Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File:                     BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier:          DDohD/r2378JrHwRNt9iW96XVpglLD2zcUzDA7KMC7o=
Subject key identifier:   59:81:DB:92:C4:C9:D0:6F:66:F2:87:CD:C1:AA:7D:F7:37:21:92:DA
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer:       /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number:          81
Signing time:             Fri 13 Jun 2025 05:32:08 +0000
Manifest this update:     Fri 13 Jun 2025 05:32:07 +0000
Manifest next update:     Fri 20 Jun 2025 05:32:07 +0000
Files and hashes:         1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: cQ8X5n4aUqW8K7u6xK2gLyAdms8qkcdpB6C/lEKFul8=)
                          2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: y9ssG+Nlchy0jWaCyzN61HTdb2V4wt1xqBdScX6Lwak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
                          rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
        Validity
            Not Before: Jun 13 05:32:07 2025 GMT
            Not After : Jun 20 05:32:07 2025 GMT
        Subject: CN=684bb7d8-b139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:43:f2:e1:08:78:7d:15:c0:92:29:19:82:
                    ae:f6:d8:95:29:c8:81:05:f2:88:62:ab:f7:02:05:
                    89:10:29:51:c3:0e:1c:9b:df:2f:4b:88:80:6f:2d:
                    bf:1e:2a:82:45:39:35:c5:38:0a:7d:70:aa:bb:1a:
                    39:46:f1:f5:65:61:7b:3a:e4:1c:88:ae:eb:96:10:
                    b8:70:18:fb:fb:90:79:43:1a:62:0a:a2:25:5c:f7:
                    89:d3:af:7d:3c:17:3f:17:a6:b9:ef:4c:b9:b3:44:
                    84:f8:bb:5f:83:b9:8b:13:a4:64:13:f0:00:ae:9b:
                    a1:72:d0:32:40:51:e1:6f:5b:86:27:0e:a2:95:b4:
                    23:99:ce:34:92:ae:77:33:fd:a0:af:23:e4:10:61:
                    ba:ca:1d:5e:c8:34:d0:93:a7:86:e0:55:6b:1d:46:
                    e8:9d:a3:29:af:cc:80:54:87:d2:43:da:6d:e5:28:
                    82:f9:56:ff:bf:87:8c:df:bd:51:a2:74:23:be:e4:
                    14:6a:13:5f:3b:f2:c9:75:dc:59:f0:82:24:df:5e:
                    3e:1d:92:90:10:a2:00:90:d0:bb:c1:34:11:b3:31:
                    6f:c7:8d:7c:82:6d:49:bd:05:93:a1:7f:5f:59:2c:
                    10:27:1c:f9:2b:65:07:fa:ac:76:1f:f6:45:46:c9:
                    ed:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:81:DB:92:C4:C9:D0:6F:66:F2:87:CD:C1:AA:7D:F7:37:21:92:DA
            X509v3 Authority Key Identifier:
                keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:27:89:85:86:6d:3a:ba:81:06:0a:7a:7a:29:09:7e:81:df:
         e9:a3:8c:d8:8a:28:74:fe:b7:60:d1:95:46:64:2a:f0:fb:88:
         f0:4c:66:14:10:e6:92:8f:03:41:1a:ae:03:63:1f:2d:43:c5:
         9c:10:cd:d6:c5:00:7a:cc:fd:83:84:10:2e:d2:49:c8:21:ea:
         0b:bf:ab:c9:48:9f:2d:f6:43:8a:cd:1f:02:1c:e4:86:12:33:
         8c:27:a9:e9:73:24:eb:e9:4d:cb:8b:dc:f1:91:36:f9:d0:65:
         dd:ca:be:b6:2d:5b:77:e4:05:cb:67:29:dc:f8:d3:7e:09:1d:
         d0:49:c3:15:06:5e:b8:cc:cf:17:9e:43:ea:ab:7b:1a:7c:c5:
         8c:d9:b8:2f:aa:eb:4b:c6:19:09:ff:c0:d1:53:ab:0e:a7:3c:
         db:db:1e:97:24:58:06:b6:1f:1d:3b:a5:13:2f:e4:e7:72:52:
         e3:11:d5:6a:3e:d6:2f:62:8e:6a:26:c4:56:ed:0b:e9:a2:10:
         c7:74:69:db:9d:dc:56:2f:79:7b:b8:b0:51:52:cc:e3:11:db:
         5f:be:9a:32:f4:61:cd:98:de:08:a4:8b:88:20:25:96:e6:28:
         05:4e:81:44:02:40:91:cb:ad:f9:f0:c7:0d:32:49:8d:4a:7b:
         b3:ce:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:42:37 2025 by rpki-client