Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
File:                     blskgROGqkqC2B9yxd0kmShvv9Q.mft (raw, json)
Hash identifier:          pGi8KFDAtQKA/rOyV9/686qb4REVI42BnHrLB8koBb0=
Subject key identifier:   53:4E:04:47:7D:DA:EC:CF:DE:62:64:A2:B2:65:25:94:B5:93:CD:9F
Authority key identifier: 6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4
Certificate issuer:       /CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
Certificate serial:       0739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
Manifest number:          072F
Signing time:             Tue 04 Nov 2025 21:51:52 +0000
Manifest this update:     Tue 04 Nov 2025 21:51:51 +0000
Manifest next update:     Tue 11 Nov 2025 21:51:51 +0000
Files and hashes:         1: blskgROGqkqC2B9yxd0kmShvv9Q.crl (hash: +BpE1oW6dVtNoN9kVaNfMQmSJFB4uVr+LB2zePBmC68=)
                          2: 3B9F9ED8FE9811EC9965A444C4F9AE02.roa (hash: EmBcARlZPMZMZmDCZPzy5ekMnEgSeC1SNvjgPIC4FDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175251, serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
        Validity
            Not Before: Nov  4 21:51:51 2025 GMT
            Not After : Nov 11 21:51:51 2025 GMT
        Subject: CN=690a7578-7e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:c8:31:04:2b:74:20:00:b4:48:75:97:f6:
                    fe:db:f5:9b:45:31:ec:53:d8:a9:7c:c1:9a:9a:1e:
                    51:5b:28:90:1f:87:a1:43:71:cc:28:53:7e:df:57:
                    ab:eb:d2:af:ea:f7:d6:db:55:9f:25:85:f3:ba:ff:
                    0e:6d:74:1c:96:79:a8:27:97:a8:b7:76:de:ef:4f:
                    f5:d9:54:a2:7c:9a:7e:09:5f:24:29:c9:51:3f:bf:
                    5c:e2:31:90:3e:c1:3e:e2:2f:5a:95:46:7c:63:14:
                    44:f9:e7:a0:69:24:53:1a:05:da:98:11:91:97:d6:
                    92:4b:ef:4f:cd:5a:d4:49:1f:ce:59:32:54:71:d7:
                    8c:4f:36:8f:b3:63:77:ef:49:fc:16:45:b7:8f:7b:
                    b5:75:59:79:e9:d2:ee:c9:99:a8:d4:fd:93:dc:63:
                    c5:36:49:4f:8f:d0:54:9e:91:61:93:28:6f:d2:a6:
                    05:b8:89:23:ba:16:c0:33:7a:83:b9:4a:bd:99:51:
                    4c:34:be:b2:d2:a0:7d:f0:2e:89:36:e3:30:06:02:
                    ac:f6:15:59:bb:39:60:6d:42:06:39:71:f7:a4:a8:
                    6e:15:74:bc:26:5c:54:f3:5a:04:8a:c9:01:1b:9d:
                    30:ad:01:d2:ab:af:04:b8:e1:2a:aa:d2:b6:32:17:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4E:04:47:7D:DA:EC:CF:DE:62:64:A2:B2:65:25:94:B5:93:CD:9F
            X509v3 Authority Key Identifier:
