Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File:                     bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier:          n5ivWSxBxcYPTnREfYVbOS5ODiI6U27GNKBZG9+IkYw=
Subject key identifier:   13:E6:90:BB:B6:FB:4E:55:AC:84:56:CD:E5:FF:F4:B5:7D:A7:DD:BD
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number:          98
Signing time:             Thu 03 Jul 2025 06:44:46 +0000
Manifest this update:     Thu 03 Jul 2025 06:44:45 +0000
Manifest next update:     Thu 10 Jul 2025 06:44:45 +0000
Files and hashes:         1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: 4YhwZZku4G5LTmeyHz/30C7Xxtfozl9+ud1ycnNj9OI=)
                          2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=)
                          3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Jul  3 06:44:45 2025 GMT
            Not After : Jul 10 06:44:45 2025 GMT
        Subject: CN=686626de-1375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:40:83:80:2e:d2:95:33:96:5b:5d:4e:6d:
                    5b:33:4a:8e:1e:6f:e6:4b:e6:a7:89:1f:b0:f9:ea:
                    6d:ae:16:68:b4:b9:b4:41:08:7f:0d:a8:d5:83:1b:
                    b1:16:7d:ef:aa:14:22:39:37:8b:08:8a:37:6d:23:
                    2d:d0:3c:6d:43:6c:95:4c:f5:04:94:8a:96:dd:9a:
                    f6:84:04:8a:f0:4d:7b:72:b9:bb:5c:81:fd:3b:ba:
                    e8:2d:33:9d:bd:d1:49:1c:9e:15:06:1a:76:6f:70:
                    18:b4:df:ef:a5:9c:a2:e5:4e:57:66:1e:77:85:bf:
                    a9:17:a9:e7:8a:56:cf:ff:4c:dd:7d:6d:fb:0d:3a:
                    40:26:d3:9d:af:ea:0b:13:16:b7:ec:7b:67:02:8d:
                    be:59:c4:57:dd:ec:b1:06:6f:86:7f:9f:5b:a4:35:
                    01:4b:0e:02:85:df:e4:f9:46:09:13:85:4c:3e:5f:
                    2a:3e:cd:96:e9:1b:30:c7:04:f6:4b:18:0a:92:a5:
                    69:42:9c:7a:d9:ee:da:19:c3:65:05:53:f5:f4:90:
                    5c:10:44:a1:6a:20:a7:56:60:76:ff:d6:30:4d:b8:
                    c1:3d:a7:fc:6a:c0:24:ec:33:53:79:39:87:37:da:
                    56:2b:c4:af:72:84:11:ca:0e:0d:fd:a4:80:12:cc:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E6:90:BB:B6:FB:4E:55:AC:84:56:CD:E5:FF:F4:B5:7D:A7:DD:BD
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:46:82:66:29:ab:54:a5:df:31:f3:5f:25:42:11:e1:bf:
         6a:8f:20:42:90:1b:02:af:91:7c:5f:9e:b4:b2:98:48:61:f9:
         ad:38:2e:06:62:71:66:a0:6d:3c:fd:1c:8e:1c:43:af:9c:3e:
         bd:de:7d:c3:e0:d8:3e:ae:13:a3:e9:fe:b9:86:10:65:6a:71:
         a2:f8:8b:7d:6c:63:21:88:8b:e4:8e:83:44:b5:82:d8:51:7e:
         6d:dd:a5:02:45:ea:a7:99:76:2b:3c:11:46:a5:e8:05:c6:67:
         10:08:f5:10:5a:d5:55:12:fd:df:e0:d2:4b:4c:d1:c0:27:c2:
         ce:0a:ee:a8:55:09:c3:d7:77:54:a3:cb:62:3e:8c:16:ed:67:
         be:31:2d:47:32:85:d3:ab:9a:df:af:68:5d:fe:9f:67:d1:1f:
         ef:e4:ea:bd:ee:ef:bd:91:83:83:58:d0:a7:16:07:a6:b2:8e:
         75:7c:07:bb:e4:5f:40:72:2f:d9:9e:47:8f:90:26:c3:39:f9:
         69:85:a8:ca:43:dd:aa:82:51:8e:d1:94:56:00:7a:22:82:72:
         2c:10:00:4b:81:a7:8e:e9:78:dd:2c:5c:d8:2d:d1:45:ac:c2:
         cd:90:a6:af:47:40:c8:5d:ce:d2:39:92:79:26:40:e4:7f:0f:
         15:6c:26:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw
MjI3QjkwODYwHhcNMjUwNzAzMDY0NDQ1WhcNMjUwNzEwMDY0NDQ1WjAYMRYwFAYD
VQQDEw02ODY2MjZkZS0xMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnFAg4Au0pUzlltdTm1bM0qOHm/mS+aniR+w+eptrhZotLm0QQh/DajVgxux
Fn3vqhQiOTeLCIo3bSMt0DxtQ2yVTPUElIqW3Zr2hASK8E17crm7XIH9O7roLTOd
vdFJHJ4VBhp2b3AYtN/vpZyi5U5XZh53hb+pF6nnilbP/0zdfW37DTpAJtOdr+oL
Exa37HtnAo2+WcRX3eyxBm+Gf59bpDUBSw4Chd/k+UYJE4VMPl8qPs2W6RswxwT2
SxgKkqVpQpx62e7aGcNlBVP19JBcEEShaiCnVmB2/9YwTbjBPaf8asAk7DNTeTmH
N9pWK8SvcoQRyg4N/aSAEsxMKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPmkLu2
+05VrIRWzeX/9LV9p929MB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2
RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3
VzNKMXNhcHJfZm9DSjdrSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjJUaCZimrVKXfMfNfJUIR4b9qjyBCkBsCr5F8X560sphIYfmtOC4G
YnFmoG08/RyOHEOvnD693n3D4Ng+rhOj6f65hhBlanGi+It9bGMhiIvkjoNEtYLY
UX5t3aUCReqnmXYrPBFGpegFxmcQCPUQWtVVEv3f4NJLTNHAJ8LOCu6oVQnD13dU
o8tiPowW7We+MS1HMoXTq5rfr2hd/p9n0R/v5Oq97u+9kYODWNCnFgemso51fAe7
5F9Aci/ZnkePkCbDOflphajKQ92qglGO0ZRWAHoignIsEABLgaeO6XjdLFzYLdFF
rMLNkKavR0DIXc7SOZJ5JkDkfw8VbCbS
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:17:08 2025 by rpki-client