Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
File:                     BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json)
Hash identifier:          z0ZQ1UuNUUvOZW7uA7DC6MQEmTT7Cqta7UZvMShUuFk=
Subject key identifier:   6D:52:F8:7E:35:3B:9F:9C:2B:E5:71:34:E7:B7:CD:45:85:65:82:7A
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Certificate issuer:       /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
Manifest number:          E8
Signing time:             Fri 05 Sep 2025 06:21:23 +0000
Manifest this update:     Fri 05 Sep 2025 06:21:21 +0000
Manifest next update:     Fri 12 Sep 2025 06:21:21 +0000
Files and hashes:         1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: rA66YlqZszJ6mleIsnBDOG8UwWSxbU+l9+UuWWkGPQE=)
                          2: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: vsSxWPv3xEP3XML1AoQ7xUsTBNpQ7V7GqfC2jYKkI8o=)
                          3: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: BPa91Mlpk3lcdY3K9hP1gSDR+Vs/nkUIDuAiMhAUMOQ=)
                          4: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: CPH/9LGGv2Qb1QUYpywLXh/H9jmUzaUp17YNcG9enxA=)
                          5: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: nIMY3bqxx7G6z1cn5yKE35WnxglS+FWNkDKyhwYO+X8=)
                          6: FA414880107B11F09A6AF277C4F9AE02.roa (hash: aIYOhJlX/YYht50gRCU/C3Sow+wC984ISftUz40zSk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
        Validity
            Not Before: Sep  5 06:21:21 2025 GMT
            Not After : Sep 12 06:21:21 2025 GMT
        Subject: CN=68ba8162-7d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:80:18:31:20:4a:ac:a2:dd:4c:90:9f:f0:
                    3c:ea:c5:b4:96:bd:85:18:2c:d9:c8:aa:29:5d:64:
                    5c:e6:33:9f:17:76:28:0f:cd:f1:9d:89:e8:87:e4:
                    5d:96:d2:df:3d:31:55:61:7e:ab:e0:bd:78:01:12:
                    76:20:df:bf:8e:cc:4f:db:46:d8:eb:fa:5a:63:8b:
                    4e:06:1a:00:12:a3:1a:d3:6d:e7:1f:99:05:56:12:
                    68:95:a1:e3:ad:5d:62:fc:f8:a3:76:ab:05:88:60:
                    11:b9:39:f8:9f:bc:82:72:76:4d:a1:29:f9:3c:80:
                    0d:e2:e1:1e:2b:9a:48:9c:e1:0e:ec:1e:9f:82:57:
                    a6:a4:3d:30:36:d2:51:b4:fe:55:44:a6:47:86:d8:
                    21:7c:21:f4:70:01:2e:bf:42:e1:0e:84:14:4a:fb:
                    bb:63:39:b9:8a:94:15:1b:c1:60:83:04:0f:f9:51:
                    6f:64:1d:d2:fa:ef:12:2b:65:18:b1:e6:df:0c:ab:
                    ee:7a:6c:4e:53:75:a2:fe:81:64:f1:a0:d7:9d:2e:
                    13:62:cb:c3:04:3d:c4:0e:85:80:2f:37:a8:82:01:
                    17:b4:df:de:9a:44:77:35:d4:c6:54:9c:77:f1:a1:
                    e6:ae:68:fc:bf:ef:94:d4:dd:34:58:d2:3e:51:cf:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:52:F8:7E:35:3B:9F:9C:2B:E5:71:34:E7:B7:CD:45:85:65:82:7A
            X509v3 Authority Key Identifier:
                keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:c8:00:69:9b:e7:15:a1:d6:73:1f:da:55:07:ca:ef:13:
         46:b1:e8:c0:0d:5c:13:ae:3f:19:2e:bc:74:86:11:5b:ba:e5:
         4e:a5:bb:bb:f8:58:77:f8:03:09:8e:0e:e9:d1:a0:5b:ab:cc:
         be:36:44:38:50:a0:a1:67:56:a4:08:06:2c:30:f4:50:46:6c:
         7d:33:ee:fe:da:39:c5:1c:55:24:9a:d3:c9:f6:1c:b1:3b:d0:
         e3:0f:f6:98:f2:99:72:a9:28:ce:62:27:ad:4d:76:7f:5c:bb:
         5a:f8:da:e8:84:17:74:88:92:b1:b4:f6:d4:37:ac:bc:36:60:
         98:ba:1b:26:e0:2d:9f:1c:9b:d8:fe:fa:ef:bb:4c:c2:df:60:
         9f:f3:ff:b8:22:cd:56:32:fc:ed:dc:ce:12:d3:b0:56:44:5a:
         c8:33:34:01:c8:5d:bd:cd:e4:b7:5b:03:8e:64:f6:92:10:0b:
         55:2f:56:ec:4c:04:b7:4c:de:7e:c4:3a:c0:93:9d:3d:2a:39:
         48:9b:ef:0c:a7:79:e8:d2:37:c3:7f:77:87:40:b0:9a:94:44:
         45:ef:c6:31:57:a2:d0:d0:17:d3:b0:11:67:d3:3c:c4:11:61:
         0a:f4:a1:b2:50:46:fe:56:37:22:6c:5a:89:a9:20:95:49:6f:
         62:1e:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:26:11 2025 by rpki-client