                keyid:6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ba:36:f6:f0:a0:bc:34:bb:a2:38:2f:32:ed:f1:2c:6d:c4:
         64:35:77:61:e3:71:1e:dd:8f:5c:4e:87:d9:e7:5a:bc:56:67:
         ca:26:6a:ec:95:06:46:93:0c:b7:cb:7b:22:f0:d5:ff:48:c2:
         06:6d:0e:36:da:4c:7a:cd:61:0c:08:d2:21:7d:7c:fb:d7:2c:
         8c:b7:19:dd:fe:4b:a8:a4:3f:33:f9:9d:6a:89:05:71:63:32:
         c7:35:28:ce:21:e7:45:c1:5e:a2:a0:58:bf:b7:7e:76:22:59:
         10:a0:ab:76:0f:41:10:18:aa:14:b0:53:18:a7:2c:0d:09:ec:
         24:17:9a:b5:53:5e:53:34:35:c6:d3:61:ae:75:68:f6:be:1f:
         75:29:dd:0a:30:be:65:fe:7d:0a:ec:d2:2b:f4:3b:eb:8c:4e:
         8c:40:2d:51:bc:91:58:0a:70:9d:36:00:1a:bb:70:90:20:57:
         d3:0e:2e:59:8d:f4:7c:96:7a:a6:c6:54:37:cf:db:0b:b5:d7:
         c7:be:26:a0:e5:43:71:d3:55:f8:24:65:06:b9:9a:0a:af:f8:
         17:b2:c8:80:9d:af:25:0c:83:d0:ed:6f:ce:c7:cb:12:9e:48:
         73:f5:cb:e8:8b:c2:5d:4e:23:ef:59:ba:c3:ab:6a:4a:5c:e4:
         00:04:52:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUyNTExMTAvBgNVBAUTKDZFNUIyNDgxMTM4NkFBNEE4MkQ4MUY3MkM1REQyNDk5
Mjg2RkJGRDQwHhcNMjUxMTA0MjE1MTUxWhcNMjUxMTExMjE1MTUxWjAYMRYwFAYD
VQQDEw02OTBhNzU3OC03ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ybIMQQrdCAAtEh1l/b+2/WbRTHsU9ipfMGamh5RWyiQH4ehQ3HMKFN+31er
69Kv6vfW21WfJYXzuv8ObXQclnmoJ5eot3be70/12VSifJp+CV8kKclRP79c4jGQ
PsE+4i9alUZ8YxRE+eegaSRTGgXamBGRl9aSS+9PzVrUSR/OWTJUcdeMTzaPs2N3
70n8FkW3j3u1dVl56dLuyZmo1P2T3GPFNklPj9BUnpFhkyhv0qYFuIkjuhbAM3qD
uUq9mVFMNL6y0qB98C6JNuMwBgKs9hVZuzlgbUIGOXH3pKhuFXS8JlxU81oEiskB
G50wrQHSq68EuOEqqtK2Mhc8UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNOBEd9
2uzP3mJkorJlJZS1k82fMB8GA1UdIwQYMBaAFG5bJIEThqpKgtgfcsXdJJkob7/U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI1MS84MUJGQTMyMjUz
RUYxMUVCOTdEMzhDMTZDNEY5QUUwMi9ibHNrZ1JPR3FrcUMyQjl5eGQwa21TaHZ2
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Jsc2tnUk9HcWtxQzJCOXl4ZDBrbVNodnY5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTI1MS84MUJGQTMyMjUzRUYxMUVCOTdEMzhDMTZDNEY5QUUwMi9ibHNrZ1JPR3Fr
cUMyQjl5eGQwa21TaHZ2OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxujb28KC8NLuiOC8y7fEsbcRkNXdh43Ee3Y9cTofZ51q8VmfKJmrs
lQZGkwy3y3si8NX/SMIGbQ422kx6zWEMCNIhfXz71yyMtxnd/kuopD8z+Z1qiQVx
YzLHNSjOIedFwV6ioFi/t352IlkQoKt2D0EQGKoUsFMYpywNCewkF5q1U15TNDXG
02GudWj2vh91Kd0KML5l/n0K7NIr9DvrjE6MQC1RvJFYCnCdNgAau3CQIFfTDi5Z
jfR8lnqmxlQ3z9sLtdfHviag5UNx01X4JGUGuZoKr/gXssiAna8lDIPQ7W/Ox8sS
nkhz9cvoi8JdTiPvWbrDq2pKXOQABFKC
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:27:20 2025 by rpki-client