Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
File:                     -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json)
Hash identifier:          e6SrXie6AIMJb4UXEeNJLAofhDYjSKL/5dLuYrPFPuE=
Subject key identifier:   DB:5C:45:37:C3:43:DA:B1:F3:76:89:E8:F3:B9:FC:17:71:4E:B4:05
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Certificate issuer:       /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial:       100D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
Manifest number:          0FF5
Signing time:             Wed 02 Jul 2025 17:41:24 +0000
Manifest this update:     Wed 02 Jul 2025 17:41:24 +0000
Manifest next update:     Wed 09 Jul 2025 17:41:24 +0000
Files and hashes:         1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: heMr/61F0XSaAK4X887XQ5Tf3f5GcO3CNfckeCrmPYU=)
                          2: F7F18D8C2BA711F09514D439C4F9AE02.roa (hash: RQ31QQqNnbR7hUGab4NBe2n82ZvCRfsZ20QWiB5eLdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
                          rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4109 (0x100d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
        Validity
            Not Before: Jul  2 17:41:24 2025 GMT
            Not After : Jul  9 17:41:24 2025 GMT
        Subject: CN=68656f44-2741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:97:d6:38:12:32:68:d8:29:d4:f8:a6:94:
                    d1:68:7f:57:b2:b6:06:2f:aa:a5:22:60:28:f0:91:
                    ba:30:28:8b:62:d4:79:ba:de:97:36:75:e1:07:b4:
                    47:12:1f:39:8e:f9:ea:82:18:ee:5c:a5:53:5e:de:
                    be:2b:80:39:5e:41:3b:3f:4a:47:75:ab:2b:51:f6:
                    9f:6f:50:9d:58:0c:fc:84:87:73:fc:fe:f4:a2:8f:
                    71:9e:9c:30:b1:e7:38:79:54:80:1b:bf:a4:2b:67:
                    52:b7:b5:21:ae:74:9e:3d:0f:53:6b:f6:f7:8d:21:
                    10:9a:b2:df:b7:da:99:42:d0:17:c6:65:92:eb:9d:
                    2c:5c:7e:f5:00:43:cc:5c:aa:52:be:a2:d8:31:d2:
                    23:eb:78:4d:57:a6:9c:a0:c9:11:53:98:9b:c2:a3:
                    f5:c1:78:c2:11:37:60:b6:af:c9:32:05:51:6d:a3:
                    bd:81:ad:fd:a2:6a:3d:91:5c:de:8c:ae:f9:5d:80:
                    2f:96:5d:c1:1f:2f:65:92:2b:60:a6:d9:58:a7:ea:
                    70:2c:f8:d1:e2:2a:51:b4:8b:77:46:1d:93:4e:88:
                    8c:50:ff:78:5e:cd:c7:7a:c3:02:8a:45:71:cd:10:
                    83:3a:b5:4d:ff:90:ef:58:a7:d4:dd:98:b7:72:8d:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5C:45:37:C3:43:DA:B1:F3:76:89:E8:F3:B9:FC:17:71:4E:B4:05
            X509v3 Authority Key Identifier:
                keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:29:43:11:0e:ff:b9:fc:c5:b9:97:e9:4a:c4:7a:2a:81:02:
         4b:bb:e8:55:b5:51:cf:fe:5a:6d:97:47:b0:ad:61:6a:69:51:
         17:ea:7a:38:70:ec:84:bc:38:f1:81:a3:ba:95:44:c2:29:9c:
         fd:55:a2:1d:b6:57:89:6a:5b:9d:5e:e4:5e:bb:4e:87:7d:2e:
         65:49:13:02:14:26:de:88:ed:56:d3:bf:29:04:ae:f4:5c:8f:
         a2:ad:7e:e8:b2:f0:f1:ff:c6:bb:72:b1:aa:f4:eb:c1:8f:48:
         4c:a2:20:d2:6f:1d:6b:16:81:9d:31:db:d6:f2:b3:c0:e1:7f:
         41:5b:4a:c9:5a:03:b1:a6:2e:d7:cf:50:47:70:5b:b9:58:a6:
         85:5b:67:83:ea:48:e6:b8:7a:ba:28:0b:88:f6:2b:a5:d7:eb:
         51:65:1b:59:f1:c0:8a:f2:38:22:fa:91:74:c9:32:d6:04:ee:
         49:c5:bb:26:5a:69:b9:65:08:01:3c:54:9e:2c:98:36:a5:53:
         40:d3:68:0a:2b:55:52:1c:f6:31:d1:bc:6d:bd:1c:50:c5:a5:
         97:13:63:2b:7a:46:5f:10:23:db:bc:74:f6:72:c4:80:c4:2f:
         9d:ff:f9:2e:37:b1:12:3e:16:ec:15:d6:6a:b4:0d:e8:cb:1e:
         1e:09:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:48:56 2025 by rpki-client