Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File:                     bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier:          I8593Xl+NWm3tsbLh2WbhOUhmFE+5FeTATpxyLfJ5Ew=
Subject key identifier:   21:99:52:05:2B:B5:37:D5:4B:B9:28:A2:57:90:35:89:53:77:4D:F0
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer:       /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial:       03A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number:          039E
Signing time:             Sat 23 Aug 2025 01:01:05 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:05 +0000
Manifest next update:     Sat 30 Aug 2025 01:01:04 +0000
Files and hashes:         1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: 9139B61Pgh6Pa709iTkGXvYm58f+YC8L4LHyxbapF/I=)
                          2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: Mqskw9Y8RqndiVtB/sczxL2ZoSm43CtM51EkD9hWUXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
                          rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
        Validity
            Not Before: Aug 23 01:01:05 2025 GMT
            Not After : Aug 30 01:01:04 2025 GMT
        Subject: CN=68a912d1-5399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:d1:80:04:fc:d0:07:4a:54:ad:71:c6:e3:
                    61:5b:2b:7b:3c:35:c4:53:30:c7:29:b8:3a:0f:c9:
                    37:03:db:89:ee:54:1d:a4:ed:4e:01:92:6b:a2:47:
                    a7:aa:3d:ec:84:0e:e5:bb:66:fd:67:d6:f8:ad:af:
                    e0:1b:84:35:8d:6d:8a:38:d3:6c:ce:e8:d2:e1:0c:
                    f3:8e:8a:55:f2:d9:2d:dc:44:e4:be:51:c8:8f:84:
                    a0:bd:94:a6:d6:26:fa:9f:10:b4:24:6d:c8:13:44:
                    49:4b:5f:13:3d:1f:31:90:a9:a7:5c:3a:fe:e0:bb:
                    73:17:4c:fb:a7:10:b3:2d:23:7b:81:de:44:c7:6c:
                    9e:de:93:d1:da:fe:13:80:99:33:b1:a1:86:35:1b:
                    16:b2:f3:68:92:2a:f0:eb:15:4d:58:8d:e3:ec:4f:
                    a6:4e:32:aa:f0:dc:f9:4e:16:90:e7:dc:99:d0:d4:
                    2e:8f:02:00:88:d2:2a:be:e5:02:69:8d:c6:69:33:
                    e8:3a:c6:ba:0c:79:0f:77:62:c3:5a:e1:d8:b8:95:
                    35:03:61:fb:29:15:a9:79:42:b4:3e:72:57:e2:e6:
                    be:99:df:fb:93:e9:74:a1:3f:bf:ca:ea:c3:30:e8:
                    fa:9d:e8:63:7f:70:e7:56:8b:95:60:4f:da:6e:7b:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:99:52:05:2B:B5:37:D5:4B:B9:28:A2:57:90:35:89:53:77:4D:F0
            X509v3 Authority Key Identifier:
                keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:67:65:03:06:84:91:2a:42:f4:9f:12:12:0f:2d:3b:08:51:
         94:4a:e5:8a:33:9b:6e:8a:62:51:03:91:b6:db:23:f1:6b:4f:
         0a:77:6c:7f:50:eb:45:ca:5c:b8:83:a4:38:bc:f6:ce:41:dc:
         46:52:51:6c:7d:b6:82:96:ba:00:e5:58:8a:b9:49:16:1d:8a:
         20:89:f0:b6:89:7c:6a:7a:f7:39:11:3e:9b:fc:d7:11:00:c7:
         43:78:1a:ad:f7:3e:3a:c1:16:55:73:43:7d:1c:ce:08:c8:9d:
         61:64:46:f0:aa:98:c5:86:c6:6f:b3:64:e2:f0:60:05:ce:4f:
         e1:8d:06:89:c1:8a:af:f4:59:92:6c:a4:1a:d5:32:d2:b5:33:
         5e:60:91:f6:51:eb:e6:ec:b8:0c:76:df:83:ad:2c:2b:50:fb:
         d4:f8:1c:e0:44:f3:e7:ec:98:d3:ed:24:bf:b0:35:6a:c4:d0:
         22:ed:d3:a4:e0:10:9c:1b:61:c6:37:67:20:da:0a:57:e0:6e:
         eb:72:41:9e:17:9e:fd:d7:31:c0:ce:da:2b:ed:59:bc:d5:63:
         e0:45:c9:c7:74:a7:39:24:dc:f2:ee:7e:b4:d3:7a:4d:a8:79:
         61:98:b1:5a:b0:b4:94:0e:22:9b:5a:d6:31:c2:35:21:1e:47:
         13:2f:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:16:12 2025 by rpki-client