Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
File:                     6Ind1VQsbSydx0DhJGqedI51E1I.mft (raw, json)
Hash identifier:          B1oHyeiydi0ACkfjYmtpQh0e5tsYwdNfEvG5FNyfngc=
Subject key identifier:   6C:74:3B:98:3B:AF:66:96:65:FA:DF:F6:98:09:B3:FA:F0:1D:3F:31
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Certificate issuer:       /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
Manifest number:          071F
Signing time:             Mon 12 May 2025 21:39:29 +0000
Manifest this update:     Mon 12 May 2025 21:39:29 +0000
Manifest next update:     Mon 19 May 2025 21:39:29 +0000
Files and hashes:         1: 6Ind1VQsbSydx0DhJGqedI51E1I.crl (hash: N8SWl3wmnwZJCejSr7clMDCnPrqAscpP5qXtBFqYhWw=)
                          2: 243B94A23E7A11EBBFFAC96BC4F9AE02.roa (hash: Cr86pDAeYBNOH/f3Ffkig2n8Xta7VZxs/ZGTP0dC2Ds=)
                          3: BB684734816B11EFA4D23930C4F9AE02.roa (hash: yDEfQxbpM8/45yk57WWqW8Bt+VgNvfcfxMhi33lEx40=)
                          4: 9E82296E5FA611EF9A75477FC4F9AE02.roa (hash: lV6jMb5h9nbmgpZPjhxFVRMKMVNkKVjEOjsDZ14+HCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
                          rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 21:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
        Validity
            Not Before: May 12 21:39:29 2025 GMT
            Not After : May 19 21:39:29 2025 GMT
        Subject: CN=68226a91-19cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ba:fc:85:d8:95:32:fe:8f:ba:4f:47:8f:15:
                    f7:94:dc:b9:b2:97:2b:d4:43:69:51:64:1c:00:3b:
                    c2:4c:36:d7:eb:68:f0:dc:34:c5:64:ad:64:00:58:
                    6e:98:ab:75:67:89:19:f9:c2:ef:64:50:2b:cd:04:
                    f2:4b:4a:78:5b:76:3f:48:5b:2d:d9:19:d8:19:c9:
                    28:fb:c4:42:97:40:89:4b:37:60:8b:5a:9c:21:f3:
                    d6:88:e7:ec:ee:fe:1d:e6:df:52:5b:cd:80:ea:4f:
                    b7:71:5d:1e:38:73:d5:f5:8d:24:35:4f:81:91:f7:
                    96:33:f8:b0:92:9e:5d:2e:b6:35:e2:fa:6a:a4:84:
                    30:a2:41:16:9c:58:08:ac:e9:71:a1:99:e2:2a:4b:
                    93:5d:80:80:16:d6:4c:bd:b2:94:af:b5:d0:e8:8f:
                    66:6b:ac:1d:a1:76:0a:25:c6:5c:23:88:65:04:90:
                    27:e9:95:ab:e6:84:af:60:8a:d9:9a:71:45:05:1e:
                    44:52:33:c7:a5:b7:a4:43:f2:dc:d1:a1:95:30:ba:
                    91:2f:2c:ed:3e:0f:f8:f1:65:5a:66:45:f6:0b:e2:
                    f2:40:57:7e:3a:48:a9:d1:16:dd:f7:38:e8:3c:f1:
                    e2:57:a7:54:e8:40:16:e5:90:b7:53:d2:15:2a:00:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:74:3B:98:3B:AF:66:96:65:FA:DF:F6:98:09:B3:FA:F0:1D:3F:31
            X509v3 Authority Key Identifier:
                keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:5c:0a:cf:45:3f:6a:44:d5:5a:44:d9:17:99:a9:cb:dc:03:
         8c:cf:1d:be:9d:56:84:1f:bd:b3:f7:1e:d2:83:9d:08:56:e0:
         1a:14:8d:05:53:3d:e2:40:7e:b8:39:83:77:ec:16:fe:11:9c:
         77:5b:bf:8b:28:c7:1f:cf:1f:50:ed:92:5f:4b:fc:ba:6c:8f:
         bf:3d:6d:bb:34:e4:d1:e6:c9:7a:f0:3b:a4:5f:5b:c0:00:b0:
         ac:af:c1:bb:5a:47:b0:a9:3d:3a:2b:9c:58:1f:7f:29:e8:1e:
         34:41:c1:a7:15:93:55:15:ec:76:b0:c3:c5:9e:9b:f1:b4:e2:
         28:de:34:45:01:96:92:ad:72:3b:87:98:3d:18:f1:eb:c6:df:
         ef:b7:bb:bf:de:1a:41:9a:00:1d:8e:93:df:8b:7e:bf:ed:d3:
         81:b0:1c:fe:d9:40:96:45:9f:5f:a0:38:4c:62:49:12:96:0c:
         d6:61:59:a9:57:d2:f8:48:d4:22:b6:e6:78:02:6f:ea:56:04:
         5e:26:5e:63:24:96:37:89:ff:f3:3f:ad:4b:a5:57:81:94:93:
         f4:2e:db:44:0a:07:5d:ec:aa:5b:4c:6c:b1:01:e2:d2:03:a4:
         b2:5c:b7:0f:5d:4d:88:ae:94:23:93:e7:02:31:2e:d2:f1:0e:
         d6:24:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:46:12 2025 by rpki-client