Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
File:                     6HvQXvddUFllr1CWfUKLtf_-HME.mft (raw, json)
Hash identifier:          iy3HPa+4PZasSR3B50FuY3+w6CC+4QDC+zKx9e0wxSA=
Subject key identifier:   0E:A0:CB:01:A8:87:AA:92:03:75:37:83:00:03:B1:F5:2A:AF:DF:B6
Authority key identifier: E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1
Certificate issuer:       /CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
Certificate serial:       09AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
Manifest number:          09A6
Signing time:             Fri 22 Aug 2025 20:11:51 +0000
Manifest this update:     Fri 22 Aug 2025 20:11:50 +0000
Manifest next update:     Fri 29 Aug 2025 20:11:50 +0000
Files and hashes:         1: 6HvQXvddUFllr1CWfUKLtf_-HME.crl (hash: GwlxlqVKrNOvC64QPr1RCzKGsObR980O4bNrhhqcyJk=)
                          2: 03643212905F11EA94823C28C4F9AE02.roa (hash: HOv6woKgZ16Bnc6yr+WXy4C1GAOaPia/dFqUxc6c7eU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl
                          rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112327, serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
        Validity
            Not Before: Aug 22 20:11:50 2025 GMT
            Not After : Aug 29 20:11:50 2025 GMT
        Subject: CN=68a8cf06-3ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:2d:3f:af:17:8c:80:29:ce:56:d5:88:d0:
                    13:13:f9:cd:9f:3e:b0:c5:64:18:52:5c:3e:50:89:
                    4a:6d:2f:78:1e:db:3c:10:6c:de:3d:4f:b5:24:53:
                    da:5d:e6:eb:b0:81:de:83:b3:db:da:e8:20:82:53:
                    f1:a2:8f:38:a9:d0:07:79:0e:cb:a4:1c:91:a5:af:
                    b2:f4:23:25:19:c5:77:7f:21:bd:c7:7f:f5:d9:df:
                    12:29:aa:c5:6b:b0:22:03:4e:a0:96:05:7d:8e:a5:
                    aa:09:bd:eb:80:5b:d6:39:e0:82:c9:df:e1:9f:8e:
                    10:61:11:0f:ed:05:11:72:bf:1b:1f:2a:23:07:94:
                    ec:d3:d6:fa:ff:5d:e3:a7:23:d4:67:b1:88:ce:83:
                    21:e9:75:aa:08:42:6a:2c:48:4a:20:60:84:60:e7:
                    73:51:49:ab:c5:bf:fc:9a:f7:48:04:0f:da:d5:6f:
                    1a:17:d3:e5:92:0d:84:10:1e:92:6e:7c:84:5b:39:
                    6c:02:be:d7:89:40:07:8d:a6:b3:c3:ed:e7:51:17:
                    54:63:90:e2:46:0b:7d:d2:bf:92:93:c2:cb:55:63:
                    01:f1:a7:54:cf:ed:3a:27:90:c4:26:3a:13:28:8f:
                    de:b1:05:59:63:6c:fc:80:74:e4:e8:44:af:a6:c6:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A0:CB:01:A8:87:AA:92:03:75:37:83:00:03:B1:F5:2A:AF:DF:B6
            X509v3 Authority Key Identifier:
                keyid:E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:13:c8:b4:ad:c2:f4:16:f9:a9:7c:bc:e6:ab:aa:c3:16:aa:
         f1:f2:6f:94:2d:aa:51:94:e5:09:31:8e:64:f9:de:0a:0f:b4:
         11:22:25:4c:c4:08:29:5e:9c:81:6b:b9:e1:96:77:87:1c:e8:
         2f:34:ed:4f:ed:a4:0a:73:0b:7f:26:b5:ef:78:6c:fd:97:b8:
         bf:91:fa:3c:4b:54:c6:c0:71:b0:fe:da:f4:5f:d5:e3:4d:87:
         a3:5d:c9:d9:2c:41:02:20:75:34:a6:6f:08:af:ba:8e:ea:e8:
         b6:02:4e:7c:27:81:c9:87:f7:a5:cb:42:08:a5:6f:1a:98:f1:
         25:70:e6:21:c2:b4:55:a7:28:b5:f5:a8:c5:3d:ed:80:39:7d:
         91:9e:1f:35:40:93:a0:29:ea:5a:e3:a3:62:28:7b:24:eb:63:
         84:da:6e:12:e7:c0:34:63:e9:cf:98:9d:8d:d8:2b:69:4f:7c:
         8e:f4:66:b0:e6:ce:95:ba:c6:a2:6a:48:e5:48:98:bb:5a:a9:
         f6:9a:04:56:47:af:e5:f2:27:eb:a1:a8:cb:e5:fe:23:df:11:
         67:d2:96:96:22:d4:e2:03:2b:a5:56:3c:e2:a3:ef:69:5f:25:
         04:f3:ce:f5:cf:28:ac:0d:25:51:ed:e0:d5:48:ec:b5:ee:96:
         bd:d3:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:12 2025 by rpki-client