Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
File:                     bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json)
Hash identifier:          Kcsfn+EJwnm0aQ4GxY8wPWISYb3NxQxSy322/WqqhPo=
Subject key identifier:   55:0A:F9:80:D3:58:62:29:C7:A4:54:D9:95:E6:F6:4D:1B:4E:AA:B3
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Certificate issuer:       /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial:       0822
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
Manifest number:          081D
Signing time:             Fri 08 Aug 2025 21:11:42 +0000
Manifest this update:     Fri 08 Aug 2025 21:11:42 +0000
Manifest next update:     Fri 15 Aug 2025 21:11:42 +0000
Files and hashes:         1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: xIyWGezPYC3P0gqrKReSnOw8dDzqoPhZEZ8wi94Fe8A=)
                          2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
                          rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
        Validity
            Not Before: Aug  8 21:11:42 2025 GMT
            Not After : Aug 15 21:11:42 2025 GMT
        Subject: CN=6896680e-f3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:a7:e5:b0:97:60:86:99:90:fc:91:22:5d:
                    39:02:76:a3:e2:c2:35:4b:63:aa:dc:ac:0c:e8:16:
                    74:ef:a1:1b:e0:25:a6:c7:78:e4:fe:18:13:6b:95:
                    b7:f9:f6:be:da:22:e8:72:c3:aa:37:5b:0d:f9:14:
                    87:dd:70:d5:b0:6a:4d:4e:56:c3:49:27:7d:8c:7a:
                    d0:a4:dd:14:83:5f:d9:ed:0b:fd:d6:d8:f8:fb:d0:
                    d4:8a:17:46:f6:bd:05:12:60:e5:d4:da:89:17:c5:
                    5c:7a:09:47:f6:bb:09:5d:5c:82:60:a5:c8:bd:4c:
                    91:50:c0:2f:0b:74:e4:95:72:e0:81:8d:a5:53:f0:
                    05:bc:03:26:a9:b5:67:31:53:90:9b:9e:8d:68:6f:
                    6c:ed:dd:d0:a7:b0:50:1d:58:7d:56:dc:e4:50:1a:
                    9b:30:4f:18:14:d5:b7:d1:8a:b3:bb:29:11:56:41:
                    38:9a:26:91:35:f3:13:1d:41:18:a0:15:80:1b:5d:
                    1f:50:5c:2d:81:9d:bb:8d:db:9f:fd:4a:34:4a:d4:
                    6b:b8:db:7b:c0:d8:3e:47:96:fc:97:3f:b1:27:da:
                    21:c1:fc:7d:9d:9a:16:c1:29:73:63:08:d7:e7:ad:
                    ce:2f:73:1b:38:7a:c4:a9:8f:68:d8:c0:44:56:c5:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0A:F9:80:D3:58:62:29:C7:A4:54:D9:95:E6:F6:4D:1B:4E:AA:B3
            X509v3 Authority Key Identifier:
                keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:be:11:41:5f:7a:30:59:b3:76:d3:90:cf:ab:fd:c0:75:98:
         88:e3:d4:ce:74:00:38:c5:36:20:c2:83:d6:ac:3e:97:52:da:
         8b:fa:4e:43:a1:77:cb:03:60:cb:28:7a:c1:4a:5c:4a:46:43:
         87:f3:e4:6f:73:f6:4a:df:f2:34:75:de:f9:77:a2:e4:1a:83:
         cb:a3:e9:c3:54:63:96:23:db:0e:1e:b8:f5:e8:2b:d3:fd:7c:
         85:f2:2b:76:a6:29:68:d4:c0:84:88:9b:47:90:b8:80:4b:87:
         b3:82:53:a2:2f:a2:23:9c:ae:f7:31:0b:52:d3:4f:ca:12:62:
         1d:b1:3a:07:1f:a1:8e:11:d5:e4:2b:09:33:0d:c9:12:49:9b:
         d0:b8:ba:c1:13:37:8f:04:af:9e:db:b7:4d:e9:54:42:6d:79:
         f8:e7:72:4a:fc:61:37:f7:4f:cf:8b:d4:aa:0b:0a:e1:64:eb:
         c4:f2:96:70:c1:3b:f7:f0:64:e1:85:45:13:da:2f:d3:06:97:
         ac:d2:1a:78:ab:d9:fa:c2:79:c1:0a:3c:24:f1:7c:c1:e4:d4:
         bb:39:eb:bd:ff:33:54:6a:08:36:08:c9:a4:96:13:2a:4f:a5:
         f4:5b:86:2e:bb:e0:76:1f:26:4d:be:44:6c:a6:7c:62:db:c3:
         26:00:b0:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5
MjQxMzY5ODEwHhcNMjUwODA4MjExMTQyWhcNMjUwODE1MjExMTQyWjAYMRYwFAYD
VQQDEw02ODk2NjgwZS1mM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCSn5bCXYIaZkPyRIl05Anaj4sI1S2Oq3KwM6BZ076Eb4CWmx3jk/hgTa5W3
+fa+2iLocsOqN1sN+RSH3XDVsGpNTlbDSSd9jHrQpN0Ug1/Z7Qv91tj4+9DUihdG
9r0FEmDl1NqJF8VceglH9rsJXVyCYKXIvUyRUMAvC3TklXLggY2lU/AFvAMmqbVn
MVOQm56NaG9s7d3Qp7BQHVh9VtzkUBqbME8YFNW30YqzuykRVkE4miaRNfMTHUEY
oBWAG10fUFwtgZ27jduf/Uo0StRruNt7wNg+R5b8lz+xJ9ohwfx9nZoWwSlzYwjX
563OL3MbOHrEqY9o2MBEVsXtxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUK+YDT
WGIpx6RU2ZXm9k0bTqqzMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy
MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL
RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1vhFBX3owWbN205DPq/3AdZiI49TOdAA4xTYgwoPWrD6XUtqL+k5D
oXfLA2DLKHrBSlxKRkOH8+Rvc/ZK3/I0dd75d6LkGoPLo+nDVGOWI9sOHrj16CvT
/XyF8it2pilo1MCEiJtHkLiAS4ezglOiL6IjnK73MQtS00/KEmIdsToHH6GOEdXk
KwkzDckSSZvQuLrBEzePBK+e27dN6VRCbXn453JK/GE390/Pi9SqCwrhZOvE8pZw
wTv38GThhUUT2i/TBpes0hp4q9n6wnnBCjwk8XzB5NS7Oeu9/zNUagg2CMmklhMq
T6X0W4Yuu+B2HyZNvkRspnxi28MmALAO
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:59 2025 by rpki-client