Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
File:                     bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json)
Hash identifier:          kaZQdzUkqqjZWUWjF8d0ELZ+v1ymMJKv0RG768ZysBo=
Subject key identifier:   5E:E6:C0:E7:B7:BD:41:22:C6:D0:31:06:8E:92:71:24:7C:5C:A4:55
Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
Certificate issuer:       /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Certificate serial:       0327
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
Manifest number:          0323
Signing time:             Thu 03 Jul 2025 01:30:21 +0000
Manifest this update:     Thu 03 Jul 2025 01:30:20 +0000
Manifest next update:     Thu 10 Jul 2025 01:30:20 +0000
Files and hashes:         1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: unKRmeUux/fGXF8LUxDxD7oYgncPaFAQr78EGK1Eyo4=)
                          2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: LqXeoNf4rZXMYr+S4C+rSHRCOdc5ivPe/GH6EvrlUBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
                          rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
        Validity
            Not Before: Jul  3 01:30:20 2025 GMT
            Not After : Jul 10 01:30:20 2025 GMT
        Subject: CN=6865dd2d-0fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:31:cd:82:05:c5:90:29:49:73:2e:65:94:
                    ba:2b:7e:0b:cd:ed:61:82:c5:ac:e7:3d:88:de:5a:
                    f2:7d:b1:51:15:d2:94:e7:bf:99:cf:20:6c:9a:70:
                    72:3f:36:1e:4d:3b:98:5b:2e:d7:3b:cc:9e:44:e6:
                    53:06:c8:88:4b:42:e1:fd:ec:a6:5c:77:f2:c5:25:
                    70:b6:96:84:42:c3:14:7e:74:ae:56:36:c3:41:92:
                    62:dd:9d:bf:c4:d8:12:7c:95:7e:21:28:af:f2:ba:
                    d4:9f:3b:98:52:60:81:9b:1c:6d:18:64:87:ca:f3:
                    cd:21:8e:54:cd:c6:b0:8e:19:50:5e:c6:96:8f:97:
                    b8:96:93:e7:52:b3:ed:f8:bc:60:2a:cb:f4:43:e0:
                    6f:b3:39:03:08:84:6a:14:b1:8c:4c:5b:73:67:03:
                    0a:fa:58:7e:9e:0c:30:2b:98:1e:35:69:28:0f:03:
                    bb:53:a3:39:c8:f6:c5:31:c0:d9:a0:9f:eb:cd:28:
                    c0:17:63:7b:aa:ea:d2:30:1e:6e:56:b1:db:88:e8:
                    4d:4d:45:29:f9:95:70:2e:4e:32:18:ea:30:53:4e:
                    de:00:db:09:5d:45:6a:d8:0f:e5:d5:e2:a7:fe:81:
                    e7:5e:04:92:be:24:17:43:2a:1b:bf:f1:d7:b6:19:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E6:C0:E7:B7:BD:41:22:C6:D0:31:06:8E:92:71:24:7C:5C:A4:55
            X509v3 Authority Key Identifier:
                keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:84:a8:17:77:1f:54:00:21:5f:90:30:df:56:5b:48:a9:4d:
         40:21:af:87:ee:ba:14:e0:c4:e0:d7:cc:fb:3a:2c:1c:1c:9d:
         c0:97:a9:ff:32:09:f1:01:fa:7f:52:03:02:89:5a:72:36:aa:
         e7:a0:21:ea:ac:d2:c5:43:e2:4f:62:2f:cf:e4:61:dd:c1:f0:
         20:26:09:c3:84:e8:75:f7:87:0a:75:a7:67:dd:57:3e:79:35:
         2c:41:af:26:ce:83:b1:9a:31:cb:6a:42:7d:bc:8f:e1:f1:97:
         02:7a:f4:57:e6:3e:78:6a:5d:af:9d:66:03:94:6a:7e:64:ec:
         72:e9:ba:15:12:29:6e:b9:9a:aa:ff:bc:93:60:4d:99:91:c0:
         a5:31:af:d4:c8:20:06:f4:b3:3b:c1:1c:36:b4:87:a8:7b:d1:
         6c:fa:6b:14:3e:d1:f1:04:1b:27:f2:73:50:f4:fb:71:27:ee:
         25:7a:3e:ee:92:91:11:a5:60:86:9d:f1:38:91:a0:d6:1b:4c:
         bf:82:fb:41:01:6a:d6:71:0c:ad:b2:78:40:90:4c:15:42:0f:
         9e:1f:7f:96:ef:4b:52:d9:de:f6:0a:87:0a:2b:21:c7:1c:c6:
         74:0b:92:96:77:6f:63:c3:56:a1:ca:e3:79:e7:47:3a:61:fc:
         df:23:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:07:33 2025 by rpki-client