Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          6eGwe98I5p4C58sTG/1GQcMT6VLuDhby69tFodi5Rzw=
Subject key identifier:   CE:62:4F:0E:58:B7:F1:3F:66:49:5D:AA:11:F7:0C:F2:F6:E5:72:65
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0BD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0BCC
Signing time:             Tue 22 Jul 2025 19:07:43 +0000
Manifest this update:     Tue 22 Jul 2025 19:07:43 +0000
Manifest next update:     Tue 29 Jul 2025 19:07:43 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: L30c6ZDRzDfkRG/4t1GuSES3z8NH/ZTeDEHIoBjo17g=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 19:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3027 (0xbd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Jul 22 19:07:43 2025 GMT
            Not After : Jul 29 19:07:43 2025 GMT
        Subject: CN=687fe17f-384a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:de:bd:fb:f9:fa:7e:6a:ff:e9:dc:a1:25:
                    0f:49:ca:c8:25:d3:dd:ec:fe:99:41:28:c7:20:08:
                    2d:f6:35:53:11:6f:f0:47:52:04:96:3b:a9:66:e1:
                    e1:2f:fa:9e:88:d3:1e:a1:41:23:54:69:39:e7:77:
                    41:18:30:64:61:c9:f2:35:4d:c9:b7:f8:74:df:af:
                    7c:64:7f:e0:4a:79:b3:08:80:d8:0b:f9:39:4e:fe:
                    54:79:11:64:5d:24:28:b5:77:67:e1:bd:6a:2f:1c:
                    05:e9:21:48:c8:b3:d3:e4:f5:7d:c1:ba:99:f9:51:
                    22:ce:42:c3:0c:77:67:06:07:15:06:d4:13:5a:e0:
                    0f:ea:21:4f:ab:c3:69:72:05:0b:a2:5d:7f:bc:b2:
                    05:40:7c:91:3b:a7:1b:a6:a9:7c:a6:c7:6f:3c:05:
                    dc:55:27:9c:e7:76:a1:c9:50:92:5e:f6:b6:89:83:
                    00:2f:7a:1e:0d:4e:b0:a1:0b:71:d1:dd:9c:53:d1:
                    eb:05:6a:a6:ff:67:88:5a:fc:b5:19:c7:2d:2a:d8:
                    6a:27:d1:89:5d:04:dd:cd:4e:17:49:f0:71:fc:e8:
                    fd:e4:1a:ed:c5:84:f8:76:6c:28:1d:6e:2f:dc:60:
                    4c:d5:a5:8b:bc:ef:fc:3a:e0:92:5b:88:1b:6f:6b:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:62:4F:0E:58:B7:F1:3F:66:49:5D:AA:11:F7:0C:F2:F6:E5:72:65
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:5a:9c:70:82:c2:37:04:8d:20:f0:71:2b:c8:db:a7:c3:
         0d:0c:72:a5:41:2f:93:8c:a1:ff:5b:2e:8c:dd:da:6c:52:ca:
         9f:69:d1:a2:75:1d:3c:56:14:41:65:dc:1b:7f:a1:25:49:a2:
         86:16:9c:86:93:b5:0f:ac:a3:69:6e:a8:e6:f3:f8:6e:da:8b:
         10:48:f2:be:6c:22:4b:8f:6d:52:44:d4:4c:12:dc:a8:3b:6d:
         a0:d6:1d:6d:5b:25:48:c3:fd:31:8a:1b:a4:cc:32:5e:fa:e6:
         ba:94:fb:6b:47:6f:55:74:57:83:ac:62:ff:14:be:cf:70:f9:
         8f:23:af:fb:d3:0e:9e:7f:4a:5a:a6:c9:6e:04:a6:87:98:81:
         ee:9b:0c:36:30:fe:d9:93:53:29:17:54:83:0f:09:18:23:64:
         9a:d8:6c:45:ae:19:35:01:e7:c5:42:1d:58:ba:62:a1:e2:17:
         e6:a3:74:27:4e:47:5c:cd:19:71:73:fe:18:b8:ab:85:b0:1a:
         f8:d2:e8:af:4c:fe:b6:9c:4d:a3:46:7b:97:d5:bb:b6:49:0f:
         0b:15:a9:f9:a8:4d:69:1c:fc:44:fa:45:83:b2:af:9d:9a:f5:
         2b:b0:b1:06:73:c6:c0:3c:c8:6c:8c:22:ad:be:c6:9b:21:c9:
         8c:77:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:16 2025 by rpki-client