Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
File:                     bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json)
Hash identifier:          B/mqzzgIOqXiXY3CAMTcw7nlv9u6BIYYWhjcKnMnnNs=
Subject key identifier:   D2:0B:80:5D:68:4B:24:AF:F8:F3:39:6B:11:2C:05:A5:AD:B2:AE:31
Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Certificate issuer:       /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
Manifest number:          04
Signing time:             Tue 01 Jul 2025 08:59:52 +0000
Manifest this update:     Tue 01 Jul 2025 08:59:52 +0000
Manifest next update:     Tue 08 Jul 2025 08:59:52 +0000
Files and hashes:         1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: aRezOKXXnlTPJlb71R/rg07O3jpMmXQPIEL2xIWtAPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
        Validity
            Not Before: Jul  1 08:59:52 2025 GMT
            Not After : Jul  8 08:59:52 2025 GMT
        Subject: CN=6863a388-5905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:7b:9a:12:d1:73:96:23:27:13:6e:8c:ef:
                    6c:3c:7e:c0:02:b8:20:63:17:90:eb:d8:e2:76:6e:
                    99:50:0b:bd:13:24:ef:ee:76:8e:6b:bb:fe:49:48:
                    d1:c1:e3:61:57:46:6a:b8:42:f2:dc:18:a0:b8:7a:
                    27:36:a4:c2:46:9c:90:e7:54:50:ce:f3:4a:ed:db:
                    2a:3d:1a:7f:34:04:0c:32:f0:72:5a:e8:4b:89:08:
                    b6:78:cc:e5:06:82:d2:42:2d:0c:8f:b0:fd:74:0a:
                    93:96:49:30:16:1d:ca:fe:81:93:dc:a9:63:43:6f:
                    07:1a:32:6b:f3:4f:c6:75:cc:63:ec:c3:fc:a5:f2:
                    b6:1f:1f:89:a6:8b:22:94:6b:47:c4:3c:d2:5c:3c:
                    f9:49:02:72:7c:01:0d:b2:f4:84:8a:5e:1c:4e:b5:
                    5f:3d:57:db:af:03:50:ac:59:ff:32:0d:b2:24:ce:
                    07:0f:c6:5f:98:3b:cd:fe:6a:6f:83:93:99:01:cc:
                    5f:6a:cc:d8:f2:79:77:91:8b:ed:14:a6:6f:7c:74:
                    8e:92:ea:aa:03:e6:1d:40:10:0f:8d:04:d9:75:ea:
                    69:40:32:88:11:21:87:d0:f1:0c:f4:fe:47:8f:13:
                    e1:74:45:31:72:90:4a:d7:f1:d5:69:a9:30:2a:85:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0B:80:5D:68:4B:24:AF:F8:F3:39:6B:11:2C:05:A5:AD:B2:AE:31
            X509v3 Authority Key Identifier:
                keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:63:94:e7:3e:bd:b2:55:c2:a3:2c:f1:f5:83:c0:4c:d6:85:
         9e:e8:d3:59:dd:dd:4d:e7:31:5a:62:d4:ec:d6:e4:db:49:8d:
         5e:d1:d8:ef:e4:77:2c:a4:b4:b1:98:4e:af:6c:40:60:fe:14:
         11:82:2f:d9:51:4a:37:e2:f5:4b:66:09:33:75:0f:1b:b9:a2:
         73:70:8f:4e:ae:f9:61:3c:80:e6:d4:7a:0c:11:c3:bb:91:9a:
         2f:8f:97:bf:71:88:d4:e4:40:c4:5f:00:bd:8e:b1:24:7f:86:
         37:8e:df:4a:50:6b:00:90:89:04:49:d5:1d:58:d0:b3:e5:75:
         0e:c0:6e:6c:f9:04:83:6b:57:9d:bb:aa:af:ab:67:e2:13:1b:
         28:71:c6:60:35:79:b8:e9:44:0f:cb:31:83:13:f0:04:92:d0:
         53:64:4c:5a:7d:78:cc:ed:77:18:f8:23:cf:f5:72:63:55:1b:
         f8:1a:1b:fc:76:4c:0b:73:0f:6a:9f:c1:53:7d:7d:ce:c2:44:
         5a:d3:d1:90:77:f8:dc:31:bb:49:f3:55:f5:ce:66:9f:28:0f:
         09:cf:d4:c0:9f:92:28:70:61:32:91:36:f3:5c:d8:a4:11:44:
         d5:65:41:b6:f1:b7:b2:c3:3e:fb:c9:0f:1b:72:7a:06:b4:4a:
         e4:93:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:57:56 2025 by rpki-client