Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File:                     bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier:          IumuChJi6319JkXslGG7lrZLTgzWWcmNFQKVngaNTfY=
Subject key identifier:   AC:1E:75:8C:9F:71:7D:08:32:DB:11:EC:08:74:CA:8E:6D:C9:78:1D
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer:       /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number:          0128
Signing time:             Thu 07 Aug 2025 05:09:53 +0000
Manifest this update:     Thu 07 Aug 2025 05:09:53 +0000
Manifest next update:     Thu 14 Aug 2025 05:09:53 +0000
Files and hashes:         1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: xwE6QW4pfZn7Dkv5hVjgE8sItJJj+kyq1Abzr3Pr0/g=)
                          2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
                          rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
        Validity
            Not Before: Aug  7 05:09:53 2025 GMT
            Not After : Aug 14 05:09:53 2025 GMT
        Subject: CN=68943521-a740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:3f:54:6c:37:a9:63:4f:84:f2:53:ee:72:
                    09:32:78:ea:4c:fe:83:d1:d0:c2:23:c0:35:54:64:
                    8c:2f:8e:0e:b7:85:cb:e3:67:72:93:d8:44:c2:e7:
                    b3:2b:06:dd:18:b0:8e:9e:e7:1d:44:e3:32:0d:26:
                    fd:4d:46:d1:46:3b:e6:c2:fe:d4:c2:74:5b:35:20:
                    44:89:41:14:81:cc:ed:5d:2a:db:33:2d:7c:46:06:
                    80:e3:61:cd:db:17:84:eb:10:d3:07:6b:27:9c:e5:
                    5d:1a:b0:ee:23:e0:51:e2:84:96:e6:9d:ab:77:dd:
                    c8:50:f9:c8:10:f2:d0:c6:d4:67:ac:ea:66:fe:36:
                    df:21:70:b0:db:4b:a2:e5:f9:51:70:66:70:6c:f3:
                    48:16:67:52:04:ca:f4:69:3b:2d:ea:28:d2:3e:82:
                    71:c7:41:e5:13:32:4f:fa:0e:fe:cd:8c:08:8a:1f:
                    61:8d:d9:b4:dd:82:05:7f:0f:51:46:88:1d:be:c2:
                    f1:56:1d:fa:52:e6:82:a0:b3:16:ae:31:6f:bc:7f:
                    96:e5:68:0b:05:b3:fb:03:38:af:53:3a:fb:5c:c0:
                    2b:fa:50:ab:a7:18:1a:20:d0:2c:b4:ff:e4:42:c3:
                    dd:b6:4f:5d:29:e1:f8:4a:85:78:cd:90:b2:e7:1f:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1E:75:8C:9F:71:7D:08:32:DB:11:EC:08:74:CA:8E:6D:C9:78:1D
            X509v3 Authority Key Identifier:
                keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ca:20:dc:c4:60:6d:23:20:d1:fb:58:2b:d9:3d:2a:a4:6e:
         e3:10:cc:26:67:1a:3e:72:7b:50:88:36:8a:a3:17:cd:aa:f6:
         23:41:6b:b5:fa:aa:2f:d0:fd:98:af:b3:90:ea:e5:49:07:24:
         22:4e:35:f4:f4:f0:94:66:bc:3d:e2:e0:c2:ef:32:8e:65:79:
         24:a0:5d:c2:4b:8d:a9:a8:d9:6a:6d:d0:69:bd:75:ae:78:c5:
         0b:92:ab:5a:7b:27:c4:3a:9f:4e:62:e1:8e:34:db:f7:f2:6d:
         7f:d0:4f:ad:7f:ff:6e:96:b8:2c:eb:7a:6b:9e:3f:30:86:9c:
         e9:1d:49:34:9d:e8:f1:d1:04:37:83:3a:44:5c:e3:7d:bb:30:
         f3:42:87:b9:33:42:29:76:ab:97:03:29:31:c8:27:dc:e9:d3:
         f6:c8:e0:0b:53:0c:80:80:5b:0e:27:d8:cc:4f:09:49:30:ef:
         a5:64:48:e4:39:37:07:4e:d0:cf:03:2b:46:df:55:54:a3:f9:
         1a:a9:1c:0c:9b:e6:0a:8a:bf:36:49:50:56:98:d8:fb:c0:29:
         7f:de:dc:94:7b:dd:cc:89:da:ae:64:c7:59:bc:59:ac:f2:b7:
         01:d6:56:72:0a:27:e2:13:15:62:a5:db:b8:f2:dd:00:b7:3f:
         e2:70:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:44 2025 by rpki-client