Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          tWeSm3iOetmkuhAEncsp36sZDLGZv0aMqIPAExrgGT0=
Subject key identifier:   8F:00:B7:3B:25:9C:5C:22:FB:6A:CD:8C:ED:D3:FD:3C:61:30:49:0F
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          01B6
Signing time:             Sat 23 Aug 2025 03:11:54 +0000
Manifest this update:     Sat 23 Aug 2025 03:11:54 +0000
Manifest next update:     Sat 30 Aug 2025 03:11:54 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: ptaTsTFa0dSI+Dd2scLZnMs2244PLqGJkVO7jAj8ywk=)
                          2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=)
                          3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: Aug 23 03:11:54 2025 GMT
            Not After : Aug 30 03:11:54 2025 GMT
        Subject: CN=68a9317a-4b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:a3:97:07:3a:34:05:40:25:6f:3b:bd:24:
                    b6:7f:2a:28:6b:ec:37:b7:9c:e2:ce:3e:49:6d:ef:
                    eb:4a:76:8c:23:70:86:d8:d1:4a:06:68:77:c9:a1:
                    9f:81:13:90:3c:f1:f1:5c:b9:42:69:f3:4b:c0:84:
                    08:bd:29:bc:9f:8a:88:57:47:16:74:a2:05:18:be:
                    46:50:90:8a:a7:2d:b3:73:73:e0:81:9d:ee:38:39:
                    46:37:03:69:02:f4:e0:14:9b:cd:d9:b5:d5:8a:bd:
                    58:56:8c:31:28:88:91:2a:bd:ad:a0:d8:e1:ce:e7:
                    80:41:c4:f6:b5:73:ce:26:49:c7:1b:16:eb:71:52:
                    eb:55:09:b4:ef:ae:e0:a4:1c:44:b4:46:66:ca:ed:
                    ee:c6:70:05:63:94:7c:13:85:f5:f4:c0:70:5f:22:
                    8f:c2:53:3d:42:8e:5d:76:e4:a5:e1:f0:20:03:2e:
                    00:e9:f9:b0:94:30:ad:95:2d:82:bc:a7:c5:6d:61:
                    23:34:27:88:93:bb:33:c5:da:93:cb:b7:0d:50:e3:
                    ff:c8:27:5c:5d:16:9d:38:a9:e4:9c:df:31:a7:49:
                    2a:7a:b6:41:9e:96:67:33:e0:f7:b4:89:18:4f:47:
                    e2:d8:72:e8:93:a4:24:23:06:51:ec:b7:bc:16:d8:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:B7:3B:25:9C:5C:22:FB:6A:CD:8C:ED:D3:FD:3C:61:30:49:0F
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:51:95:9d:73:14:89:19:7d:44:cc:62:e9:df:2d:ae:6a:17:
         67:06:1a:b3:10:ec:81:d8:37:64:b1:a8:87:72:97:7a:64:9a:
         dc:a8:32:fd:ed:73:6c:c4:85:f1:cb:25:63:1b:57:18:fc:45:
         cc:25:51:ba:26:22:89:53:e1:04:ea:c1:ac:3a:7f:78:b0:41:
         29:84:13:73:8b:27:d1:93:93:c9:a8:0c:ba:7c:58:f0:09:7f:
         58:dc:dd:08:ed:66:78:1f:6b:52:b9:ca:5e:a6:af:f3:65:c1:
         38:ce:37:44:e3:a9:bd:68:16:8f:5c:e1:88:e6:68:48:79:8a:
         72:63:5b:54:b9:bc:be:ae:0a:46:a8:26:9a:a9:f4:0c:8d:a7:
         7e:7f:c9:6e:30:ab:0b:7c:6f:29:2e:55:45:39:04:e4:5d:5a:
         44:2c:57:36:cf:60:6b:ea:9e:bc:7c:82:f0:f6:d5:93:33:95:
         ff:fd:d7:bd:94:f7:f8:ea:e3:cf:fd:8b:d8:ba:c5:5d:b0:ca:
         e9:91:24:93:c9:2e:04:98:17:60:90:e6:39:73:90:03:44:c7:
         44:bb:fd:50:63:e0:9c:7e:5f:50:77:1b:c3:4d:c1:1a:80:8b:
         16:24:1e:43:ae:92:fb:44:f8:8d:20:47:2a:d6:79:c9:1c:1c:
         05:cb:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:44:08 2025 by rpki-client