Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
File:                     BiJAzedW2VtXd-JnqnsGVPg09JM.mft (raw, json)
Hash identifier:          ND+aSu6Nxs6tN4kFQ3wG+we6rC0118g1IdE3j9zueKg=
Subject key identifier:   EF:FB:F1:22:DD:AD:77:1E:78:4A:D1:A5:0D:28:C2:5C:C2:8F:68:AD
Authority key identifier: 06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93
Certificate issuer:       /CN=A919DCE3/serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
Certificate serial:       0676
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
Manifest number:          0671
Signing time:             Sat 06 Sep 2025 22:45:43 +0000
Manifest this update:     Sat 06 Sep 2025 22:45:43 +0000
Manifest next update:     Sat 13 Sep 2025 22:45:43 +0000
Files and hashes:         1: BiJAzedW2VtXd-JnqnsGVPg09JM.crl (hash: xNFgSA5HNuXrVUxmBOUZPd754RCF/GyFw+WiabG+LpI=)
                          2: E9610376903B11EBB91C8B5DC4F9AE02.roa (hash: 8EJ9t0dHzPuImjiYAPoyaHv+e1oWlijq5dSgwTFlJ+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl
                          rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 22:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCE3, serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
        Validity
            Not Before: Sep  6 22:45:43 2025 GMT
            Not After : Sep 13 22:45:43 2025 GMT
        Subject: CN=68bcb997-0f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:26:69:02:d1:f9:4c:ee:10:b9:c2:7a:57:
                    6f:4e:1b:01:d3:8e:eb:e3:d2:25:10:a1:31:a4:a8:
                    89:b8:c4:83:16:03:03:66:7b:83:07:ce:9a:bb:32:
                    ed:4c:52:5c:37:b6:23:ab:88:6f:31:e5:e2:50:e3:
                    51:2d:3e:02:22:b4:a8:9e:f5:ed:3c:b8:21:71:a6:
                    53:64:37:57:4d:2b:ff:f2:3c:67:86:17:b7:5c:c2:
                    c1:1d:db:d7:f9:0a:ee:86:d5:02:84:2a:9c:3e:35:
                    e6:2c:2e:be:36:e7:bf:07:82:1e:60:3f:d8:68:e9:
                    23:87:1b:b0:a1:22:3a:b7:69:c3:3b:fc:96:59:3e:
                    6e:30:2b:ea:be:62:3d:57:c4:ef:b5:26:89:2f:a4:
                    ec:91:78:33:31:5c:a7:9e:7c:6f:d8:5d:c3:cb:6d:
                    46:7a:45:91:55:2e:a6:2d:cf:c5:af:a6:c6:7d:4b:
                    ac:44:94:b8:21:14:02:3c:7d:f5:b5:f0:13:82:6d:
                    9d:2b:73:3f:be:f4:c2:9f:8d:47:df:51:0d:ed:77:
                    5d:9a:0a:c8:af:b7:6e:03:69:c6:cf:d8:ae:ae:d0:
                    a4:64:bc:5b:f9:3d:d9:dd:e8:d6:28:53:a3:a8:7a:
                    3a:c8:3c:5a:14:db:3c:ed:7d:da:8d:11:1c:2e:8e:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FB:F1:22:DD:AD:77:1E:78:4A:D1:A5:0D:28:C2:5C:C2:8F:68:AD
            X509v3 Authority Key Identifier:
                keyid:06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d6:3b:4b:ab:f1:b0:6c:43:11:5c:96:26:68:50:e2:2e:72:
         f4:8e:46:42:a1:6e:12:7a:92:4e:c5:e3:f8:0b:0c:8f:ba:9f:
         b7:1a:94:eb:73:37:6d:21:fd:0c:59:29:7c:f9:3b:02:c0:5e:
         e2:29:e1:61:ed:4e:17:1f:8a:1c:a2:a0:ea:5f:a5:91:cd:de:
         ac:b4:d3:51:c8:a4:0c:30:dc:4e:b0:ad:99:5b:8a:09:8b:c9:
         e0:09:f8:be:c8:6b:6c:61:56:e3:b1:0d:ca:01:be:89:f7:f0:
         d5:6e:68:06:1b:eb:fc:56:01:2b:1d:c7:9c:41:bf:49:53:99:
         e2:77:2c:36:3a:f6:77:24:ec:c4:f1:c9:99:72:7c:84:f7:35:
         a0:d0:33:9e:09:a3:c9:e4:61:76:8d:09:12:e7:99:c0:53:e3:
         78:38:76:04:dd:6b:75:b1:2f:91:35:cc:5b:e0:0d:9a:7f:c3:
         a0:e1:83:1b:f3:12:a7:e0:d8:d6:df:33:57:8a:f7:a6:ea:07:
         2d:6b:4b:24:fb:ef:2b:2d:31:6a:57:78:af:15:55:f1:c5:3b:
         6a:ac:d7:0b:c7:a0:be:03:b0:a2:57:17:e1:16:40:86:35:5d:
         38:f5:10:3a:c8:ad:d0:da:1c:3a:25:71:b8:0f:e6:a5:e2:ed:
         09:75:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:24:01 2025 by rpki-client