Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
File:                     byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft (raw, json)
Hash identifier:          sZJyvDzxUOCzASIQmI1SuyTEa3hUvxolBZfm6RU4hpI=
Subject key identifier:   0A:4F:9B:97:76:BB:B0:31:6C:62:8F:CC:6E:09:BB:27:7E:48:D7:D5
Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
Certificate issuer:       /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Certificate serial:       0BF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
Manifest number:          0BE1
Signing time:             Sat 26 Jul 2025 19:02:01 +0000
Manifest this update:     Sat 26 Jul 2025 19:02:01 +0000
Manifest next update:     Sat 02 Aug 2025 19:02:01 +0000
Files and hashes:         1: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl (hash: uexwRbZYJA/5JGhAsVcl8OedVE7vYa5H51PiOKPGvaM=)
                          2: 54B32544D84711EF81BD1E0BC4F9AE02.roa (hash: n/Sc1HZXxr+QB2+UH8INg78Itmv5yzjeOuf4NXzLeAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
                          rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 02 Aug 2025 19:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3061 (0xbf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
        Validity
            Not Before: Jul 26 19:02:01 2025 GMT
            Not After : Aug  2 19:02:01 2025 GMT
        Subject: CN=68852629-0dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:22:b1:7c:61:44:2a:06:ec:79:05:b1:e6:
                    f0:77:23:28:f5:f2:0c:0c:6b:9c:55:09:e8:09:e4:
                    c5:f3:8d:f4:ff:29:a1:48:0c:9f:46:af:7a:32:ea:
                    bc:af:99:7b:83:1c:93:35:75:d1:3f:b8:cd:9d:79:
                    4d:1c:a3:e9:31:e3:03:9d:c1:ce:2d:c1:6e:30:b7:
                    f0:9e:61:5c:bf:d5:9c:94:71:71:3c:ec:3f:ae:a5:
                    6f:30:41:b7:46:fb:f6:22:e4:76:9b:02:3c:1c:26:
                    01:98:ef:4d:b4:00:38:e7:f5:30:af:fc:98:08:df:
                    f5:3e:8f:b0:80:86:91:0b:41:ea:56:66:10:22:e0:
                    ff:f9:e5:3c:4b:ea:c8:8d:e9:8d:d2:ca:43:4e:40:
                    9d:fe:ec:a2:74:6c:6f:24:6d:d6:7c:e9:9f:5e:22:
                    4e:02:be:c7:2b:62:5f:2a:f6:84:06:37:64:64:fe:
                    3a:99:f5:00:79:22:1a:eb:46:b9:d7:6c:e7:ae:fa:
                    f9:b7:f4:4c:8c:16:75:f0:2d:81:4f:9f:2d:6d:07:
                    a3:eb:95:b7:3f:2f:8e:95:54:0b:ea:2e:63:c0:48:
                    87:70:0a:13:6b:90:1e:b7:8a:6a:22:7b:60:cc:0d:
                    24:6d:d3:33:f7:5c:8a:0e:11:5d:07:0c:f8:ed:7e:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4F:9B:97:76:BB:B0:31:6C:62:8F:CC:6E:09:BB:27:7E:48:D7:D5
            X509v3 Authority Key Identifier:
                keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f2:31:7b:ed:8a:56:b1:cf:f5:ae:9a:4c:56:bd:6c:9e:bd:
         0c:e4:9a:4e:b4:df:aa:37:e5:84:30:6e:37:1f:b0:3e:fa:58:
         fb:18:e1:c8:12:fa:03:96:6c:41:4c:11:0f:53:34:91:c6:9c:
         b0:e8:83:6b:6c:e7:fb:de:d5:e1:be:22:2c:89:b8:04:23:0d:
         13:b8:02:2c:c3:7a:44:0f:3f:d3:0c:df:86:14:7a:4e:8b:12:
         b9:2e:3a:d7:14:6f:07:b0:3e:23:5d:f0:0c:a8:db:e8:7c:87:
         cc:ba:1a:31:cc:74:85:98:af:e3:12:26:be:27:28:c1:10:65:
         35:e6:1c:86:aa:9a:19:21:87:47:43:41:d6:8e:0e:47:ad:bf:
         b3:4d:ee:69:eb:03:c3:d5:63:c3:73:8e:03:f9:82:db:fc:e4:
         1f:1e:7c:28:e3:9e:c9:bc:82:77:59:89:26:ff:72:23:a0:7a:
         30:1c:92:9a:ac:f0:96:22:43:f4:7a:45:be:36:df:18:cb:47:
         dc:83:c6:a7:ca:20:c3:c0:a8:e4:2f:99:b5:93:95:7a:8d:a5:
         ab:d9:73:d0:d9:dc:16:9d:ad:c6:b4:2e:d0:58:4e:c5:3e:0b:
         f2:e2:09:5a:6f:ae:9f:78:cb:f2:46:94:b5:06:36:36:ae:31:
         6e:94:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:22:19 2025 by rpki-client