Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File:                     Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier:          myu8POiMzWqGTtUKcyYr3jRT2YvYrwN+6z4nwa1urRE=
Subject key identifier:   E3:94:D8:5F:B9:4D:01:E6:26:19:97:78:8F:62:8E:9F:8B:FB:C9:76
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       07FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number:          07E6
Signing time:             Thu 04 Sep 2025 21:24:38 +0000
Manifest this update:     Thu 04 Sep 2025 21:24:37 +0000
Manifest next update:     Thu 11 Sep 2025 21:24:37 +0000
Files and hashes:         1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: uqtuqjjHCuzyqDa8DDJu+UH5SXsm5l/ov2L8TdjzLgQ=)
                          2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: FmrrPxT3AQS1QsODrOl0Mag5fJkdo8yw7npJe5EvI48=)
                          3: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: XaSGJdVmQFwnCd+b3KdpqRusxazGj+qlh/KndRTEPfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 21:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Sep  4 21:24:37 2025 GMT
            Not After : Sep 11 21:24:37 2025 GMT
        Subject: CN=68ba0396-0041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:79:cb:0d:9a:df:7e:22:b7:6b:ca:e5:2b:
                    73:51:04:64:c8:86:8a:f3:c7:2b:99:b7:e7:0f:fc:
                    1d:29:b0:2d:6f:b6:51:f7:e3:e2:a8:b1:76:d6:c1:
                    27:70:f5:07:de:f3:c2:0f:df:bf:59:1e:33:49:5a:
                    81:39:e3:2d:21:83:87:61:22:55:e2:69:11:9e:82:
                    16:1b:64:8c:72:c4:96:f8:21:5f:a7:90:11:a5:ed:
                    11:33:c9:99:8e:39:68:93:28:74:b3:ab:2f:e7:31:
                    d0:07:b7:0c:b9:e2:c1:b3:32:f4:7c:df:5b:20:18:
                    77:64:ce:42:a1:f4:c2:16:7e:4a:9d:06:2d:56:2a:
                    c9:58:d8:a8:41:8b:09:cd:33:4d:d7:3f:fa:bc:4e:
                    8e:1a:eb:e5:9d:bb:9f:60:19:42:ff:4d:00:e9:5b:
                    28:37:5a:48:1f:70:1b:b7:8d:29:f3:9f:90:31:7f:
                    57:6e:a8:bf:40:92:5e:b2:01:99:7e:79:cf:87:c3:
                    02:45:fd:5f:b5:19:f7:e6:ad:c1:48:89:a3:67:a9:
                    f8:3d:7c:65:f6:f6:ca:45:dc:c2:0b:6e:a2:70:6d:
                    ce:1a:d2:ab:6d:aa:00:fb:fc:6e:4c:77:bf:ff:9f:
                    f3:87:1c:c9:38:76:a1:7d:d0:56:e7:e1:3d:66:2e:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:94:D8:5F:B9:4D:01:E6:26:19:97:78:8F:62:8E:9F:8B:FB:C9:76
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:26:eb:fb:61:37:27:ba:98:ee:28:34:cd:53:13:d4:a9:83:
         ee:e4:bf:56:c4:f5:07:9d:aa:6e:60:d3:7f:29:00:a8:64:df:
         7a:75:2d:d0:5e:e7:97:c7:b0:85:df:26:5c:d3:b0:a5:a2:ac:
         53:d7:17:5c:88:e5:33:ad:31:1d:7e:48:01:71:14:cb:a1:bf:
         eb:d2:a5:8a:59:1e:80:32:fc:e4:ff:43:65:6a:0b:d5:ed:ef:
         b2:c9:49:da:7e:3e:1e:09:35:7f:b5:6d:52:b7:da:49:70:47:
         5a:db:dd:d4:a0:4a:8a:b2:54:f6:2d:7e:e0:f5:cf:fd:d9:dd:
         bd:b6:cc:e5:b8:69:76:05:e0:fa:4d:f9:cc:86:03:5e:8a:29:
         ef:cc:c4:d1:32:be:d0:ef:a9:29:73:a6:eb:87:72:25:b7:7a:
         bc:6d:9a:cd:55:e0:b6:02:8a:e6:41:52:2a:b1:f3:ee:6b:b6:
         1c:e0:3b:f5:f3:f0:db:4f:c4:39:5b:a7:08:15:da:f9:16:bf:
         26:60:8e:1c:aa:5e:58:81:0e:d8:ee:22:af:6f:54:15:71:7c:
         3e:64:f6:fc:f6:ef:73:f9:b4:ca:c0:b4:5f:fb:03:86:a2:6f:
         49:72:04:f3:7c:e0:d4:9f:27:d6:5c:71:85:65:20:d2:7e:d3:
         20:c8:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:15:41 2025 by rpki-client