Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
File:                     bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json)
Hash identifier:          o60J67HLTrcu7OPatxCV4UsAPNgn+XCjT3mx7zBzN1o=
Subject key identifier:   A6:AE:6F:FD:73:93:33:97:75:52:48:53:5A:6D:35:7E:1A:4A:A8:39
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Certificate issuer:       /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
Manifest number:          18
Signing time:             Thu 19 Jun 2025 07:23:10 +0000
Manifest this update:     Thu 19 Jun 2025 07:23:09 +0000
Manifest next update:     Thu 26 Jun 2025 07:23:09 +0000
Files and hashes:         1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: UuBdvZ9hi9D4M6M2p6ln8aHDHVhw5NOZahJbjSTXKRk=)
                          2: E9331F863B2911F084C93028C4F9AE02.roa (hash: Pnz5aFAbJ5Bkp2gyQ97UceAHI3FhcCchW1EhmLkhr+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
                          rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 07:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
        Validity
            Not Before: Jun 19 07:23:09 2025 GMT
            Not After : Jun 26 07:23:09 2025 GMT
        Subject: CN=6853badd-2924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:02:b2:00:5c:4b:70:d7:e6:fd:d6:ee:5a:
                    0a:4b:ca:25:7d:a6:2f:fe:9f:f3:f5:49:97:e5:89:
                    d4:2f:45:76:af:38:08:8b:06:83:d8:27:96:b9:7f:
                    e0:24:29:e5:c5:37:a2:7e:a4:4a:24:86:af:81:a7:
                    2a:f7:f2:eb:6e:05:08:29:20:4c:42:4d:da:9c:78:
                    18:20:5f:a9:73:51:0e:fd:e2:48:a6:3a:a1:06:75:
                    f7:61:f2:ac:57:1d:36:05:6e:79:a8:d0:0b:54:8c:
                    57:0e:1f:84:64:4a:d0:9d:b7:ba:1f:fb:ba:9b:5a:
                    11:64:aa:84:0e:c6:f6:ff:a2:a8:41:9e:2c:4c:98:
                    51:cf:ef:68:d7:fb:e3:8e:19:99:f5:fd:30:7d:a7:
                    83:2c:1c:27:f7:b9:0c:8e:a3:d7:dd:aa:59:0c:58:
                    ad:d3:9d:80:55:e6:6d:ff:36:63:aa:54:6e:97:a6:
                    03:35:2b:0b:94:19:9c:5c:69:3b:61:3b:28:67:2f:
                    e7:48:7d:90:7b:c7:de:cf:c9:79:48:f9:19:17:2e:
                    c8:09:52:6c:c3:27:c8:42:af:64:5c:bb:7b:00:e0:
                    5c:b1:c4:1e:0b:26:72:78:e8:02:9b:89:26:6c:81:
                    b0:15:06:52:b2:30:b0:4a:46:5c:e1:c9:30:27:11:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:6F:FD:73:93:33:97:75:52:48:53:5A:6D:35:7E:1A:4A:A8:39
            X509v3 Authority Key Identifier:
                keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:14:01:3d:87:c1:47:fd:f1:d6:87:39:13:01:c2:4b:ce:
         c6:48:d0:67:fc:22:be:03:5b:8f:fc:65:bc:05:53:f0:32:e6:
         82:e8:db:ee:8f:82:4c:8b:6b:70:10:ae:0d:ad:b9:06:38:d5:
         93:c7:b5:60:bb:2e:e7:50:83:0e:95:2a:a5:b6:ba:ac:ee:fb:
         9c:fc:3a:02:53:8b:69:68:c8:82:ba:fe:ba:df:29:8d:3a:9e:
         fa:46:bd:87:3a:b9:be:8e:c8:c5:ad:22:b2:01:82:60:8c:94:
         98:b6:fe:a1:61:b2:7a:32:c0:94:c1:f9:8f:40:dd:77:54:3e:
         ff:6f:59:9e:fa:9a:e4:99:57:0c:f0:40:c8:d0:34:4c:b9:8e:
         df:fa:30:47:0c:94:a2:73:af:93:c6:5c:84:95:17:c2:80:69:
         eb:38:49:97:b6:bb:71:a7:16:39:b0:85:7a:c5:89:14:27:66:
         a5:40:9f:69:35:4a:fd:7f:f7:d4:ad:b9:6f:27:c0:11:60:fc:
         99:3e:55:1f:ce:41:cc:ba:a1:f5:85:12:d9:9c:fe:7a:43:22:
         c0:0b:62:67:ab:66:7e:52:30:d0:d4:e2:9c:d5:db:6f:03:bc:
         d4:f3:fa:da:b4:c2:00:73:25:ad:87:6b:de:d9:5e:55:2d:01:
         e6:c8:f1:57
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw
NDZGRUVBNzAeFw0yNTA2MTkwNzIzMDlaFw0yNTA2MjYwNzIzMDlaMBgxFjAUBgNV
BAMTDTY4NTNiYWRkLTI5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfagKyAFxLcNfm/dbuWgpLyiV9pi/+n/P1SZflidQvRXavOAiLBoPYJ5a5f+Ak
KeXFN6J+pEokhq+Bpyr38utuBQgpIExCTdqceBggX6lzUQ794kimOqEGdfdh8qxX
HTYFbnmo0AtUjFcOH4RkStCdt7of+7qbWhFkqoQOxvb/oqhBnixMmFHP72jX++OO
GZn1/TB9p4MsHCf3uQyOo9fdqlkMWK3TnYBV5m3/NmOqVG6XpgM1KwuUGZxcaTth
OyhnL+dIfZB7x97PyXlI+RkXLsgJUmzDJ8hCr2Rcu3sA4FyxxB4LJnJ46AKbiSZs
gbAVBlKyMLBKRlzhyTAnEfqlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpq5v/XOT
M5d1UkhTWm01fhpKqDkwHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2
RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw
NzVFL0Q3MDhBQjFBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlx
SmlxMzkxUkhNS2dSdjdxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKUuFAE9h8FH/fHWhzkTAcJLzsZI0Gf8Ir4DW4/8ZbwFU/Ay5oLo2+6P
gkyLa3AQrg2tuQY41ZPHtWC7LudQgw6VKqW2uqzu+5z8OgJTi2loyIK6/rrfKY06
nvpGvYc6ub6OyMWtIrIBgmCMlJi2/qFhsnoywJTB+Y9A3XdUPv9vWZ76muSZVwzw
QMjQNEy5jt/6MEcMlKJzr5PGXISVF8KAaes4SZe2u3GnFjmwhXrFiRQnZqVAn2k1
Sv1/99StuW8nwBFg/Jk+VR/OQcy6ofWFEtmc/npDIsALYmerZn5SMNDU4pzV228D
vNTz+tq0wgBzJa2Ha97ZXlUtAebI8Vc=
-----END CERTIFICATE-----
Generated at Fri Jun 20 22:48:12 2025 by rpki-client