Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
File:                     bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json)
Hash identifier:          6jpn/mOrb58ZFRp/oUiVI/nBg96wjpnmJQ/aRgaBavs=
Subject key identifier:   9F:18:17:F7:39:40:23:2B:CE:61:95:6A:15:CE:C2:91:0F:B8:D5:46
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Certificate issuer:       /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial:       080F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
Manifest number:          080A
Signing time:             Wed 02 Jul 2025 21:09:14 +0000
Manifest this update:     Wed 02 Jul 2025 21:09:14 +0000
Manifest next update:     Wed 09 Jul 2025 21:09:14 +0000
Files and hashes:         1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: h7L+P0Hx81WXrTw7o7A6V3e1RLC5VcgAkEvndlZHZ5s=)
                          2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
                          rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
        Validity
            Not Before: Jul  2 21:09:14 2025 GMT
            Not After : Jul  9 21:09:14 2025 GMT
        Subject: CN=68659ffa-8cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:6e:78:4c:10:6c:18:87:81:13:e1:c2:a8:
                    ae:18:37:74:b8:b1:06:71:f0:a9:32:29:37:01:bd:
                    55:cd:92:16:c8:39:5c:c2:db:27:2f:df:b7:64:fe:
                    70:31:9d:a9:b1:88:0d:85:fc:3b:0c:22:ad:4b:cf:
                    28:6d:15:72:39:4f:7f:f9:1d:ea:06:a2:a5:2b:83:
                    a8:14:d9:05:7f:0d:d8:e6:7a:17:51:6c:c6:38:84:
                    9b:bc:61:e3:8f:8e:53:c6:b8:47:00:9a:dd:6f:cd:
                    7b:1f:a8:89:94:b1:cd:77:cc:a3:45:20:ff:82:19:
                    e9:00:7d:b4:60:66:e1:48:cc:77:8a:4f:c1:3a:4e:
                    d0:db:38:b4:4a:29:77:9e:99:1a:e3:30:2a:61:a7:
                    74:fe:5c:35:bd:34:b8:4d:50:31:10:1d:5b:82:33:
                    2c:7b:07:cf:81:11:a5:c5:38:97:a0:37:db:c6:42:
                    0d:e6:34:9d:13:7e:15:5d:86:1c:35:d8:8e:63:83:
                    29:b7:62:a4:67:9c:2b:70:90:d7:82:79:af:55:13:
                    27:3a:7d:7e:a3:55:aa:68:4b:e1:53:00:bf:7c:5d:
                    d2:f6:e4:97:72:df:d7:fb:ae:8d:08:ab:50:88:2a:
                    ac:7b:33:09:49:99:84:4c:a8:bf:b2:16:a0:25:dc:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:18:17:F7:39:40:23:2B:CE:61:95:6A:15:CE:C2:91:0F:B8:D5:46
            X509v3 Authority Key Identifier:
                keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:35:1d:ff:5f:ee:9d:75:39:fd:20:e8:ea:00:ba:33:77:aa:
         5b:18:42:2d:39:81:af:d0:f2:e1:97:2f:13:ff:b5:55:e6:ef:
         64:81:bd:6a:12:cc:c6:65:f0:87:db:5b:f9:ac:f0:70:58:01:
         4c:26:64:16:65:f3:62:4e:31:41:fe:26:80:46:ea:6f:80:af:
         98:bf:99:b0:b7:57:6c:d9:84:6d:e9:c0:d1:14:36:75:db:87:
         cc:fc:2b:24:5b:e9:08:25:a7:ee:b9:b0:e3:94:20:ef:6c:b1:
         e9:2b:db:11:22:e0:36:d5:92:eb:95:07:2b:d3:3a:92:bc:f4:
         00:3d:32:d5:72:4b:ba:30:c7:ab:c4:21:6d:1d:1f:74:5a:5c:
         5a:e1:b0:ab:e1:12:21:53:f5:34:33:85:f6:49:e6:78:ad:ab:
         29:6b:2e:8f:78:36:fe:84:f4:c2:7d:f0:3c:fd:b2:81:32:77:
         6d:e4:f8:a3:9d:1f:fc:ef:c6:4c:08:86:b2:8e:cf:82:18:dc:
         59:a9:b8:32:e3:35:a8:8c:fe:20:f0:f5:ec:b4:07:c7:d3:bf:
         37:c9:7a:b8:ab:07:3b:22:d8:37:5e:e0:d6:f0:eb:31:22:6e:
         65:0c:ce:26:b2:6b:8f:82:3b:36:54:42:65:70:df:a3:b0:af:
         4e:b7:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:19:51 2025 by rpki-client