Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
File:                     6rJKkMbQRs2D-170o8WY5OqaFow.mft (raw, json)
Hash identifier:          nGjr0dMg6oYhg8wwASigH3jHe2mtSKM8ejDPpfkz9sA=
Subject key identifier:   F9:38:CF:40:C6:39:44:65:8F:B8:2C:B7:EC:20:2F:34:A7:D6:9D:FA
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       07AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
Manifest number:          1513
Signing time:             Wed 02 Jul 2025 18:10:06 +0000
Manifest this update:     Wed 02 Jul 2025 18:10:06 +0000
Manifest next update:     Wed 09 Jul 2025 18:10:06 +0000
Files and hashes:         1: 6rJKkMbQRs2D-170o8WY5OqaFow.crl (hash: OMS5mhSAQaA2GihVO8gC7kDArDrL72jfo9Q+4wUbCBk=)
                          2: 524CFDB27C1111EFBFC7363AC4F9AE02.roa (hash: 2FhmgFAVYlSkuLyufZImw2MixSRSmicNo3aUOr/h5T8=)
                          3: F6C5480A7C1011EF97676539C4F9AE02.roa (hash: G5E0ld16/NxVRFhbaeBuIdJHmsDoeWhuRW6eAAixqEc=)
                          4: 41372C94C1A311EC8986B978C4F9AE02.roa (hash: E+WqsKNK7OE9+7VQUlHwqUrZ9hFZUdjjeNvLJwk6a5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Jul  2 18:10:06 2025 GMT
            Not After : Jul  9 18:10:06 2025 GMT
        Subject: CN=686575fe-f54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:88:bb:96:47:c6:2a:eb:a6:af:48:76:02:
                    96:a3:a9:ea:92:d7:2a:31:b2:e8:74:aa:66:a4:7f:
                    35:9d:ea:1f:9a:54:11:c6:0c:6c:33:c9:8c:1d:0f:
                    73:8a:dc:7b:80:3f:5d:bf:dc:94:05:ef:85:04:09:
                    28:51:8a:87:f9:1a:82:e0:06:52:29:6a:77:86:04:
                    ce:70:20:18:46:68:06:e1:24:50:20:dd:61:86:86:
                    21:47:04:2f:f4:1c:4b:60:da:21:b0:a2:dc:b2:2f:
                    0c:51:0e:e6:31:cb:2b:bb:fa:a6:e4:bc:68:f3:e5:
                    21:96:10:44:7c:61:86:5a:4c:6c:67:cc:d3:eb:16:
                    5f:e9:50:77:8c:5c:11:c3:84:ba:cb:65:fb:ea:71:
                    b2:a3:e4:fd:7c:4e:12:f2:f6:2d:38:4d:15:8f:22:
                    fa:89:75:9f:86:0a:a0:18:18:dc:cf:eb:fb:b0:17:
                    8d:e4:f3:ea:9b:af:66:ae:09:41:d9:2a:07:a3:72:
                    e9:7f:67:8a:6a:27:48:88:a8:42:7d:c9:c8:90:13:
                    b2:06:38:40:9c:ed:0a:1a:e1:63:14:08:c5:b4:01:
                    5c:69:b9:de:e4:94:cd:79:f9:4f:e0:ae:b6:eb:ae:
                    8f:60:9f:36:c7:05:a8:93:7b:19:81:2d:4f:b2:fb:
                    cf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:38:CF:40:C6:39:44:65:8F:B8:2C:B7:EC:20:2F:34:A7:D6:9D:FA
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:14:c5:00:ed:3c:7d:f0:aa:8b:9f:d0:b3:75:45:59:9d:
         04:ce:77:45:ce:7c:cf:bf:91:d5:c2:64:1c:43:d7:b0:af:e4:
         9a:ba:e9:9b:83:e2:91:49:5c:1c:8f:0d:75:8f:c4:32:bc:3c:
         81:af:1d:34:a7:69:06:71:85:ac:ac:10:f0:31:10:75:cf:7f:
         75:f2:87:af:f8:5a:cc:f1:01:f5:b3:e2:aa:81:75:de:75:15:
         c0:e5:34:e8:94:25:8a:04:20:59:cb:9b:c7:1e:45:0f:ea:ac:
         77:b4:14:ff:d8:cc:9e:71:55:18:33:d2:de:b2:37:e1:d6:28:
         6f:b6:01:28:e3:2f:1c:92:fc:2d:28:f8:3b:18:4a:67:17:7d:
         a7:44:2c:4f:01:91:ac:82:50:e9:7b:5a:60:61:37:95:e6:b4:
         50:d8:86:a3:ae:66:ed:89:ab:4c:45:df:8c:74:84:43:d5:67:
         1c:39:d1:67:c1:6f:0f:ac:df:55:7f:1c:eb:12:d7:ab:16:cd:
         71:e5:26:8c:b8:a9:8a:1b:63:7e:6d:51:db:f2:1d:72:f8:65:
         7e:71:df:58:30:3d:d4:6e:9a:4a:59:7e:66:cb:a6:8c:69:9a:
         39:d1:22:53:df:69:eb:7a:10:f8:cf:53:34:a8:26:83:4e:9d:
         99:10:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:39:59 2025 by rpki-client