K29jYQwm2+1Coqy3E43WKUg0M=
Subject key identifier:   67:23:7E:CE:AB:25:F2:3E:6A:17:79:0F:6B:10:D2:0E:DB:2B:59:97
Authority key identifier: 7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC
Certificate issuer:       /CN=A918BAEC/serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
Manifest number:          2C
Signing time:             Fri 13 Jun 2025 06:40:11 +0000
Manifest this update:     Fri 13 Jun 2025 06:40:11 +0000
Manifest next update:     Fri 20 Jun 2025 06:40:11 +0000
Files and hashes:         1: f-Bbou6G6oexhMP_X7EbO6oUiuw.crl (hash: T9TCydeZ4LJ+XVULRS3qr37ae6qP9hbWCTcAv4mxi48=)
                          2: FFAB3BEA093D11F09D0BF611C4F9AE02.roa (hash: yI/j1xgiS/fqVtmbq53pKNzmCkVrwuDmHepyJ+SQ0M0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl
                          rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BAEC, serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
        Validity
            Not Before: Jun 13 06:40:11 2025 GMT
            Not After : Jun 20 06:40:11 2025 GMT
        Subject: CN=684bc7cb-f384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:ba:09:79:d1:f9:fc:ea:db:b3:05:81:39:
                    8e:40:f5:ce:16:ab:65:71:dc:d8:69:07:3b:f8:75:
                    2c:d7:4f:ae:74:3b:5d:53:56:95:54:44:34:9a:c0:
                    a5:21:d6:7f:e1:f6:eb:70:bf:eb:ef:c3:2e:06:7b:
                    8c:51:fa:b1:81:54:91:cb:4e:9d:43:61:77:a1:9a:
                    2b:00:d1:44:82:9a:6f:9c:ed:6f:47:94:06:36:38:
                    4c:ed:d9:f6:a0:bd:3d:f5:54:9b:94:64:46:db:c4:
                    63:76:59:d1:05:ac:8a:c9:35:7d:b5:3c:20:65:e7:
                    28:8e:dc:3f:50:13:70:35:f8:05:e1:f1:7d:41:ac:
                    8c:88:77:4c:9b:e4:65:b3:1e:d2:6e:34:56:8a:e8:
                    a7:12:8c:07:2a:7e:fa:83:4f:e4:ea:b1:a4:e4:90:
                    e6:4d:76:b7:ee:89:c8:4b:56:17:ff:3c:34:a4:3c:
                    77:e6:05:f5:3a:d5:73:ac:67:f3:f1:f3:c7:7d:37:
                    94:11:7a:7c:d5:53:ac:5a:26:1f:d3:cf:2f:9c:f2:
                    e0:14:a4:b6:05:87:7f:87:1c:6f:c9:bb:8a:18:21:
                    74:e1:4b:fb:1e:ef:9f:6e:8a:32:9d:09:ac:f4:8b:
                    1c:e5:70:ac:36:9c:e6:32:96:16:e5:ad:f2:2b:15:
                    8c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:23:7E:CE:AB:25:F2:3E:6A:17:79:0F:6B:10:D2:0E:DB:2B:59:97
            X509v3 Authority Key Identifier:
                keyid:7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:55:33:8e:f6:6e:a1:9d:db:50:18:26:c6:cb:47:d2:c4:c1:
         68:94:50:89:35:33:86:d3:70:9a:f5:19:c8:d1:e1:b7:5b:84:
         d4:88:93:7b:16:2f:5d:1f:68:53:68:f7:ec:69:69:5a:05:71:
         93:e6:f4:95:b6:76:21:02:de:a3:a2:27:a0:ee:08:99:cd:3e:
         01:c6:8f:8f:93:1d:8a:fb:c0:dd:43:c3:b2:51:0f:eb:fb:f8:
         f1:32:c4:ca:43:16:15:47:fd:02:61:c7:c3:f5:fe:f9:51:2b:
         84:c9:27:14:23:1e:e9:af:84:82:b8:1b:30:57:97:be:87:99:
         03:a5:7d:8d:1d:66:11:4c:85:36:7d:5d:eb:d3:27:cb:f9:e0:
         fc:7a:1c:ed:6b:e0:5a:25:74:20:f5:11:8c:bb:8e:a2:a7:a8:
         45:e6:ef:d1:20:07:05:95:64:eb:1f:3e:34:e8:f3:19:9e:a7:
         b3:d2:97:08:a2:75:1c:ce:b7:bb:6a:39:47:e3:5a:1d:8b:1d:
         f7:44:ba:6c:15:d4:a7:69:ed:7f:00:2d:5b:0d:c0:5f:c3:4d:
         de:c8:f9:f5:e6:57:c8:46:20:78:d4:40:33:35:1d:d9:34:f7:
         49:a9:da:0f:2a:b8:99:15:f8:bc:16:81:57:cf:7c:5f:b8:3b:
         13:2a:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:33:58 2025 by rpki-client