Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
File:                     BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json)
Hash identifier:          7t4HLkiophKUyAyOmgdBb/4S0sLGPjd9dLN7s3imuzQ=
Subject key identifier:   A7:6C:47:9A:F5:90:D4:A3:1F:69:C1:B3:F0:A4:4F:D7:C1:B0:46:2E
Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
Certificate issuer:       /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Certificate serial:       24E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
Manifest number:          24D3
Signing time:             Mon 04 Aug 2025 15:52:53 +0000
Manifest this update:     Mon 04 Aug 2025 15:52:53 +0000
Manifest next update:     Mon 11 Aug 2025 15:52:53 +0000
Files and hashes:         1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: KMZfmZBWL4EfQk/0Nu1QMKzdcy1Y6ZHkRdrq4xRYLTE=)
                          2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: FvWwS3Spm+rRrjY0/JRXkfVlZov8/+1jHfihNOtR95E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
                          rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 15:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9442 (0x24e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
        Validity
            Not Before: Aug  4 15:52:53 2025 GMT
            Not After : Aug 11 15:52:53 2025 GMT
        Subject: CN=6890d755-96af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:3e:73:86:85:d8:83:6d:52:2b:bf:2e:dc:
                    4b:37:dc:b3:97:09:8f:56:75:20:5f:1c:fc:61:74:
                    84:94:d0:1e:c0:80:4b:35:2e:41:1a:c9:d9:ad:7f:
                    99:29:d4:17:97:8b:c6:41:68:24:72:1c:52:d4:d1:
                    07:12:7f:c9:d2:c4:c9:5f:7c:7c:02:e1:18:1d:48:
                    ab:cf:b6:e5:83:12:b9:f3:b3:19:98:d7:a3:a9:7e:
                    b5:34:37:0e:ae:6e:d1:78:43:d1:6f:d4:c3:6f:aa:
                    d4:16:e7:44:64:1e:df:83:e6:b1:3c:bd:e9:aa:f8:
                    be:c3:51:8d:b5:87:ab:60:85:c6:fb:9b:7a:e5:f5:
                    17:68:2e:3d:f1:75:b1:3c:ef:fe:4a:46:da:a0:a2:
                    e4:6c:ab:30:06:90:f7:2d:a1:55:a6:60:0d:08:90:
                    fd:30:a1:d9:e3:e5:89:b2:75:9e:49:0d:0a:6e:9b:
                    2b:d7:1d:02:b5:14:99:83:3f:51:fc:dd:dd:cf:c6:
                    3d:3b:36:2f:b2:a1:54:c7:06:5b:0b:f9:ad:31:b7:
                    ea:af:fb:3b:89:4b:a3:11:77:2c:94:8b:13:2c:3c:
                    41:4e:79:93:42:fc:79:65:1d:76:45:91:4b:d0:63:
                    31:0d:84:8e:08:df:63:ca:f8:17:c1:0d:c4:46:7f:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6C:47:9A:F5:90:D4:A3:1F:69:C1:B3:F0:A4:4F:D7:C1:B0:46:2E
            X509v3 Authority Key Identifier:
                keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:44:c5:90:5e:1b:15:39:81:35:c2:4d:c3:07:14:15:a2:8b:
         bf:97:62:29:e2:94:21:e5:3a:ee:b8:8f:ab:e6:3e:0d:6b:82:
         2e:e5:b3:a2:47:6f:be:f6:47:16:98:c3:3d:5b:37:a9:31:a7:
         fc:c0:cd:63:1d:e7:57:63:c9:e9:25:f5:21:16:e4:38:12:a2:
         e8:a9:ee:0a:20:29:40:4a:bf:b6:85:f8:10:ff:a4:ea:7d:99:
         3e:7a:88:76:4c:8b:2b:5e:15:d5:17:bf:78:cd:39:b5:d2:b8:
         7c:58:90:83:69:d7:9e:dd:3f:40:6f:c5:47:ae:52:cd:f3:32:
         d6:f7:05:d2:68:9d:89:99:2d:68:10:e2:36:6d:3f:2d:ac:aa:
         a8:5f:dc:e7:95:ae:da:13:fc:38:14:27:2d:21:e9:c2:bc:68:
         a1:6f:88:34:9b:65:ff:21:2e:7b:96:90:7e:80:55:4c:56:a5:
         53:e5:a2:73:96:2d:74:4a:55:38:53:b7:87:69:71:69:b4:14:
         9e:49:e0:25:2f:16:6c:bf:ae:14:9b:33:d5:29:53:36:a0:6e:
         6a:6c:b5:d0:e7:d0:3d:fb:68:18:91:27:f9:8b:ff:64:2e:12:
         75:4c:62:f0:8f:8e:3c:56:bc:e0:52:79:66:d3:9f:7b:d3:46:
         a0:15:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:59 2025 by rpki-client