Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File:                     BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier:          WOzw+us3GAdunfEkkjLYi3KV3/R9KsQTQuMYXVLrYxs=
Subject key identifier:   13:6E:26:A2:F2:C6:36:04:84:B5:18:56:F4:32:51:E4:1E:26:B3:C5
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer:       /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial:       34AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number:          34AC
Signing time:             Tue 12 Aug 2025 14:38:14 +0000
Manifest this update:     Tue 12 Aug 2025 14:38:13 +0000
Manifest next update:     Tue 19 Aug 2025 14:38:13 +0000
Files and hashes:         1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: BbgnQSuuvd60CJDx12H/hHLRYq2aSu0yMLSDKDqWVsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
                          rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13484 (0x34ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
        Validity
            Not Before: Aug 12 14:38:13 2025 GMT
            Not After : Aug 19 14:38:13 2025 GMT
        Subject: CN=689b51d6-4c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:bf:b7:05:2c:11:7d:24:5e:5d:a3:aa:2d:
                    49:e5:50:8c:ab:70:c7:e5:63:20:44:14:5b:43:3c:
                    28:84:9a:25:3d:6d:5a:09:45:b9:13:0e:5e:86:07:
                    84:3b:32:19:24:38:15:3d:e2:25:f0:13:99:e2:4b:
                    a0:62:f3:00:3e:d9:2e:32:7c:b1:cc:c7:20:ef:34:
                    fd:67:b3:65:01:30:57:e9:a7:0d:82:c1:5a:a3:13:
                    1e:bb:42:7b:2f:0a:db:9f:e4:9a:d9:f7:1a:5e:40:
                    7c:8c:f0:7d:01:ce:7b:50:9a:29:01:7e:1c:c3:d9:
                    46:fc:ae:98:f7:56:b2:13:07:88:3d:02:b9:93:d5:
                    62:30:e3:98:a6:64:6c:ac:29:65:71:87:f6:9d:da:
                    1e:9f:a7:e8:7f:bc:ce:f3:fe:88:5b:84:eb:0a:2e:
                    9c:24:c2:31:29:b6:c6:0d:34:e7:ed:3c:b2:60:5d:
                    fe:23:2e:38:55:d5:92:bb:a3:74:0c:82:4c:ad:89:
                    63:44:00:c7:c9:37:c2:b0:2b:fb:b5:f7:1a:a8:98:
                    ad:7d:5d:32:25:52:73:0a:98:3d:b0:ba:e8:4a:81:
                    ff:39:2a:ce:e8:f2:8e:c3:02:a7:df:83:3c:65:7b:
                    82:21:99:57:f9:88:58:58:c0:88:1d:99:2a:2c:14:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6E:26:A2:F2:C6:36:04:84:B5:18:56:F4:32:51:E4:1E:26:B3:C5
            X509v3 Authority Key Identifier:
                keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:db:4a:ea:4a:21:47:a0:17:4f:70:fa:ce:06:38:6b:7b:50:
         32:3e:30:fe:b4:7d:27:3c:de:4e:0a:90:21:0d:71:fd:31:60:
         de:79:89:31:a0:55:9c:e9:2b:76:04:f5:77:f4:48:70:94:08:
         92:ad:f4:69:0b:38:2e:c0:d6:0c:7b:8d:4b:1d:08:cd:62:8b:
         59:e2:f8:9e:0e:77:4b:11:ad:46:84:88:45:4d:4f:0a:7a:8c:
         5c:e2:b1:dc:26:af:67:05:6b:4c:6a:45:e2:bf:59:c8:c3:e9:
         88:1a:43:9a:7a:b1:c3:1f:02:0f:4d:f7:45:5b:55:80:6f:f4:
         3d:fd:92:e1:4b:b9:32:dd:ab:e8:75:1d:34:47:4b:6c:a9:42:
         c7:1f:6b:50:9f:97:f0:41:41:7d:7e:ca:58:5c:bd:ce:d8:95:
         c3:18:40:4e:96:9f:a0:49:f4:98:53:2b:9d:ea:d9:aa:89:15:
         c1:e9:25:01:1f:8d:c2:cf:cd:a8:6b:fe:18:13:47:96:10:e3:
         06:05:5b:d4:62:d5:4e:56:89:ba:77:0c:b4:40:35:29:a9:3e:
         f0:a0:02:cc:96:af:37:dc:ea:5e:9f:b3:f1:22:09:75:75:24:
         56:aa:f1:3d:c9:db:dd:ec:ae:79:f3:0d:f2:89:bc:0c:0b:72:
         61:f2:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:50:55 2025 by rpki-client