Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
File:                     blskgROGqkqC2B9yxd0kmShvv9Q.mft (raw, json)
Hash identifier:          XBjQdt4LSwc7xvDyTem7boZ5wonAjUWFg/qrxqNDEGw=
Subject key identifier:   3A:04:52:2A:1D:23:10:8B:DD:7A:F3:33:80:F9:9B:DF:33:93:EA:15
Authority key identifier: 6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4
Certificate issuer:       /CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
Certificate serial:       0704
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
Manifest number:          06FA
Signing time:             Tue 22 Jul 2025 22:14:30 +0000
Manifest this update:     Tue 22 Jul 2025 22:14:30 +0000
Manifest next update:     Tue 29 Jul 2025 22:14:30 +0000
Files and hashes:         1: blskgROGqkqC2B9yxd0kmShvv9Q.crl (hash: LKXUY/vBfbDCmC0HJp9cR4fxgTQYv4eammzfjGAbXgs=)
                          2: 3B9F9ED8FE9811EC9965A444C4F9AE02.roa (hash: EmBcARlZPMZMZmDCZPzy5ekMnEgSeC1SNvjgPIC4FDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 22:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175251, serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
        Validity
            Not Before: Jul 22 22:14:30 2025 GMT
            Not After : Jul 29 22:14:30 2025 GMT
        Subject: CN=68800d46-c10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:03:ae:5b:df:17:4b:4f:c5:ae:d7:f5:e3:
                    e3:fb:5d:b2:cf:20:8b:e2:22:86:39:04:86:9d:c8:
                    30:a5:8f:de:36:b2:f7:4d:d1:1d:fb:47:f7:19:d9:
                    39:97:c8:d3:74:56:ba:78:f8:9f:cd:8d:e0:69:1d:
                    35:83:76:82:4c:94:09:47:8d:75:2c:52:0e:c4:ac:
                    c6:39:9c:fd:dc:b4:ba:ae:47:92:40:30:2b:d8:28:
                    79:3b:bb:06:32:d7:82:af:85:18:64:d8:b9:23:7f:
                    d6:fb:69:ee:5a:14:7e:2b:d2:93:08:a5:5a:00:2b:
                    c9:79:e4:ac:43:4c:3a:df:71:a1:c6:7e:ea:36:66:
                    bd:fa:95:45:35:e1:67:c3:34:a8:4a:10:08:c4:f7:
                    6a:37:02:4b:8b:61:ae:61:e4:84:e8:26:fd:73:9a:
                    48:43:69:2b:cb:29:f7:ab:47:5c:49:e8:02:23:47:
                    a3:96:ba:88:89:f6:e4:fb:c5:27:54:be:f5:9b:75:
                    21:d6:c5:d5:f0:a4:3b:72:89:51:f8:0b:db:0e:4c:
                    6e:d1:76:f0:8f:e2:e5:60:36:0e:f7:c0:f1:10:10:
                    5a:78:a0:31:39:47:7e:7c:4f:e2:81:3a:5e:fe:a5:
                    4f:f6:9d:b3:0c:83:5a:95:96:00:4d:ac:83:4d:e0:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:04:52:2A:1D:23:10:8B:DD:7A:F3:33:80:F9:9B:DF:33:93:EA:15
            X509v3 Authority Key Identifier:
                keyid:6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:19:76:c3:df:09:da:06:66:7f:8e:87:f7:1a:02:29:43:0d:
         33:8c:96:bc:97:aa:e1:93:36:6d:91:40:01:e0:d4:f1:94:d1:
         e4:35:34:5a:ef:71:49:78:27:3b:f2:21:62:87:24:40:5f:ea:
         d5:2f:18:1f:45:59:37:b3:f6:d5:5a:e8:4f:f5:a2:ae:e4:14:
         e5:dd:ac:95:c6:70:e6:c2:4e:39:21:d0:56:d0:8c:92:d6:7e:
         bc:6c:bd:f5:25:56:49:ee:80:bd:d8:ea:cc:58:ef:3c:80:01:
         c8:e1:69:ea:df:61:02:c4:b6:5d:23:25:77:07:88:a1:88:a2:
         44:68:b3:70:8d:1d:2d:5d:c9:90:28:60:04:fd:31:13:d5:39:
         b3:e9:2d:77:df:9d:8f:8b:9c:28:9b:dc:ef:79:fc:98:07:7c:
         6c:f7:dd:1c:13:2c:13:f4:53:55:5d:29:9b:1b:00:50:3d:77:
         67:48:ed:ab:9d:88:37:a3:0e:bf:c8:e8:97:19:7a:29:85:c9:
         62:20:5b:fc:55:3c:63:91:92:a0:b4:f1:f7:e9:ef:ca:b1:3c:
         ff:9e:cb:5c:f6:c0:4e:05:fd:24:ce:c9:c9:23:3b:04:7a:95:
         e7:40:2d:49:20:bc:42:79:e1:da:ab:23:fe:7e:d3:d0:88:a0:
         6c:24:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:50 2025 by rpki-client