Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
File:                     b-jBYY_6_7LM_1aejqkV2vpNTjY.mft (raw, json)
Hash identifier:          nICkPuD0vAUxiExTCmjlaFHoFf992J1vn7yn5bGMdEk=
Subject key identifier:   83:A1:DC:20:49:BF:58:24:5F:44:15:CC:DF:B1:C0:F9:D4:A8:45:0C
Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36
Certificate issuer:       /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
Manifest number:          E8
Signing time:             Tue 01 Jul 2025 05:53:47 +0000
Manifest this update:     Tue 01 Jul 2025 05:53:47 +0000
Manifest next update:     Tue 08 Jul 2025 05:53:47 +0000
Files and hashes:         1: b-jBYY_6_7LM_1aejqkV2vpNTjY.crl (hash: csAodixPu+52ndmb9lGHLsgjQsh5N8iPCfK1/kzIU+E=)
                          2: 85035A64F0CD11EE8CC1FC16C4F9AE02.roa (hash: 9ZKq+nwt9P9nCI+BvZS/E6A1E5sodaBd/S4ZxhUXp0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl
                          rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91232C2, serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
        Validity
            Not Before: Jul  1 05:53:47 2025 GMT
            Not After : Jul  8 05:53:47 2025 GMT
        Subject: CN=686377eb-13c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:2e:70:8c:89:d4:08:39:de:98:3b:a4:4e:
                    22:90:5c:70:eb:79:92:0a:8e:a2:05:11:90:92:d0:
                    58:60:b5:ff:b9:6e:02:a5:11:96:5e:0a:63:17:ac:
                    f5:61:41:a2:a6:29:30:03:0b:9e:7a:db:84:51:61:
                    dc:f2:91:e4:a2:bd:b1:f2:43:ce:28:f7:0b:4a:48:
                    19:ff:37:47:16:d0:46:ab:bc:8a:41:fc:2b:74:54:
                    51:eb:19:87:8a:37:b8:75:71:6d:96:83:fa:a1:63:
                    ae:9e:05:80:d0:a6:cd:3f:38:31:44:ea:a6:c7:e0:
                    38:ad:14:7c:fe:c2:ca:5a:16:a5:56:c4:44:a3:d6:
                    d3:45:47:8b:62:d4:bd:00:ac:10:e0:ff:69:20:67:
                    e1:97:dd:0d:5e:5b:62:45:e9:db:52:7d:44:6d:17:
                    4e:b0:d6:93:8a:e2:d7:b5:2d:8b:b0:fa:b9:03:8e:
                    23:95:af:72:eb:89:a1:c9:38:8b:d6:a5:12:e7:72:
                    5d:1e:b2:ee:94:70:4a:5d:3e:02:57:6d:79:04:0f:
                    67:78:46:96:b6:02:bf:44:50:58:d3:fa:70:38:61:
                    da:0a:98:70:17:63:ed:1d:e6:50:1d:cd:fa:20:ae:
                    7a:6b:d1:32:8d:c0:b0:4f:ff:c2:6a:55:04:32:fb:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:DC:20:49:BF:58:24:5F:44:15:CC:DF:B1:C0:F9:D4:A8:45:0C
            X509v3 Authority Key Identifier:
                keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:c2:34:e4:6f:90:c0:b2:ff:7d:a2:c7:f1:bf:ed:0e:b8:
         33:e6:54:35:81:e5:f9:25:87:9f:91:48:83:d2:c3:31:48:d1:
         4a:4e:1d:da:f7:42:07:5f:b4:19:0e:06:f4:79:3a:e5:0f:80:
         d9:a8:d1:b5:72:da:c2:ad:9a:63:be:e6:b2:8a:ef:6c:b1:2d:
         f5:99:66:de:fd:64:f4:c4:2f:b4:4b:01:4c:87:f9:4c:3d:f1:
         1a:4c:69:7d:77:08:07:a0:f8:47:b8:74:6b:16:a7:e8:21:c9:
         43:90:a7:8a:90:96:d4:00:90:6b:7c:2d:65:56:1c:44:7a:de:
         5b:a0:52:e4:06:59:07:03:11:48:2f:d8:1a:e4:9f:1d:9c:4d:
         c2:aa:85:11:9b:c4:e7:3b:b2:c6:86:41:ce:02:8a:23:34:5e:
         3d:36:7b:3c:e1:6e:52:23:c2:3b:76:29:b6:50:27:a6:57:8a:
         66:d3:3e:3c:6a:77:5b:cb:88:b0:6f:8b:c4:b5:a3:83:2c:45:
         82:b1:25:bf:62:29:52:e0:d9:ae:e1:0c:01:03:3a:6c:7d:aa:
         ad:73:17:99:90:3f:37:a2:38:d5:7f:15:a0:59:83:c0:89:e8:
         ce:53:2b:23:85:6d:e0:1d:7a:6f:dc:f9:47:ad:a7:e0:0f:51:
         55:34:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:51:56 2025 by rpki-client