Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          Fuga0yCZgKYEnrbHKWILKGHVTqa03e7x1tlRW4yY3Sg=
Subject key identifier:   D5:6D:32:A2:C8:0B:56:15:C6:13:DB:1F:75:37:7E:44:92:8A:30:E6
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       08E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          08C1
Signing time:             Fri 30 May 2025 20:46:22 +0000
Manifest this update:     Fri 30 May 2025 20:46:22 +0000
Manifest next update:     Fri 06 Jun 2025 20:46:22 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: Blgdmb59zdwo0mxyfEd/4VUtHrE0kLX1SZxzqcS8pCc=)
                          2: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: TccZk/TGvx3r9QdnASoZVSxv2kMWJg57Q5cy6O+RFSA=)
                          3: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: ty5BYEXKZV5AWkkmYV4pnoWKf56lpR/zLBDndr/xc/8=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: fcDSO/sb2ishtHrFu2bzf2l9xwmLRSMg0lfcyJWjJ+k=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: lUm2TNPxrCXgL1T7LIO3Y79aFpYIYcK/d2SLX4eq438=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: May 30 20:46:22 2025 GMT
            Not After : Jun  6 20:46:22 2025 GMT
        Subject: CN=683a191e-6c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:43:a2:27:bf:4f:c0:2b:de:83:99:87:c1:
                    e4:b8:20:b2:5f:a4:34:87:4e:4e:48:0c:0d:07:31:
                    e7:74:32:bb:42:18:e6:7c:71:57:04:96:d7:65:e2:
                    7f:7e:5d:82:1e:03:e9:59:b8:87:e9:ec:fc:0e:19:
                    68:ff:58:3e:07:c6:2a:dd:bf:f4:34:a0:cd:1b:75:
                    58:14:e7:b1:9e:d0:98:c1:2e:70:d9:e1:97:74:8c:
                    bb:07:e5:ff:dd:09:b2:7d:9e:fa:1f:5a:6a:21:bd:
                    e1:12:9f:c2:57:3a:a8:f9:b3:a1:63:b2:da:7c:bf:
                    0c:b2:15:7b:01:0e:64:02:33:46:0c:07:02:3b:a0:
                    64:72:9b:d9:72:b7:75:84:df:b9:34:94:21:71:a0:
                    7c:b0:3d:c8:9b:d1:e2:f4:d9:35:f4:89:bd:61:52:
                    bb:fb:c2:c7:ff:3e:ac:8c:c2:f1:c2:64:d7:6b:af:
                    4a:a5:9b:4c:95:71:73:bf:b7:d2:b9:fe:50:ae:21:
                    72:bb:96:41:30:71:d4:bb:d0:bd:8c:56:be:2b:8f:
                    1e:cd:68:6f:50:d9:22:46:69:68:19:0e:40:99:63:
                    22:58:31:1b:96:05:59:cf:9a:75:cd:99:55:b3:d0:
                    90:6f:4f:74:b7:3b:b3:18:ca:62:8b:cc:d0:39:31:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6D:32:A2:C8:0B:56:15:C6:13:DB:1F:75:37:7E:44:92:8A:30:E6
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:70:2b:95:80:48:fd:ee:fb:e6:d8:43:84:05:ef:44:78:b7:
         94:30:7f:08:55:99:ec:7d:09:48:8c:eb:e9:ba:bf:77:84:39:
         e9:b6:3d:b6:1b:9e:cc:5e:96:5e:b2:05:c9:cd:e9:30:3d:88:
         66:fc:0a:11:93:4c:16:c6:52:89:38:af:76:a6:76:51:2c:77:
         c0:c3:5d:3e:1c:b4:29:d7:ad:61:87:2a:47:b9:31:88:dd:ec:
         01:f7:54:88:88:fa:83:43:2e:59:72:cb:74:ee:35:51:d0:4d:
         b2:b2:f6:cb:eb:6e:64:3f:b3:33:fe:91:ec:4c:59:fc:48:e6:
         59:9f:02:be:7e:dd:ea:56:23:63:9c:07:00:8b:6d:c9:67:50:
         67:9a:6a:4b:fa:ff:07:67:83:92:5d:ce:5f:b0:b6:ff:96:47:
         18:4a:9c:30:c4:9d:ad:28:13:84:2e:6c:5b:55:0f:5f:05:7d:
         5d:74:f8:be:d6:e9:6c:17:59:8c:e0:8e:cf:6e:f5:e4:3e:8f:
         bf:fb:64:75:3c:65:eb:2d:25:c7:78:93:c0:9b:28:ee:b1:4e:
         fb:eb:e9:56:c8:b0:64:8b:76:3e:60:b4:0c:16:a7:9f:9b:37:
         47:2d:60:47:38:27:10:0a:0d:f2:84:30:d8:e7:fd:8b:b1:22:
         41:31:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:57:46 2025 by rpki-client