Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
File:                     f-Bbou6G6oexhMP_X7EbO6oUiuw.mft (raw, json)
Hash identifier:          BJUc90dYjbGTN1bU3iJ33y8hfYxQdWh9hdY09AhLBf0=
Subject key identifier:   71:BD:8D:32:2C:8E:55:3A:8E:81:15:59:59:B9:51:82:1E:B6:6E:70
Authority key identifier: 7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC
Certificate issuer:       /CN=A918BAEC/serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
Manifest number:          36
Signing time:             Thu 03 Jul 2025 07:53:20 +0000
Manifest this update:     Thu 03 Jul 2025 07:53:20 +0000
Manifest next update:     Thu 10 Jul 2025 07:53:20 +0000
Files and hashes:         1: f-Bbou6G6oexhMP_X7EbO6oUiuw.crl (hash: KqRaLUocVvYAhVsIEhLEbynFteZPfT1xP9rBRcRIHaw=)
                          2: FFAB3BEA093D11F09D0BF611C4F9AE02.roa (hash: yI/j1xgiS/fqVtmbq53pKNzmCkVrwuDmHepyJ+SQ0M0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl
                          rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BAEC, serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
        Validity
            Not Before: Jul  3 07:53:20 2025 GMT
            Not After : Jul 10 07:53:20 2025 GMT
        Subject: CN=686636f0-6da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:9d:0e:66:d6:df:aa:56:80:78:79:81:56:
                    19:8b:58:e4:19:d7:ce:03:43:ed:82:a8:61:00:ef:
                    97:e2:b1:b6:4f:11:da:8f:90:00:51:43:cd:a3:93:
                    86:20:40:cf:dc:81:6b:b6:72:97:2c:9f:18:63:3a:
                    44:55:f3:81:ad:f9:4e:27:64:dd:56:76:0c:64:fd:
                    f7:35:bd:2d:bd:41:18:22:4d:fa:18:40:4d:f0:c2:
                    79:ab:de:5b:c7:59:f6:81:8f:c8:5c:29:09:2f:75:
                    d5:0d:3a:11:c0:a2:93:8b:e6:6a:ad:2a:fb:9f:f8:
                    25:67:6b:eb:8b:33:4a:33:00:45:2b:42:38:e5:d7:
                    09:9f:28:01:a4:c3:03:ed:a4:cb:6f:b2:c3:3e:df:
                    fa:e4:24:59:c6:68:ab:7b:67:e5:3e:31:33:62:08:
                    ed:c3:f9:09:15:6f:d6:6e:a3:49:a9:4a:9d:c9:98:
                    fb:dd:d2:8f:97:1c:2e:f8:9a:20:3b:83:91:a6:81:
                    6d:23:6e:ce:6e:44:27:f7:ec:f4:af:1f:5f:05:b4:
                    39:89:48:fc:83:fa:a8:0a:7a:fe:3d:ae:e2:fc:4a:
                    de:6b:de:17:81:28:f3:4e:c9:e9:a4:23:fd:44:b5:
                    67:78:e6:e1:9e:30:26:cc:d8:39:f1:8f:4b:22:e1:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:8D:32:2C:8E:55:3A:8E:81:15:59:59:B9:51:82:1E:B6:6E:70
            X509v3 Authority Key Identifier:
                keyid:7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:08:5e:ed:c6:9b:e9:ff:d9:db:3d:71:26:35:70:6f:0c:
         b3:3f:77:36:f2:7f:66:11:3b:92:0e:dc:b4:17:29:32:00:8b:
         41:7b:a6:71:38:16:a4:c8:03:ed:53:fd:77:9e:34:26:08:f0:
         36:8a:d9:97:d4:31:1b:a6:f9:68:5d:32:d6:8e:b2:7b:68:de:
         d9:34:ff:28:6a:47:f3:8e:07:46:c5:a0:53:55:09:80:d2:4b:
         97:0f:c3:2f:1b:07:27:f8:81:c5:68:ae:d6:07:53:59:9f:db:
         b3:6d:1b:00:de:66:23:0f:77:33:22:1e:1a:7c:4a:e6:d4:af:
         96:e1:4d:10:79:03:c6:de:63:e3:f8:2d:ed:b0:27:3c:26:94:
         7b:e1:30:3c:1c:eb:29:3f:f3:90:0e:c4:10:9b:32:33:88:6e:
         d1:cf:6b:00:7f:5d:20:3a:74:02:48:6a:6e:bf:8c:5c:d3:49:
         c2:12:2d:17:03:05:c0:4c:6c:77:8b:76:16:6a:f6:99:39:ef:
         cf:b9:2f:e1:43:07:0b:8c:98:09:bb:a9:83:df:4e:f1:2e:a3:
         65:21:2d:8a:24:d4:07:2f:3a:0c:76:45:b7:5e:9f:9b:5e:46:
         cf:86:20:f3:24:47:57:d1:d2:a0:b1:65:32:1f:15:75:f5:92:
         9b:27:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:36:36 2025 by rpki-client