Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
File:                     bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json)
Hash identifier:          saKf5KoC/WjzhWYHMHRHvPsOyxvHQL2+s9rkXSPxokM=
Subject key identifier:   62:69:0A:42:F0:0D:C2:5B:DB:95:F6:05:9A:79:64:42:50:BE:B9:B9
Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
Certificate issuer:       /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Certificate serial:       09FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
Manifest number:          09F3
Signing time:             Sat 14 Jun 2025 19:42:08 +0000
Manifest this update:     Sat 14 Jun 2025 19:42:07 +0000
Manifest next update:     Sat 21 Jun 2025 19:42:07 +0000
Files and hashes:         1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: HGlK07Y1EUmXHHAbsSYvUy8y3UEEVjQgaJenTlfl8so=)
                          2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: HX1z061ITJ/Mm5axSNQ3ySg9hGI3PSjhgq8jl6nzC3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 19:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
        Validity
            Not Before: Jun 14 19:42:07 2025 GMT
            Not After : Jun 21 19:42:07 2025 GMT
        Subject: CN=684dd08f-5782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:a9:ae:3c:1f:fc:f1:72:87:12:73:7a:69:
                    39:60:fa:8e:94:f8:eb:76:6e:e8:0e:01:21:c6:a1:
                    12:1b:e5:71:b0:77:7b:94:b4:79:dc:af:15:45:82:
                    3c:88:db:9d:fc:8f:35:8a:5a:76:a4:fb:60:fb:09:
                    ba:3e:78:7c:d8:95:71:5a:c4:26:39:24:2d:16:dd:
                    1b:b5:3c:ed:a8:b0:b2:ee:75:3f:c0:77:b0:41:6c:
                    fd:a5:fc:d3:b1:7a:73:15:7c:dc:f1:92:51:2e:77:
                    d8:60:31:fa:b8:73:f1:61:ef:dd:b4:e2:53:bb:9f:
                    58:bf:c0:47:67:10:99:83:9f:be:66:45:67:b7:73:
                    30:4b:95:40:47:88:3b:46:86:49:48:aa:c1:75:6b:
                    3d:b4:23:8c:51:05:ea:ae:9f:2c:a4:d4:94:a9:1f:
                    cb:5f:59:34:9e:ac:94:c8:ca:ea:0c:6d:fb:ac:40:
                    73:de:51:8c:49:92:79:8c:4d:f8:4c:a7:c5:bb:78:
                    43:cd:a8:4f:7d:47:c6:83:13:42:b5:29:36:56:09:
                    c4:27:bb:f7:c7:fb:22:e8:28:6e:68:f2:d5:ae:45:
                    53:ae:a5:89:a2:d2:80:d3:de:6f:ca:b4:8c:29:12:
                    e0:f8:c5:db:40:a6:ee:78:04:64:be:0a:05:ff:af:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:69:0A:42:F0:0D:C2:5B:DB:95:F6:05:9A:79:64:42:50:BE:B9:B9
            X509v3 Authority Key Identifier:
                keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1d:43:05:a8:f2:e2:a5:e9:e8:79:86:8d:11:ec:7e:60:fe:
         ff:c7:72:43:a3:55:73:33:dc:5b:dd:fb:a3:4a:fc:14:23:ec:
         27:be:f1:0f:db:74:4c:bf:cc:61:e7:88:40:1c:8c:33:07:39:
         d7:4b:51:41:88:67:60:4b:11:63:d2:42:ea:ef:59:1e:36:d6:
         96:2a:34:fa:a4:2c:c7:eb:9e:8f:63:c5:0c:b7:69:f1:3f:75:
         b4:39:13:fb:38:b8:d6:b1:1e:14:98:3b:03:c8:f6:86:4f:09:
         ee:3f:54:51:77:98:f3:94:68:b7:de:00:88:9b:42:b2:2e:52:
         55:bc:c5:a8:42:ab:a1:0c:c0:38:5d:87:a4:bc:d0:d3:7f:e8:
         8a:b1:75:33:c8:fd:1c:e1:5d:44:17:fd:99:50:ed:17:5f:4b:
         9c:88:54:5d:55:3d:6b:64:50:df:c9:ec:4f:b2:27:19:5b:c2:
         21:bd:4e:b9:4f:2a:6d:cf:97:37:0d:58:6f:81:84:57:57:97:
         7c:a1:67:e7:7d:e6:fb:8e:99:55:8f:81:3e:ce:74:02:47:b8:
         67:e4:6d:ee:3d:93:b1:34:48:2c:e6:d8:d7:4a:b5:59:d1:a5:
         52:a7:08:30:c0:75:26:0f:21:8c:9a:e1:92:bf:78:27:92:0d:
         92:25:35:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:44:11 2025 by rpki-client