Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File:                     bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier:          naCayyphgmCyVg+2ScCFh6RZ+sZ9ajkL40TFvdSUOY4=
Subject key identifier:   B6:17:D6:A0:66:05:12:C9:C0:AE:62:99:EE:E7:40:5B:11:70:53:FA
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer:       /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial:       03BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number:          03BB
Signing time:             Sun 19 Oct 2025 02:39:25 +0000
Manifest this update:     Sun 19 Oct 2025 02:39:25 +0000
Manifest next update:     Sun 26 Oct 2025 02:39:25 +0000
Files and hashes:         1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: /Ge+qEm24YqHXwjTan+36ka1zH0xwsODuV5jCmhHjYI=)
                          2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: Mqskw9Y8RqndiVtB/sczxL2ZoSm43CtM51EkD9hWUXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
                          rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
        Validity
            Not Before: Oct 19 02:39:25 2025 GMT
            Not After : Oct 26 02:39:25 2025 GMT
        Subject: CN=68f44f5d-d2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:42:b4:e1:43:f2:c3:3f:df:91:e4:28:c3:
                    5c:18:a6:c7:96:89:b1:92:ca:0e:49:7e:7c:8b:c0:
                    50:1a:5a:2e:8b:2e:cb:ff:97:83:be:8d:a3:36:92:
                    87:0e:b4:29:79:6f:0f:8a:b9:d2:b9:22:3b:2f:dd:
                    90:69:3d:f4:47:60:cd:ac:97:36:30:4d:8a:75:0a:
                    3c:f6:e2:87:80:50:4a:93:5e:11:39:e5:fb:e0:fd:
                    89:76:a5:a7:36:c3:c6:e5:5b:80:16:3f:52:21:37:
                    a9:5d:81:b0:64:bf:8b:e4:a1:38:b4:dd:29:ec:26:
                    f7:77:28:14:11:04:07:20:c0:8e:3f:d3:80:52:b6:
                    a9:e2:4c:52:8e:4f:93:4c:51:f8:48:e0:34:d2:a1:
                    6e:49:bf:61:e1:95:2a:bd:d3:70:04:85:96:62:77:
                    0c:71:88:17:3a:01:14:60:21:da:55:88:b1:8e:b2:
                    5a:c6:02:33:2d:88:f5:92:58:0b:29:85:1e:ec:49:
                    4e:c3:53:0c:bd:15:85:c8:d4:a5:f1:31:1a:1e:c1:
                    ba:40:08:02:30:a2:47:12:ae:e9:0f:4f:8b:6e:36:
                    85:f1:bd:03:07:26:69:7b:c1:03:33:a6:00:3f:a5:
                    0b:65:25:d6:5a:37:f2:2d:99:dd:3f:8f:2b:b0:3a:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:17:D6:A0:66:05:12:C9:C0:AE:62:99:EE:E7:40:5B:11:70:53:FA
            X509v3 Authority Key Identifier:
                keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b6:f5:97:26:50:86:9f:66:d8:f0:42:ba:5a:11:44:32:b8:
         5c:4e:5c:b1:d6:48:ca:d7:23:29:07:c2:3d:22:ab:35:ea:25:
         1e:5a:72:6e:54:04:bd:55:aa:4f:33:a3:27:35:8b:50:d3:cf:
         ae:20:1e:29:9e:fa:c6:14:cb:c6:e9:45:d6:7b:81:35:82:a5:
         20:8e:f3:c1:e2:76:cd:b5:6e:73:56:76:72:ac:5d:02:c1:99:
         93:50:72:16:c1:2a:02:54:fe:92:db:29:d7:29:94:db:28:8c:
         40:31:49:6c:d7:27:f5:db:11:79:98:0f:d5:0d:5b:9d:e0:21:
         9f:17:f3:ab:89:79:b1:23:88:d3:0c:cb:2a:b3:4a:9d:08:90:
         18:06:cf:12:63:16:36:65:d9:e8:22:f6:6a:56:fc:aa:a0:4f:
         2a:81:ce:30:6e:c0:d8:56:5f:b2:cf:52:fa:9f:59:fc:d4:f8:
         d5:5c:3e:50:25:99:6a:5a:e0:7f:54:ee:c1:31:b1:db:58:9f:
         ee:36:1b:78:b0:e6:07:f1:77:ee:f0:56:ba:68:72:65:5b:4f:
         d7:91:89:83:0f:b4:b8:64:b3:0c:2c:47:38:1e:c9:50:4f:a9:
         a4:dd:52:63:b7:6f:dd:04:fc:6d:a4:ce:39:a8:62:e7:13:44:
         59:30:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:37:01 2025 by rpki-client