Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft
File:                     bath0S4_GW9RaThyPIAnWZxddVI.mft (raw, json)
Hash identifier:          rahY/QMSKNVUPZ+e4SSFlZefB5v8Y9wMrQuDDhdKgG8=
Subject key identifier:   15:20:75:31:66:4D:4A:1C:C9:6F:E4:AF:E3:98:97:A3:91:B0:3C:25
Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52
Certificate issuer:       /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft
Manifest number:          C8
Signing time:             Thu 03 Jul 2025 05:56:01 +0000
Manifest this update:     Thu 03 Jul 2025 05:56:00 +0000
Manifest next update:     Thu 10 Jul 2025 05:56:00 +0000
Files and hashes:         1: bath0S4_GW9RaThyPIAnWZxddVI.crl (hash: lRnqpwkb3CXtE4wrQp1pKngA4jgUcHNg00+XP9LkKYc=)
                          2: F2022074272711EF91A40124C4F9AE02.roa (hash: xhUsDiNlcxZBUBnV9JFR4AclyG5SZwCFLfalTWcGiyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBCC, serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552
        Validity
            Not Before: Jul  3 05:56:00 2025 GMT
            Not After : Jul 10 05:56:00 2025 GMT
        Subject: CN=68661b71-e390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:c9:c1:1f:f2:ff:5b:54:24:02:95:4d:88:
                    6c:62:6c:f9:e8:26:a7:c1:e0:37:aa:56:3e:4d:14:
                    59:4f:0b:e3:97:61:0f:1c:48:8d:c3:4c:54:f5:f0:
                    21:c2:71:bf:68:c4:8e:87:7e:30:bd:8c:9e:4a:9f:
                    0c:ea:ee:fb:4d:e3:86:28:33:f3:bb:8f:96:1f:e9:
                    1f:19:7b:d0:dd:54:b1:78:36:a5:ce:b5:10:12:49:
                    64:b8:71:a8:2c:89:0c:78:bc:3a:83:70:43:e0:4c:
                    1b:24:5a:21:5f:4d:72:d3:39:a5:04:af:06:02:1e:
                    ea:91:66:b5:6f:65:35:6e:06:23:a4:bc:e0:d5:1c:
                    47:85:5f:d9:ae:4a:bd:1b:25:45:db:b0:8e:67:7d:
                    22:4e:15:89:d0:28:7c:42:91:1f:83:c5:25:87:ed:
                    e3:49:f1:cc:81:30:3e:e8:59:f7:fd:b4:99:0b:66:
                    2a:33:c6:50:b1:f3:15:b1:41:a9:b4:42:8b:fd:17:
                    a5:85:de:00:cd:e5:a9:97:29:8c:60:7c:4d:03:7e:
                    1b:37:c4:a8:b0:a9:d0:25:d1:18:30:85:1a:89:fa:
                    1f:df:56:ba:6b:34:ea:48:76:a2:dc:e4:01:5f:c2:
                    f3:ab:64:64:b2:e8:4f:ac:f8:bc:aa:08:29:39:e8:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:20:75:31:66:4D:4A:1C:C9:6F:E4:AF:E3:98:97:A3:91:B0:3C:25
            X509v3 Authority Key Identifier:
                keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:81:db:ac:ec:f7:20:19:b2:9f:f7:18:9e:75:04:2b:45:5f:
         c8:59:7c:60:1a:08:c6:04:60:4d:72:42:44:7e:b9:49:fa:d5:
         c1:ad:30:42:79:a0:87:17:29:90:46:89:75:1c:99:a0:10:42:
         22:09:f4:cc:d5:e5:e1:0e:be:8b:33:53:6a:1a:ff:eb:70:e4:
         5f:b1:d4:59:54:d8:c8:68:1a:43:77:72:c1:44:80:22:26:91:
         b1:49:d1:b6:48:43:b7:32:48:70:7c:36:91:06:43:c2:cf:14:
         3f:c0:50:0e:da:97:a7:c2:f7:cd:2f:49:88:59:a8:68:8d:2b:
         ab:7f:41:84:2b:18:72:13:0e:5f:05:8c:a0:e2:43:02:3e:7e:
         24:80:2f:fb:88:d6:ac:01:44:51:2e:41:6a:bf:2c:c4:87:c6:
         52:1c:f7:d9:54:69:b6:34:28:f6:96:0a:0b:f7:b4:9c:d9:14:
         06:85:5c:c8:62:6f:36:92:39:26:fd:be:f7:4a:d4:aa:aa:62:
         fa:c1:ed:b2:d2:3d:fd:8d:63:b9:93:e8:5a:8f:fd:21:a7:ab:
         8c:33:83:49:dd:f4:dd:c4:bb:c3:ee:3d:38:20:27:77:36:40:
         72:cb:2b:59:88:1b:ad:da:51:cd:0f:88:35:ca:ea:9c:19:fa:
         89:c9:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:11:13 2025 by rpki-client