Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          pPVMjSZ8w/RfEepQoslnoQ3iP33Ou+L5MZnK7I+IGXU=
Subject key identifier:   F9:02:B4:21:9F:BF:A1:32:3C:7B:5E:7C:06:21:AD:35:66:B0:99:80
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       091D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          08F8
Signing time:             Wed 10 Sep 2025 20:37:26 +0000
Manifest this update:     Wed 10 Sep 2025 20:37:25 +0000
Manifest next update:     Wed 17 Sep 2025 20:37:25 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: aWI0Jw9wHZ+1VfBkfbBtI93WMDV2op64BeZhfXFIHA4=)
                          2: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: msZFGBnIHYSZXeDT7DH4CAj1L4B87KVgwcUPKRQ02JQ=)
                          3: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: LkXHGOEMC0cR98o5aw/H6fyBXFOvy/l3dTZCjEtIA+U=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: Z8zcoQtFS3z9ZE1TqMKGoB34rHpti60MXfkV1lqD5Ws=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: LK9G1J83bi3BUz0/qqWD4cotPJRvK4iVMh7A+P/u8DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 20:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Sep 10 20:37:25 2025 GMT
            Not After : Sep 17 20:37:25 2025 GMT
        Subject: CN=68c1e185-0638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:8a:31:46:82:93:22:b1:43:46:52:11:42:
                    7f:f1:b6:a1:30:e7:be:c2:d9:32:f0:43:70:35:14:
                    39:f1:88:49:4e:cc:53:62:62:d9:bc:ef:f6:c6:10:
                    5f:d1:56:f7:6b:db:f4:4f:ca:80:7a:39:33:81:27:
                    aa:a6:a6:01:f9:fe:12:aa:3c:ec:5e:8b:83:56:e6:
                    1a:05:38:8b:ed:28:d3:34:24:a5:5e:09:84:98:64:
                    63:4a:7a:1d:32:d9:d6:e4:d1:2d:b9:76:63:9b:40:
                    d8:c7:2b:c9:92:3e:3e:17:45:6d:df:6f:0a:c2:52:
                    dd:62:5f:ee:9c:dd:85:01:52:b0:6a:58:de:07:2f:
                    9a:60:9c:23:c2:aa:05:86:13:33:c5:50:7b:76:62:
                    4b:b6:0e:73:3d:a3:79:7b:43:0f:1b:69:05:1c:8d:
                    f1:d2:35:68:52:38:c8:ea:07:f3:ec:27:1a:6b:a2:
                    33:38:f2:4d:60:93:f6:97:94:2e:9a:ac:3f:03:38:
                    89:55:8f:a0:08:0e:25:cf:2f:33:ab:3f:76:58:0f:
                    79:3c:27:12:ee:d0:58:69:2b:7b:51:bd:79:b3:38:
                    6f:a9:4b:6d:12:34:bb:34:a9:47:58:15:a6:f0:b7:
                    aa:5a:ce:15:65:0d:22:ed:94:7b:39:34:1f:ff:6f:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:02:B4:21:9F:BF:A1:32:3C:7B:5E:7C:06:21:AD:35:66:B0:99:80
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:97:3d:e3:5e:75:af:78:5f:82:0e:0e:26:a6:23:cf:ed:
         d1:5d:12:aa:1d:81:15:92:1c:4a:ac:b3:f5:9b:9f:95:7e:6d:
         1e:41:71:8c:e9:bc:ad:b6:45:18:6c:78:1a:f0:be:d5:48:27:
         15:21:ec:30:e4:de:7d:07:ad:9e:fc:6d:b9:fb:08:dd:4f:d5:
         83:9e:78:9a:aa:79:48:7e:a5:24:fc:ee:4b:ea:4a:9e:a5:09:
         b5:ff:5a:f3:ac:71:df:a3:64:cd:bb:85:e4:e5:3e:a3:c8:ee:
         b4:37:64:e3:3a:7a:f8:47:bc:c0:f3:fd:d4:e7:a1:77:bf:5e:
         ae:46:fd:c9:94:9e:c8:e6:1f:03:c0:20:56:8a:ec:fe:9a:e1:
         9f:7e:1a:14:c9:1f:01:74:13:4f:56:c3:8e:d5:c9:66:57:25:
         8f:45:86:6d:5b:77:e9:eb:36:c6:90:42:10:33:b6:10:6e:26:
         78:e3:30:10:67:02:98:43:b3:38:c9:7c:92:3c:78:a4:88:3b:
         c6:3b:a2:15:69:ee:04:b9:49:8b:0e:59:03:77:92:8c:96:f7:
         dc:fd:ad:32:83:b9:5c:09:58:82:71:31:a6:75:f2:43:dd:b6:
         fd:bc:e3:f2:2e:ae:a4:08:01:7b:03:2e:40:23:99:2d:d3:a1:
         ce:42:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:52:58 2025 by rpki-client