Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          PiJb8MzLNh5SAYVbHmxH8QFVBPMxn6YJ9PsaC6MUSb4=
Subject key identifier:   E5:02:F2:9D:61:AD:ED:15:1A:B8:BF:0D:AB:F1:13:FB:87:40:0D:6A
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          0192
Signing time:             Fri 13 Jun 2025 02:29:25 +0000
Manifest this update:     Fri 13 Jun 2025 02:29:25 +0000
Manifest next update:     Fri 20 Jun 2025 02:29:25 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: jeDGKjYyc1XuYjOR/alAqrQ29nUAk8KVC+m4GZLzR9o=)
                          2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=)
                          3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: Jun 13 02:29:25 2025 GMT
            Not After : Jun 20 02:29:25 2025 GMT
        Subject: CN=684b8d05-a21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3c:e8:30:6e:b0:29:c5:a4:fb:83:d2:46:99:
                    ad:90:de:54:a1:fa:2b:f0:82:98:ab:c4:e9:dd:5d:
                    43:b5:5c:23:2c:32:40:fc:7b:0d:11:86:36:79:80:
                    a0:97:c3:4d:1b:80:b8:f1:c8:c5:85:51:5f:3f:83:
                    31:1f:f5:8e:e6:7b:e1:1e:16:47:ac:3d:48:58:32:
                    d9:3c:cb:5c:9e:22:ca:c2:97:54:f0:f4:31:84:d2:
                    a5:4b:fd:ce:ae:88:db:51:75:0d:62:b2:cd:24:79:
                    c8:dd:f3:f8:77:45:ed:10:81:81:f0:8a:7d:42:5b:
                    01:bb:f0:56:10:7e:a4:5f:c1:07:44:7f:f4:21:26:
                    d5:ee:25:d5:51:ae:fc:b1:bc:df:dd:05:05:53:4d:
                    24:42:d3:98:36:bc:bb:57:f5:75:38:9d:b4:b3:91:
                    0a:0a:3a:9e:b4:4e:43:cc:1b:0a:fa:54:2f:b6:88:
                    5e:d1:71:d2:dc:bc:f5:97:48:bc:79:6f:ca:18:ab:
                    39:d8:4d:e6:d9:11:32:36:7d:79:76:a0:70:08:ce:
                    60:89:7c:d0:0c:27:13:45:70:d3:d9:7c:43:1c:ea:
                    98:97:da:cd:be:54:ce:d1:e8:81:73:c2:61:28:8c:
                    84:b5:81:d5:92:58:f5:47:e0:12:fe:d2:c0:79:13:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:02:F2:9D:61:AD:ED:15:1A:B8:BF:0D:AB:F1:13:FB:87:40:0D:6A
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:87:a8:7e:ef:db:77:b7:0c:da:71:1d:a0:7e:f3:35:55:
         83:75:2e:c6:a2:fc:7f:c3:89:cc:bc:ba:f6:aa:75:76:d9:d0:
         8d:d4:5c:21:de:ef:3b:22:d6:fa:34:ee:d0:54:4e:32:de:3a:
         a8:18:cc:3e:a7:61:e8:e0:9a:d5:1b:43:ca:ea:fe:89:d7:59:
         96:13:1f:82:2a:41:b6:ba:80:b1:39:00:64:74:f3:8d:2c:01:
         b5:cf:9d:4f:3c:dc:b5:95:45:ac:fa:11:02:f7:d1:d2:c4:bc:
         47:f8:ff:f3:85:b9:e1:20:52:7a:ed:be:92:bf:a6:ec:a0:37:
         83:7a:68:cb:c6:03:1c:e0:78:62:30:07:39:f5:a9:7a:0f:f3:
         ef:32:3d:ca:d3:85:ad:61:18:2d:77:1e:93:a5:5b:3a:5f:1d:
         30:9b:dc:15:20:05:41:e3:f5:f7:19:d1:6f:cc:f0:4d:f1:29:
         80:f5:b7:af:0e:5e:c9:e6:2a:37:11:9c:d2:1c:d7:8f:61:bd:
         d9:d1:7e:a2:2f:26:e1:f2:b2:ba:c0:ad:27:9b:a5:30:a5:de:
         c9:fe:36:bc:b1:fe:07:4d:3c:db:42:30:cd:79:bd:ea:28:25:
         e9:e8:10:28:e6:fa:24:b1:b8:c9:d7:71:9f:0d:d5:5b:4c:c3:
         e7:bd:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:26:24 2025 by rpki-client