Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
File:                     bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json)
Hash identifier:          S7rAeoQbww/PF70fsoUqxMxhk+UvZAewuDOEZ1wK9yM=
Subject key identifier:   C8:48:8C:8D:8B:45:66:FF:C1:78:D7:C3:57:1E:9D:F1:C8:EC:C5:85
Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Certificate issuer:       /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
Manifest number:          0264
Signing time:             Sat 09 Aug 2025 02:18:54 +0000
Manifest this update:     Sat 09 Aug 2025 02:18:53 +0000
Manifest next update:     Sat 16 Aug 2025 02:18:53 +0000
Files and hashes:         1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: 6PTtZGXJYOK/NPQ05U2HjMcy5/eelVjwM7lSf60wd24=)
                          2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
        Validity
            Not Before: Aug  9 02:18:53 2025 GMT
            Not After : Aug 16 02:18:53 2025 GMT
        Subject: CN=6896b00d-e6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:fb:64:21:a4:e2:c2:f8:83:f4:88:87:a5:
                    90:de:fa:ad:ff:61:d9:0a:d4:3e:9e:39:eb:38:9a:
                    72:9b:a2:c8:e1:87:b8:68:65:37:a1:09:3a:f5:a9:
                    7a:d7:84:67:c2:dc:49:8c:d2:f9:e8:c1:c0:a0:40:
                    77:fb:4b:60:a6:f8:a5:be:40:8f:d6:1a:3a:99:f3:
                    7f:10:84:76:90:cb:e7:48:e1:2e:48:db:8f:80:95:
                    2d:0f:13:30:cc:80:62:25:e3:00:1c:4e:78:45:0d:
                    f7:0f:8c:76:ae:c3:3b:01:d8:ff:84:2d:65:bf:4e:
                    dd:c5:ca:8a:98:23:96:3d:7c:51:36:e4:d4:00:37:
                    50:1a:58:13:bd:70:ab:61:22:fa:bf:c6:7b:81:39:
                    0e:ff:c3:31:6d:c2:dc:5b:f7:f0:2b:0c:91:8b:72:
                    4c:64:d6:36:58:74:c3:34:a8:23:d3:bf:08:63:7f:
                    cc:f8:3e:a1:ed:61:b9:ae:59:80:0f:70:5b:cd:25:
                    39:33:a2:f2:10:9a:a1:03:f1:75:03:83:fd:1d:c2:
                    24:7e:62:d9:e6:ab:d1:f1:ec:bb:a8:e5:be:bf:3b:
                    06:24:5c:78:5b:2f:c6:27:08:85:61:c8:83:3c:11:
                    d1:c9:7b:54:fa:ce:ce:8f:29:e4:f1:78:c7:86:2d:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:48:8C:8D:8B:45:66:FF:C1:78:D7:C3:57:1E:9D:F1:C8:EC:C5:85
            X509v3 Authority Key Identifier:
                keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:7a:01:43:a7:21:88:64:1d:89:f0:c4:13:18:b9:f8:46:
         c6:c9:1e:c4:21:f0:ec:01:b3:14:d0:6d:8a:d5:c4:d7:8a:69:
         a1:8f:84:ea:7e:8e:ce:21:3b:da:10:8b:15:3a:d4:c7:01:0e:
         25:2e:a1:67:8a:97:78:ca:1d:7b:6e:d4:42:47:51:cb:0e:e9:
         71:b5:1f:7f:cf:21:ff:61:36:88:86:44:1a:1e:ba:e8:6a:90:
         87:32:2f:52:2a:ea:b8:25:04:a6:0b:e7:ca:c2:ac:82:da:33:
         71:05:dd:08:8c:d7:5b:af:01:1f:fc:3f:63:a1:84:92:00:92:
         2c:91:f4:7c:df:97:5a:c7:7c:31:44:06:e4:31:7e:5d:03:00:
         e8:c8:72:2f:e3:bf:fb:bf:ca:48:b1:30:43:83:25:bb:80:6c:
         17:72:40:ef:3d:2f:c3:5f:83:39:c9:08:69:21:c5:26:01:ba:
         4d:15:56:9b:b2:29:9d:e1:65:46:2a:9a:b1:05:ae:bb:63:ed:
         c3:3f:8b:1b:b9:54:7c:ca:57:ff:32:0e:6c:12:e8:59:bf:70:
         2f:08:d9:60:c8:41:e5:ed:e2:a6:e8:ae:76:37:4b:2f:8d:b5:
         97:ed:21:ff:a1:c6:37:12:0d:1a:60:da:12:84:cc:83:dd:1d:
         65:17:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:04:11 2025 by rpki-client