Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
File:                     bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json)
Hash identifier:          WWI3Lv20bmI0ClkhHdCYfreF0LPX3J0jf94mh0YVnPw=
Subject key identifier:   F4:93:E9:5F:5E:72:90:29:38:D6:18:5B:C6:34:C3:CA:04:EB:E8:7F
Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
Certificate issuer:       /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Certificate serial:       09F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
Manifest number:          09EF
Signing time:             Fri 06 Jun 2025 19:57:06 +0000
Manifest this update:     Fri 06 Jun 2025 19:57:05 +0000
Manifest next update:     Fri 13 Jun 2025 19:57:05 +0000
Files and hashes:         1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: JsSypzZRkkFRDdcXdZDmnvIuylUWhYWsSfCS7aFiX5A=)
                          2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: HX1z061ITJ/Mm5axSNQ3ySg9hGI3PSjhgq8jl6nzC3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 19:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2552 (0x9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
        Validity
            Not Before: Jun  6 19:57:05 2025 GMT
            Not After : Jun 13 19:57:05 2025 GMT
        Subject: CN=68434812-8aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:bc:c0:d0:d1:25:d3:b2:2f:68:2d:e0:4b:
                    7f:66:71:f4:75:cf:81:7f:1f:eb:09:fa:15:f5:99:
                    6a:b4:c1:1d:4e:b2:9c:d5:b7:f7:fb:55:ff:0b:a5:
                    d4:8f:79:03:7d:08:07:9a:bd:d3:54:4f:f0:ee:cf:
                    6d:1a:13:57:4a:0c:cc:76:1c:a9:61:ee:41:9e:09:
                    ec:bb:5b:62:a7:52:a0:3c:2f:d4:8b:cc:a6:ca:eb:
                    ea:c1:a5:e8:00:e8:e6:a1:1e:d1:c8:f4:db:9c:96:
                    55:45:3d:6b:a5:91:63:02:f6:12:25:6b:05:51:83:
                    5d:53:68:da:a0:8f:b9:30:bf:0e:80:bf:f1:4a:26:
                    e2:37:08:0c:7d:1c:d2:c1:90:0a:02:c4:f9:0e:c2:
                    9a:83:e8:ee:dd:c6:2f:5c:a2:76:4e:5f:5d:c6:b6:
                    d6:dd:8e:90:34:e8:11:cf:a3:01:63:ee:61:94:5e:
                    5d:47:24:bf:b4:47:c7:e4:52:d4:70:e3:c4:bf:d9:
                    da:85:4b:d6:8f:42:78:8e:7e:ba:6a:e5:57:c7:7c:
                    ce:0a:a5:fa:4e:6a:bd:35:20:42:63:2f:49:c5:28:
                    bf:c2:97:72:fb:92:e3:35:e9:b9:5a:be:10:fa:34:
                    cc:7d:0f:75:4b:e4:4f:06:ac:3f:f7:fa:03:c4:a2:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:93:E9:5F:5E:72:90:29:38:D6:18:5B:C6:34:C3:CA:04:EB:E8:7F
            X509v3 Authority Key Identifier:
                keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:14:85:67:c4:a6:5e:61:f6:a1:f9:b1:87:a1:00:4f:ac:c7:
         90:70:b8:ff:36:69:b8:47:d6:e4:c1:64:33:63:f1:54:47:fb:
         15:36:dd:15:25:a6:d1:1c:2f:c1:56:d6:c0:96:31:ac:68:03:
         32:9a:ab:cb:3a:9c:df:13:cc:3f:dc:0b:97:70:6b:e8:67:6a:
         fc:6a:54:c3:f7:26:77:38:bd:27:75:14:db:ab:5d:00:84:06:
         a4:32:4b:09:45:d4:d5:2d:f7:e7:72:5a:80:99:be:38:ac:84:
         ea:a0:24:e0:4f:a5:39:2d:0c:65:ed:7a:ee:fd:83:3c:1e:bd:
         3e:c7:33:b2:b1:f3:e5:10:88:31:18:4c:31:94:7e:53:39:ce:
         ac:db:46:a0:0f:59:e5:76:39:95:cf:ae:e2:fd:08:6d:93:1a:
         77:52:e2:30:56:4b:33:33:94:0b:f4:a2:c5:34:fd:e4:ba:be:
         d0:67:18:78:6e:56:60:48:5a:31:ba:d0:2d:c3:34:d1:06:ab:
         e3:c6:69:38:5f:ed:ca:3d:66:e7:0b:e5:27:b4:a5:bf:80:27:
         96:ca:f2:4c:9b:7d:2a:ff:f1:45:8b:6d:46:65:cf:01:0b:5c:
         ed:c4:7a:ff:a5:5d:6a:87:d8:ec:ac:32:47:4a:53:d3:db:ad:
         37:2f:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:00:32 2025 by rpki-client