Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          AAjW1Qr4jKU3UhugiZZF+0HkF1ynoW6lf2o4LO2GmAM=
Subject key identifier:   78:56:59:EA:A4:31:3E:50:05:B9:20:7C:2E:FB:28:E8:B0:F4:D3:08
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0BCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0BC3
Signing time:             Fri 04 Jul 2025 19:14:54 +0000
Manifest this update:     Fri 04 Jul 2025 19:14:54 +0000
Manifest next update:     Fri 11 Jul 2025 19:14:54 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: a/JZXR6zfZ45ajtzp6fB2Pjd3uiNe+YYoe+uU+wj1Rs=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3018 (0xbca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: Jul  4 19:14:54 2025 GMT
            Not After : Jul 11 19:14:54 2025 GMT
        Subject: CN=6868282e-f919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:6c:8a:b9:38:29:7c:0d:c3:31:81:8f:6b:
                    11:0f:d9:ba:a6:be:e7:b3:0f:96:b4:64:07:ba:bd:
                    53:1d:98:fa:1d:38:21:29:b1:69:76:f6:5f:36:57:
                    74:1b:d9:2f:73:71:66:7d:c5:07:7e:b6:49:16:d0:
                    1f:33:20:c6:31:61:ce:a0:8f:31:db:89:fa:4d:a5:
                    8a:79:ba:e5:44:f7:2a:f8:c9:df:06:52:85:f2:c9:
                    c0:50:07:2a:c8:b9:93:58:4f:62:87:b6:c7:8d:34:
                    56:c3:3b:17:45:2b:0c:46:a4:08:a3:6f:f2:57:6c:
                    49:e6:57:14:97:4e:25:17:a0:67:50:ce:bf:5a:71:
                    f3:bd:60:a1:a1:e9:d7:63:72:8a:77:08:aa:d1:8f:
                    98:e7:af:bb:5e:2f:e8:a9:e0:92:59:a3:a4:4b:6e:
                    91:a5:bc:a6:21:0b:81:5a:03:c6:de:98:79:a8:f4:
                    fb:d3:6d:14:97:a2:2f:98:6a:d6:47:09:bd:ac:a7:
                    82:64:10:d2:6e:b9:3a:6b:a9:e0:df:99:76:13:66:
                    b3:b1:54:6a:b8:e1:3f:bd:c8:3e:d6:7b:49:29:e5:
                    20:27:63:78:f6:53:d3:16:c1:49:dc:e5:cd:5f:47:
                    2f:0e:05:4b:37:fb:6b:c4:c1:c5:48:45:8e:07:f4:
                    49:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:56:59:EA:A4:31:3E:50:05:B9:20:7C:2E:FB:28:E8:B0:F4:D3:08
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:c1:a0:f7:6d:00:56:b5:98:3c:1d:50:38:53:d7:e8:fa:
         83:2f:cb:4e:46:43:9c:6b:fd:60:95:e9:0e:df:53:f0:8a:7b:
         ab:5b:41:6e:0a:ce:f6:c0:14:8d:d5:c9:9b:bd:76:5d:b5:36:
         f8:a2:f5:26:ed:24:50:e0:64:29:32:1f:55:bc:92:34:38:6b:
         93:e1:27:c1:a9:a6:c5:c7:42:fb:c0:35:4b:50:87:fe:c8:23:
         8b:05:80:9a:fb:9a:a4:65:68:c6:6a:1c:6a:e0:c3:01:74:39:
         6d:1a:49:9d:d2:db:74:fa:3a:ea:7d:c3:ed:02:ea:ed:a7:4c:
         ed:e2:97:d0:2d:d8:9c:23:af:1d:c7:98:56:69:10:d8:80:5e:
         13:35:7e:28:4f:15:62:c1:80:35:1e:76:14:4c:ae:9d:0f:24:
         80:99:3f:04:a9:8c:b6:1f:de:78:0b:bc:31:9a:6a:f5:a6:60:
         83:2b:b0:96:b7:b0:ff:81:5b:28:2e:07:f7:3e:10:52:cd:eb:
         62:c2:75:36:38:68:ea:b5:8e:c6:52:9f:21:80:85:86:16:26:
         a9:19:80:37:a8:79:dd:01:b0:9d:43:f3:38:18:0c:e3:4d:0b:
         e9:bb:41:eb:e2:0a:d8:0d:46:4c:9f:37:a1:88:a9:50:03:0c:
         9c:8c:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 10:09:37 2025 by rpki-client