Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File:                     bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier:          Mr6SKqs3uBX6vMXE5rXmWutjPICWN/oMejhuBQfZqqs=
Subject key identifier:   2C:FF:17:32:16:50:F5:23:3B:40:9C:CE:FE:73:D4:53:60:F7:FA:A9
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number:          A0
Signing time:             Sat 19 Jul 2025 06:40:21 +0000
Manifest this update:     Sat 19 Jul 2025 06:40:21 +0000
Manifest next update:     Sat 26 Jul 2025 06:40:21 +0000
Files and hashes:         1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: 2wgMsxsfdM+jnhulnZraQOzjpyamzUtY0sGaKlv/I3A=)
                          2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=)
                          3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Jul 19 06:40:21 2025 GMT
            Not After : Jul 26 06:40:21 2025 GMT
        Subject: CN=687b3dd5-8d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:1a:c6:97:bb:e1:71:06:c8:03:1d:9c:d6:
                    02:24:87:e1:f1:1b:37:f4:62:20:8a:5c:c8:ea:4b:
                    88:7c:00:7d:0a:bd:3a:ba:df:6f:40:a2:80:54:42:
                    a7:45:11:76:cc:84:35:8d:da:5e:ef:14:17:72:0c:
                    cb:97:a8:0e:b4:41:56:2f:07:68:cf:6c:a9:87:74:
                    47:52:6c:0e:0c:1e:8c:17:29:05:6e:c6:ab:5a:04:
                    60:35:d6:2b:dc:31:c1:7d:33:62:a6:a9:47:c1:80:
                    26:14:9a:93:af:e9:3a:f8:03:f8:e0:ba:61:c9:04:
                    62:d3:e8:ef:65:48:20:75:30:9a:f8:e0:68:6f:c3:
                    80:2a:50:74:c9:81:30:67:61:f0:8f:08:f2:f3:c4:
                    b9:62:3a:12:18:18:55:aa:91:bb:87:46:81:36:81:
                    7c:cd:34:fd:31:55:7f:c8:c0:69:cd:30:86:fc:16:
                    40:53:3f:f7:cd:e6:4f:0e:33:84:7a:20:9a:93:a6:
                    ed:05:d1:7d:3d:ff:85:fd:65:e0:34:e9:d1:f4:75:
                    df:b2:e7:61:ca:86:33:aa:33:23:ea:d7:36:b6:c6:
                    32:1b:71:21:b3:d1:5b:9c:b3:ba:32:90:84:09:0c:
                    10:ba:86:93:a5:70:5c:12:49:07:0c:c6:a4:b1:37:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FF:17:32:16:50:F5:23:3B:40:9C:CE:FE:73:D4:53:60:F7:FA:A9
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:b6:c3:15:37:7c:9f:01:75:a3:92:32:94:c6:ac:1e:7a:
         5c:17:c0:14:ae:40:0f:c6:5c:26:ff:b7:f1:5c:03:3d:e9:fc:
         2e:ab:fc:db:52:c3:42:a8:87:f8:60:dd:8d:45:49:50:8b:4a:
         43:15:a2:07:39:76:77:64:4e:ac:96:cb:c4:00:98:43:dc:cc:
         18:e3:64:99:ee:73:fb:9d:7a:7f:6d:88:3c:f7:e0:3f:76:7a:
         63:74:15:39:9a:82:94:7a:fc:b0:9d:90:a3:c9:4d:2d:72:ee:
         78:8f:9f:5b:89:8f:28:ef:24:99:bd:3a:27:e0:53:6d:0f:bb:
         0f:93:5e:35:cf:23:6a:b1:34:62:ac:52:fe:95:cf:a1:a3:12:
         f0:84:d9:74:35:1c:e5:a8:83:ba:40:38:19:5c:22:99:06:b7:
         da:fd:ed:14:7b:56:82:5d:ff:e0:3d:dc:05:6b:78:17:a0:e8:
         a5:6e:29:e2:d7:a7:ba:18:9a:1f:59:3f:49:72:e1:ce:5b:d7:
         54:da:f3:d9:5a:0c:69:af:4e:e8:50:c5:a4:ce:8f:69:81:0a:
         74:21:19:33:f0:7e:73:4f:6b:0f:23:1a:c8:69:47:cd:38:d3:
         b0:21:b3:ee:8a:fd:46:ec:0e:98:3a:52:3f:03:5c:71:c5:47:
         0b:28:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:23:21 2025 by rpki-client