Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File:                     bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier:          Hkjo0mloSAc0DCIAwe2/S2gxShMuHPrfJsN33nbky0k=
Subject key identifier:   89:A4:E8:A7:5F:D9:3D:12:A3:9E:19:A6:DE:12:FB:31:59:61:36:F2
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer:       /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number:          07
Signing time:             Wed 13 Aug 2025 08:55:04 +0000
Manifest this update:     Wed 13 Aug 2025 08:55:04 +0000
Manifest next update:     Wed 20 Aug 2025 08:55:04 +0000
Files and hashes:         1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: GWUbrJnCwnflEL92fEfj1baanEMCZd7ICouqIhye3ZU=)
                          2: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: USdlwRhVoGGdyrGSWsnHqMd9hND59OuaWTUHS/xq5TE=)
                          3: B25E5954768D11F091768048C4F9AE02.roa (hash: bFSzjXTpedQHU5GXRyOAp3ruzrbAgAWRW8Prl1dvtXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
                          rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 08:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
        Validity
            Not Before: Aug 13 08:55:04 2025 GMT
            Not After : Aug 20 08:55:04 2025 GMT
        Subject: CN=689c52e8-6ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:ac:79:11:f6:5c:9e:38:1b:5e:a9:2e:b8:
                    59:ff:8b:92:91:96:35:41:60:c3:f2:2b:ff:d0:87:
                    e2:55:ef:b8:85:bc:52:83:a3:a2:73:2d:69:54:d2:
                    a4:96:9a:15:4d:9b:66:80:57:88:ac:1f:61:87:f9:
                    7c:67:be:0e:b3:6a:6b:8f:97:13:29:00:84:12:32:
                    c3:77:cf:94:19:c3:ae:76:f1:50:0f:ab:f4:f3:08:
                    d1:38:89:eb:12:d5:10:ba:32:0a:5b:0a:b3:51:f2:
                    56:38:7e:18:ff:cb:3b:ef:a3:29:b0:60:9b:20:95:
                    8a:43:95:ef:42:c3:95:63:14:a4:b4:5d:72:cf:04:
                    91:75:51:cd:b2:1f:63:80:4b:be:0f:b7:a9:0c:ea:
                    d1:e3:d0:1d:82:5b:25:a2:19:3a:a3:c4:03:88:57:
                    72:c9:35:44:30:5b:c0:8f:fb:98:7c:a9:c7:ed:7a:
                    c8:5b:50:a6:9c:b9:16:4d:7f:a4:7c:a6:45:d4:c9:
                    d9:8f:ac:af:d6:2a:97:67:49:27:7e:4e:da:47:fd:
                    7c:9e:28:47:b9:a3:17:a2:c0:14:65:4a:63:88:16:
                    34:ed:d4:d1:db:db:b5:07:0f:43:2f:68:06:2d:14:
                    ee:82:8b:50:4f:9c:0c:1a:1e:a9:54:cd:02:6d:87:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A4:E8:A7:5F:D9:3D:12:A3:9E:19:A6:DE:12:FB:31:59:61:36:F2
            X509v3 Authority Key Identifier:
                keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:b0:ad:8a:ec:94:30:50:10:dc:35:74:ef:5d:37:75:4e:
         e7:1c:96:85:c2:27:bb:64:e8:3f:ca:a1:91:94:51:7c:4d:fe:
         84:d4:3b:cd:18:2a:8f:1c:dd:10:07:a4:f3:e1:ed:09:27:e8:
         a8:3d:1b:f2:cf:83:86:df:ee:b6:49:3d:f9:45:86:81:56:bd:
         02:90:5e:dd:1e:95:e6:d6:4e:9a:ab:ff:ce:e8:80:76:a4:50:
         13:be:8b:47:a7:73:06:6e:72:72:07:38:8a:97:d0:08:55:05:
         d4:c6:a1:45:75:34:c8:87:33:f0:0e:ac:9e:89:65:85:8a:fa:
         03:91:e9:ab:d7:77:72:56:4e:db:90:dd:95:8d:00:da:0c:fb:
         21:45:48:07:cd:8a:e3:88:bd:3b:60:17:89:a4:be:85:bf:85:
         73:8d:54:e3:4c:f5:de:12:88:83:9f:60:fb:2b:db:2c:01:bb:
         81:5a:8c:9c:a6:62:bb:c2:c2:8e:e2:3c:ff:48:83:7a:65:0d:
         90:f7:cf:f4:2b:f0:a5:73:bc:96:21:67:aa:da:f3:c2:e9:1c:
         f6:0c:d4:38:13:dc:0b:72:88:1e:c0:cf:10:51:e9:ec:78:a2:
         78:df:c2:13:c8:91:b9:b0:93:98:13:76:84:87:1a:8c:4c:0c:
         84:cd:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 06:38:46 2025 by rpki-client