Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          gYEYJjh+/FqwDGUBVvqM+uSAwzjSWaUyWQOW6qW2Tqk=
Subject key identifier:   6F:85:28:41:3B:E2:4D:A5:84:EB:26:EC:FD:4A:91:C0:D3:14:F7:EC
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       090D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          08EC
Signing time:             Fri 22 Aug 2025 20:35:08 +0000
Manifest this update:     Fri 22 Aug 2025 20:35:07 +0000
Manifest next update:     Fri 29 Aug 2025 20:35:07 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: X2E93QumV2nTFbtYsngTO6jv/Olp7abhNvvC7obLyBY=)
                          2: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: TccZk/TGvx3r9QdnASoZVSxv2kMWJg57Q5cy6O+RFSA=)
                          3: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: ty5BYEXKZV5AWkkmYV4pnoWKf56lpR/zLBDndr/xc/8=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: fcDSO/sb2ishtHrFu2bzf2l9xwmLRSMg0lfcyJWjJ+k=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: lUm2TNPxrCXgL1T7LIO3Y79aFpYIYcK/d2SLX4eq438=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Aug 22 20:35:07 2025 GMT
            Not After : Aug 29 20:35:07 2025 GMT
        Subject: CN=68a8d47b-ce85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:d0:48:a1:ed:a5:54:f4:55:d2:93:db:e6:
                    98:5c:18:84:57:1f:09:52:81:4e:bf:53:b9:33:cf:
                    20:2c:46:05:8e:14:95:8d:56:d4:3b:75:d6:5c:3b:
                    c4:18:02:bf:d3:d8:70:b1:9a:68:23:2a:37:40:8a:
                    4b:4d:7c:e6:56:ff:38:ad:75:18:91:b1:11:c4:3f:
                    a5:a6:78:c4:4d:80:a2:84:46:75:20:bc:7e:95:1e:
                    9e:a2:b8:f3:58:31:cc:03:86:6f:ed:f1:a5:4b:8b:
                    c3:3e:af:86:81:2d:78:21:89:a8:fe:ce:d2:3f:5d:
                    c7:7b:f6:e7:d5:0d:20:59:8a:22:14:e3:1a:f3:05:
                    06:13:31:d0:3e:64:3d:71:aa:58:6a:d7:6f:e6:0a:
                    30:75:4a:60:b6:49:67:f7:82:3e:a5:dc:a7:6e:0d:
                    ca:f0:a5:33:c9:92:29:d1:84:48:77:72:50:f3:24:
                    b2:ba:67:28:31:50:94:ae:98:4a:50:2e:3c:ff:5b:
                    53:c8:d0:78:35:fb:3e:69:b8:ee:6b:bd:df:fa:5f:
                    53:8f:68:b4:4d:34:3c:c8:5d:ed:3a:f8:9c:41:51:
                    43:ab:cb:a5:9d:f8:97:bd:50:32:89:13:5e:94:c9:
                    3b:d9:2d:a0:a6:7e:22:ab:36:da:da:3b:b0:ed:8e:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:85:28:41:3B:E2:4D:A5:84:EB:26:EC:FD:4A:91:C0:D3:14:F7:EC
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:99:6a:84:5a:70:74:f2:dc:e3:0b:04:02:29:45:5a:30:
         02:79:29:39:e6:9c:e0:27:62:ee:1d:3f:12:62:fc:fc:90:f5:
         4f:40:79:9a:5b:11:90:a8:7b:6a:c4:dc:21:f8:12:19:b0:fe:
         12:a6:b0:0a:4f:dd:be:3f:8b:eb:34:61:56:80:72:b0:55:a8:
         13:bb:f9:9e:83:1e:96:4e:6b:2d:49:7d:d3:5d:b0:89:fa:53:
         7a:a5:c2:10:5d:30:78:11:09:0e:ee:27:4e:92:95:63:7a:54:
         ec:8b:f7:51:34:1b:66:ce:58:fd:4f:3b:88:2b:6a:51:31:83:
         8e:b4:41:c3:d8:7e:f8:22:83:5f:d3:3f:38:5f:c4:b5:0f:4d:
         c8:c6:0b:d4:60:0b:7b:b5:28:db:67:d4:c7:bc:b8:8b:f1:1d:
         00:e4:75:1a:58:6f:f9:74:e6:ce:ec:7f:cb:c6:d7:5e:cb:7f:
         0e:b0:cb:22:b6:d1:f6:f8:4b:3e:e9:7e:11:9e:03:d8:17:40:
         fa:61:b3:3a:34:01:1f:0e:ac:6d:d2:28:da:30:ec:ec:36:78:
         bf:22:d6:d6:3a:b1:21:02:41:37:fb:21:8d:bb:42:69:ba:97:
         69:d1:47:c3:d9:36:ae:2d:95:d9:bb:b9:fe:a4:a4:d1:04:c1:
         5d:dc:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:36:26 2025 by rpki-client