Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File:                     bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier:          EK1zlCfd/u1l0tCDc6YbRCQNOa8D2SBFVpoHSgn8lWg=
Subject key identifier:   57:30:58:30:30:F3:9B:86:ED:9C:91:F6:8F:4C:80:15:58:86:8A:FB
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer:       /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number:          0C
Signing time:             Sat 23 Aug 2025 08:22:05 +0000
Manifest this update:     Sat 23 Aug 2025 08:22:05 +0000
Manifest next update:     Sat 30 Aug 2025 08:22:05 +0000
Files and hashes:         1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: nPeg2/wnbn7lZcg7xcjenYBhdLfxHplaH5u9EVczQcE=)
                          2: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: USdlwRhVoGGdyrGSWsnHqMd9hND59OuaWTUHS/xq5TE=)
                          3: B25E5954768D11F091768048C4F9AE02.roa (hash: bFSzjXTpedQHU5GXRyOAp3ruzrbAgAWRW8Prl1dvtXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
                          rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
        Validity
            Not Before: Aug 23 08:22:05 2025 GMT
            Not After : Aug 30 08:22:05 2025 GMT
        Subject: CN=68a97a2d-84a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:e3:a0:5a:07:d6:b3:a8:aa:62:64:10:1c:
                    b2:6e:aa:99:bb:4a:f4:a2:a5:4b:58:b0:b7:59:53:
                    f9:1e:16:5a:53:4d:2e:17:38:ec:1f:ed:ab:cc:32:
                    29:27:b4:76:d0:ba:ac:35:4a:42:40:ac:ea:0b:c2:
                    25:d4:4d:8a:5b:6a:e7:99:d3:f4:df:59:ef:84:2a:
                    c6:38:79:cc:27:ad:18:6f:bb:33:bd:50:c2:09:28:
                    73:2a:ac:05:cd:50:fc:f5:07:3e:3e:21:f1:8f:d6:
                    ab:06:3b:7e:a4:83:43:e3:7e:43:f9:17:b1:ec:ff:
                    5d:63:e5:c1:5c:3e:b1:35:bf:3a:4c:42:9e:fa:af:
                    30:c9:92:58:c9:bf:8c:17:45:a3:af:46:70:8e:27:
                    5b:a5:6c:0b:8f:c7:91:22:0b:28:4a:d8:cd:c1:39:
                    0e:29:56:91:24:52:38:54:62:71:d3:1b:21:42:41:
                    1a:17:39:8e:ed:b3:a4:10:66:d3:76:0b:cf:b6:4d:
                    26:49:cf:df:ba:44:73:5c:31:7a:ae:9c:7d:a7:a0:
                    86:7e:7c:3e:87:41:42:b1:ab:79:1f:d9:99:40:d3:
                    0e:22:06:e9:ab:68:cf:0d:a8:4f:10:a4:6a:48:4e:
                    db:cb:99:eb:a4:77:c2:95:1f:f5:de:a3:96:47:b7:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:30:58:30:30:F3:9B:86:ED:9C:91:F6:8F:4C:80:15:58:86:8A:FB
            X509v3 Authority Key Identifier:
                keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:9a:1e:5b:ed:24:67:77:64:08:98:35:e8:82:71:b9:5e:
         5e:5a:85:fb:05:09:79:05:90:2e:cb:f8:3d:a9:f8:ee:ee:98:
         a9:81:3f:d1:6c:66:70:67:5d:6b:b3:f9:5c:75:27:16:b6:f3:
         47:80:1c:80:00:54:e8:8b:95:26:a6:7e:6b:bb:27:c9:8d:16:
         aa:41:c4:7b:0f:6f:cc:b2:d6:99:25:77:e9:d7:4d:d3:af:95:
         cf:c5:5f:56:eb:e7:70:37:61:5a:f3:cc:dc:13:82:71:a8:44:
         75:85:42:3e:05:54:70:c9:eb:3d:14:b0:c0:66:8a:78:93:2c:
         ef:33:2c:c9:86:ba:9e:26:81:98:77:3e:00:d1:81:18:53:00:
         34:91:a5:34:be:c6:7c:80:7d:99:fd:32:22:23:bf:d6:5b:5f:
         85:37:c5:b8:5f:f2:6d:fd:aa:f7:2d:d0:91:57:fb:2e:f5:29:
         89:b6:57:f0:4f:e6:32:3a:01:fb:67:d0:47:bf:b6:8a:c2:3e:
         a0:2f:4a:62:0e:39:0c:9f:34:5a:cc:3c:32:3c:4f:0b:29:23:
         f7:5d:d1:08:74:0d:6e:78:2e:cb:0c:84:1d:a5:1c:2f:0d:3a:
         98:1a:04:fd:0a:d1:8a:b5:b1:af:34:f0:d4:d3:d5:10:18:45:
         2d:e0:b5:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MzcwNDExMC8GA1UEBRMoNkM2NjcwMTc1MjY4MzFDQzE4Mjc1MThERTEyQjYyMUY2
RjNGMzc4ODAeFw0yNTA4MjMwODIyMDVaFw0yNTA4MzAwODIyMDVaMBgxFjAUBgNV
BAMTDTY4YTk3YTJkLTg0YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCs0eOgWgfWs6iqYmQQHLJuqpm7SvSipUtYsLdZU/keFlpTTS4XOOwf7avMMikn
tHbQuqw1SkJArOoLwiXUTYpbaueZ0/TfWe+EKsY4ecwnrRhvuzO9UMIJKHMqrAXN
UPz1Bz4+IfGP1qsGO36kg0PjfkP5F7Hs/11j5cFcPrE1vzpMQp76rzDJkljJv4wX
RaOvRnCOJ1ulbAuPx5EiCyhK2M3BOQ4pVpEkUjhUYnHTGyFCQRoXOY7ts6QQZtN2
C8+2TSZJz9+6RHNcMXqunH2noIZ+fD6HQUKxq3kf2ZlA0w4iBumraM8NqE8QpGpI
TtvLmeukd8KVH/Xeo5ZHtxtpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVzBYMDDz
m4btnJH2j0yAFViGivswHwYDVR0jBBgwFoAUbGZwF1JoMcwYJ1GN4StiH28/N4gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNzA0L0M1QjQ3RDcyNzQw
QzExRjA5NEU4RDU0MEM0RjlBRTAyL2JHWndGMUpvTWN3WUoxR040U3RpSDI4X040
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYkdad0YxSm9NY3dZSjFHTjRTdGlIMjhfTjRnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz
NzA0L0M1QjQ3RDcyNzQwQzExRjA5NEU4RDU0MEM0RjlBRTAyL2JHWndGMUpvTWN3
WUoxR040U3RpSDI4X040Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHbNmh5b7SRnd2QImDXognG5Xl5ahfsFCXkFkC7L+D2p+O7umKmBP9Fs
ZnBnXWuz+Vx1Jxa280eAHIAAVOiLlSamfmu7J8mNFqpBxHsPb8yy1pkld+nXTdOv
lc/FX1br53A3YVrzzNwTgnGoRHWFQj4FVHDJ6z0UsMBminiTLO8zLMmGup4mgZh3
PgDRgRhTADSRpTS+xnyAfZn9MiIjv9ZbX4U3xbhf8m39qvct0JFX+y71KYm2V/BP
5jI6Aftn0Ee/torCPqAvSmIOOQyfNFrMPDI8TwspI/dd0Qh0DW54LssMhB2lHC8N
OpgaBP0K0Yq1sa808NTT1RAYRS3gte0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:35 2025 by rpki-client