Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File:                     Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier:          GI/YbdjztTYLcjP3numVdPwhCqaqdIlFXhVgj75/JfY=
Subject key identifier:   8B:A1:7A:2C:61:99:10:59:39:77:23:2E:B9:1F:FD:06:D3:28:3F:D6
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       07D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number:          07C0
Signing time:             Wed 02 Jul 2025 21:31:39 +0000
Manifest this update:     Wed 02 Jul 2025 21:31:39 +0000
Manifest next update:     Wed 09 Jul 2025 21:31:39 +0000
Files and hashes:         1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: jPjPIB9pdTZfpjIT/9BTzF1dkzDadc3/LO4RUvwTUAA=)
                          2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: OdlMqUDNtGzAyirklP55vsYTOSuUBKJCfr9lvqlqHYg=)
                          3: 308C5012BE4C11ED9598AC4EC4F9AE02.roa (hash: P7lzuIcT4OJPq2KVjR4hbm4014N8PEGkbXpO5IhqpWQ=)
                          4: 067B1AAA70C611EF8080566DC4F9AE02.roa (hash: ap536R4mDpEQmVBUvi08sdQ4AGgP2k0XYVc0G1WQzN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003 (0x7d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Jul  2 21:31:39 2025 GMT
            Not After : Jul  9 21:31:39 2025 GMT
        Subject: CN=6865a53b-1240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:74:f1:a9:24:4e:bf:5d:5f:f5:43:b7:08:
                    a3:9e:8a:ce:a9:28:3a:9a:c4:da:99:a6:9a:17:32:
                    32:50:56:d6:83:47:b5:3f:2e:2a:a0:8c:41:97:da:
                    92:69:95:bf:1c:19:94:9b:f4:7f:0a:cf:85:86:67:
                    da:eb:ff:a8:44:29:33:35:84:5c:46:b3:db:56:fe:
                    6c:69:0f:63:36:cc:fa:13:c6:ae:c7:01:f2:bb:b0:
                    61:d6:44:a2:2e:e9:93:16:86:05:88:c8:c8:fd:08:
                    3c:d8:f9:d3:15:b6:84:d6:16:7b:0a:91:82:8e:cc:
                    a3:fc:5a:2a:d9:bf:6e:c3:90:89:0f:8c:ca:8e:d3:
                    46:de:30:85:69:5e:f7:d6:ac:62:6e:ce:8a:aa:fe:
                    16:06:90:4b:c8:0e:0d:f5:ec:41:57:96:48:0a:be:
                    8c:c7:c2:f2:c4:46:92:ab:26:e4:63:83:cb:fb:69:
                    b5:23:09:e1:b8:2b:62:2f:c8:7f:a0:d7:55:25:f5:
                    f2:0e:9d:e0:b7:a1:2e:c7:08:26:7f:e1:0b:93:ea:
                    45:ad:63:ff:ac:12:05:71:ba:66:60:84:77:38:a3:
                    6e:68:5d:59:d6:3a:1b:98:58:bc:4b:86:e0:a8:a1:
                    a3:d3:17:35:b7:25:6e:fd:2c:dd:83:29:b7:29:11:
                    07:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A1:7A:2C:61:99:10:59:39:77:23:2E:B9:1F:FD:06:D3:28:3F:D6
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:02:17:c5:09:f1:12:2e:4e:79:f4:7b:bd:46:9c:83:c6:
         ad:79:9f:f4:34:fc:c7:c7:9b:67:98:38:24:2e:20:2b:22:73:
         75:4a:3e:ca:e8:90:0e:c1:27:0e:0f:4d:b6:69:e2:36:2a:01:
         17:e9:0c:6d:64:3b:2a:68:f1:26:33:1d:ff:39:ea:f1:bd:2a:
         60:06:fd:f9:a3:4d:9b:cb:28:85:7b:bf:49:69:45:a0:c4:93:
         cb:b9:95:ea:50:56:db:9f:12:95:d2:99:84:32:1a:7b:73:5e:
         9c:8d:3a:88:64:3f:f2:df:db:fe:60:35:32:18:7e:fb:6a:3c:
         0e:55:22:d3:9b:59:87:20:a7:f1:82:88:6c:fd:ee:db:08:43:
         0c:46:c0:62:b6:43:41:41:32:3f:33:ab:38:e1:30:4b:5c:8a:
         4a:ab:24:20:ab:e2:7b:11:d1:e7:89:fa:a9:5e:90:f7:6e:12:
         57:4b:54:46:46:11:ba:20:18:f9:a5:5a:bb:a3:29:21:cc:9a:
         60:d9:dc:ef:af:fe:64:9d:ce:5f:2e:15:67:d3:24:f8:8d:f5:
         be:d2:8c:fb:b1:82:51:d3:3c:d6:8a:fb:b0:03:3e:5c:b6:9e:
         9b:ab:6e:1a:9c:f8:21:e8:21:4c:fb:10:1a:e6:82:2c:b1:27:
         19:92:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:31:22 2025 by rpki-client