Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          Nt137bEecbKGpkCEtSysGh8ycL80iW9pGs4Akl38I9A=
Subject key identifier:   7A:ED:C7:12:73:FE:A6:4B:4A:3F:13:F0:BE:44:24:30:4A:1A:34:BF
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          0184
Signing time:             Thu 15 May 2025 03:03:12 +0000
Manifest this update:     Thu 15 May 2025 03:03:11 +0000
Manifest next update:     Thu 22 May 2025 03:03:11 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: 7pgieFwrnjYjf/RWuDAAWXr+XDcDOwC6KihnY4pUwGU=)
                          2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=)
                          3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 03:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: May 15 03:03:11 2025 GMT
            Not After : May 22 03:03:11 2025 GMT
        Subject: CN=68255970-ab7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5e:d6:00:02:33:ad:35:92:91:58:89:80:c1:
                    13:e1:7d:f3:b8:0b:50:44:9c:aa:a9:5a:7a:a2:f1:
                    46:ec:9d:c6:bf:8a:95:f0:b4:20:57:66:06:65:94:
                    37:2a:67:7e:94:95:bf:d0:f8:69:a8:06:fa:90:7c:
                    0e:33:e9:e9:47:a3:42:b3:74:cd:77:90:1c:fa:9b:
                    f3:23:e7:f8:7a:7c:bb:57:01:65:1a:7f:12:4a:b4:
                    80:53:87:87:48:ff:0b:12:ea:11:8f:e8:3b:f5:d2:
                    9e:6a:d8:af:19:06:db:48:0d:7f:45:d6:cc:5c:60:
                    5b:b9:87:a1:b3:8a:27:3f:21:49:d8:d6:be:d9:f0:
                    06:ce:0a:91:6a:b6:f5:54:8b:f2:91:ce:35:a4:7b:
                    25:cd:04:52:75:fd:25:fa:2a:d5:c8:6b:06:d2:67:
                    e1:d5:02:da:23:65:8a:12:21:75:61:ac:ef:1e:7d:
                    07:07:2e:ce:69:a5:ef:31:93:5d:c2:c3:24:4e:41:
                    56:32:74:9b:38:bd:29:ae:02:66:ac:49:a8:c6:b2:
                    4b:cb:51:78:f3:cd:11:0f:16:f6:fb:e2:2b:d0:5e:
                    64:d0:b3:49:04:6e:31:15:15:a1:f3:01:75:af:ed:
                    41:fa:d5:ad:e3:e4:40:de:ef:53:2b:09:70:9a:e6:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:ED:C7:12:73:FE:A6:4B:4A:3F:13:F0:BE:44:24:30:4A:1A:34:BF
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0c:6f:9c:31:68:22:18:cd:e8:1c:5a:f4:c6:57:e2:cc:be:
         01:ac:f3:db:e2:01:1f:98:ae:af:4c:08:61:ea:dd:d6:36:ab:
         14:0a:34:44:de:bd:76:32:ad:c7:f2:f4:5f:e7:f4:1c:c4:f6:
         ae:bb:4d:64:a1:b1:d8:ac:f3:e9:98:f2:a3:60:1d:ec:03:36:
         d1:cd:97:23:c1:be:8f:32:f4:4d:3c:4c:df:68:96:ae:ae:49:
         1b:e4:8a:6e:04:85:6e:07:af:68:9e:61:77:74:ca:a5:02:8e:
         43:d5:fd:8e:b0:b4:aa:1b:4f:56:c9:59:60:ad:02:08:9e:cc:
         02:66:db:33:b9:f3:60:73:1d:d0:34:6d:4c:6a:f1:5f:83:a2:
         db:4e:68:5b:4e:1d:ae:47:6c:b0:6e:ba:02:dd:5b:89:14:d4:
         33:51:be:b7:04:f8:29:43:e9:c0:72:c6:1d:d4:b6:be:e1:70:
         6a:c9:7e:a8:0b:da:a2:92:da:c1:ca:e8:2a:7f:bc:5f:e5:0f:
         f6:e6:b1:30:be:fe:68:e6:c2:d8:18:d2:1b:f3:28:44:d5:1a:
         b8:b9:cf:80:e4:b1:69:c4:aa:61:43:e7:c7:ea:54:7c:42:00:
         96:75:8c:7e:16:26:22:1a:30:d1:a2:7b:26:8d:e0:66:e3:d9:
         ef:4e:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:29:56 2025 by rpki-client