Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
File:                     6mETfAkAkG5HSNHgfMVV5qfM4QA.mft (raw, json)
Hash identifier:          +YVtTVKq5X3EFzYanum4KUgVyPX2VIrkDcMKLUIkn8k=
Subject key identifier:   5F:A3:BD:BF:62:EC:A0:FE:51:90:B5:C4:54:DC:E6:60:CE:90:9A:F7
Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
Certificate issuer:       /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
Manifest number:          072C
Signing time:             Fri 22 Aug 2025 23:11:40 +0000
Manifest this update:     Fri 22 Aug 2025 23:11:39 +0000
Manifest next update:     Fri 29 Aug 2025 23:11:39 +0000
Files and hashes:         1: 6mETfAkAkG5HSNHgfMVV5qfM4QA.crl (hash: +S/K99Moaktpr+hgEVzoDhS7+A+ihZ5HLi9yDgg3SvQ=)
                          2: 1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa (hash: dZTRls4280/E4YN4c7nuR8VH/U9lXLY5JNfcW3Mega8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl
                          rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
        Validity
            Not Before: Aug 22 23:11:39 2025 GMT
            Not After : Aug 29 23:11:39 2025 GMT
        Subject: CN=68a8f92b-1326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:9e:0e:c3:48:a9:c2:4a:9c:88:92:2d:5f:
                    13:c7:f5:5c:fa:e4:41:bf:b2:b4:09:d2:79:cf:b3:
                    a9:46:33:c0:38:2b:9e:5d:be:6c:01:5c:88:39:f1:
                    95:b6:ec:a2:33:b1:6f:01:d9:37:1c:d1:32:de:39:
                    c4:72:8f:0b:ef:a3:c0:a6:29:0c:ef:d2:87:1a:6d:
                    fa:d8:6e:6e:63:d1:89:53:c2:7e:58:b2:e6:16:68:
                    4b:c6:f9:09:d8:07:81:98:a2:51:c9:4a:29:fb:80:
                    fc:97:c8:9b:8f:b8:e6:fc:50:0a:80:99:fb:cb:03:
                    4c:bd:c4:5e:69:9a:07:1a:44:16:60:35:1c:00:df:
                    44:df:d0:39:fa:2b:53:7d:b3:2f:83:3b:b7:c2:fb:
                    4f:3a:35:e2:31:a4:28:b1:d4:9d:d4:a9:d7:c4:a7:
                    c9:66:45:67:cd:d9:29:16:d2:22:8b:da:53:b2:9c:
                    e2:c3:7d:cb:fb:4c:b2:88:2e:d7:83:20:6d:a9:ad:
                    7e:30:9b:1f:ea:c9:ed:a2:20:4e:7c:06:5d:d6:71:
                    a3:b4:6d:ea:e0:2c:6d:0a:fc:ce:31:6a:3c:ad:97:
                    64:3e:eb:7a:e2:34:f1:7d:7d:a1:fe:98:0a:07:0b:
                    7e:69:d2:b6:f1:5e:3d:e6:ef:cf:df:3c:bb:d0:d8:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A3:BD:BF:62:EC:A0:FE:51:90:B5:C4:54:DC:E6:60:CE:90:9A:F7
            X509v3 Authority Key Identifier:
                keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:96:60:89:5c:c6:f3:4b:9a:25:42:d0:c8:8c:59:86:af:
         31:2e:14:56:36:eb:63:d6:31:41:b9:a1:b7:fe:b2:46:10:83:
         b0:3f:a9:3c:c5:35:9b:fa:77:96:6b:f7:53:3f:e4:c8:9d:fc:
         be:5e:70:5a:56:87:bc:d3:55:0c:26:05:bb:be:ef:09:ce:a0:
         94:a7:26:f2:51:45:78:93:e3:6f:4c:11:50:5f:0a:81:d4:1c:
         75:46:08:76:31:b8:28:31:0b:d2:de:56:aa:bd:80:f2:b0:87:
         97:12:fd:ac:65:9c:f9:e4:e7:30:18:0a:75:56:ff:ad:66:ac:
         d1:34:f2:74:38:71:6b:68:cf:07:30:72:6b:20:19:25:8b:4f:
         d3:57:bb:0d:05:0a:a4:81:03:75:f8:00:89:8e:b0:72:7a:d2:
         70:20:44:f0:fa:3a:a6:a8:32:b0:2a:e2:5c:0d:e5:15:a9:42:
         b5:d8:24:3c:56:28:9d:d4:c7:32:f1:5b:ea:63:4d:f9:c5:ac:
         f5:22:26:5b:47:63:91:63:64:ce:f4:4e:4b:58:7b:8d:ae:13:
         db:7f:a0:8c:06:9d:1c:8c:fa:ba:08:44:41:14:54:a7:0c:93:
         c3:40:15:7f:36:ee:8e:a5:ba:e5:70:82:26:75:51:5c:02:a5:
         99:e2:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:17:08 2025 by rpki-client