Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
File:                     6rJKkMbQRs2D-170o8WY5OqaFow.mft (raw, json)
Hash identifier:          RrkNcgGYf55M9/NEj0sCogF+Esc/rtGoLFaA1Q/wCT4=
Subject key identifier:   86:BC:4F:BB:91:2C:AD:CA:92:08:2C:11:09:D2:79:95:FD:AD:5E:85
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       07CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
Manifest number:          154A
Signing time:             Fri 22 Aug 2025 18:02:47 +0000
Manifest this update:     Fri 22 Aug 2025 18:02:47 +0000
Manifest next update:     Fri 29 Aug 2025 18:02:47 +0000
Files and hashes:         1: 6rJKkMbQRs2D-170o8WY5OqaFow.crl (hash: e4YHTIM6F0GEwy8vxDbHXR5QguryesRArTayNaEF650=)
                          2: 524CFDB27C1111EFBFC7363AC4F9AE02.roa (hash: 5DWEXQIFBs195YUI1poQcrXKWXLS8W3OpiwQSBqSWIA=)
                          3: F6C5480A7C1011EF97676539C4F9AE02.roa (hash: fPzznFHrH41Cu7PATVjc5p4RFmjIGfaJ8ZyhknBJH2I=)
                          4: 41372C94C1A311EC8986B978C4F9AE02.roa (hash: WTDIuE/G1qrkGu3PYWOTs1bHaZxHX8fxTlZEa1gE7Ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Aug 22 18:02:47 2025 GMT
            Not After : Aug 29 18:02:47 2025 GMT
        Subject: CN=68a8b0c7-ae93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:ec:38:4d:be:39:52:5d:b9:77:01:c9:d4:
                    0c:b6:51:6a:bb:74:bf:9a:c9:60:c3:b0:7f:67:40:
                    d2:3f:87:3c:a7:96:b6:2e:d0:d9:ef:78:6d:fc:5c:
                    42:56:df:eb:1c:a7:b8:6b:74:24:c3:4f:68:22:03:
                    35:e0:7d:42:fa:1c:cf:70:c2:45:20:ca:9c:98:e1:
                    4b:d7:3b:14:6d:56:5e:de:88:8a:5a:9d:1e:d9:3c:
                    f8:72:85:d7:3e:3c:c6:c9:6e:50:ab:a0:38:49:9a:
                    22:1b:bc:da:37:40:a8:d9:5a:f4:96:75:e3:05:99:
                    1b:ae:f6:fc:fa:33:a5:24:fb:bf:1d:4e:25:f8:86:
                    76:4c:c5:aa:54:c7:c2:29:11:26:30:6a:9b:5c:0e:
                    6c:70:a6:7c:bf:9b:14:e8:89:62:a2:1d:34:ca:22:
                    aa:2e:a4:be:d3:4d:45:d8:51:af:9b:d5:02:0c:b1:
                    60:97:4a:b3:7e:37:c1:48:14:a6:64:85:88:36:13:
                    b6:2c:d6:93:9f:4d:86:db:5d:13:4c:5d:16:4f:0f:
                    f6:58:8b:6f:0c:b8:02:b6:c3:d6:1c:0a:63:02:61:
                    63:d4:96:ed:6b:4a:a1:44:26:6f:32:17:c2:02:10:
                    ca:3c:6e:ab:2d:53:b5:1a:95:b3:6c:35:24:a2:ba:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BC:4F:BB:91:2C:AD:CA:92:08:2C:11:09:D2:79:95:FD:AD:5E:85
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:95:d7:1c:f0:4a:37:8b:02:51:34:22:45:a1:bc:de:ed:4b:
         ff:5b:88:da:82:bb:3e:56:3c:4f:07:00:d8:e8:df:6a:d2:2a:
         cb:b7:1b:84:1d:41:1e:59:95:88:a9:ee:3c:3f:0b:f0:b9:09:
         23:a3:cd:57:86:ca:ea:7d:f7:32:bb:16:08:52:41:d1:00:e7:
         57:e7:55:03:a5:9f:ae:2e:b4:d8:11:d3:50:2d:4b:d4:f3:b4:
         18:29:77:34:67:33:58:01:9b:9d:19:05:39:25:53:71:51:ae:
         19:28:eb:f8:1a:3e:ac:eb:a3:c1:83:c0:15:67:28:a1:a4:ae:
         dd:a1:ec:ae:c0:1f:ba:cf:ac:b3:da:73:28:06:7c:be:33:8b:
         aa:f1:17:75:b2:45:9e:ec:d1:3d:c0:f7:cf:97:da:f7:66:f5:
         0e:3f:bd:8b:1c:a6:01:bf:6d:03:68:e4:17:41:92:ab:ce:c3:
         3d:aa:dc:a8:80:ef:d4:0b:6f:85:2d:57:44:de:cd:bb:7e:f1:
         35:15:31:68:b9:8c:d5:d3:90:b2:a2:7a:3f:7c:2c:35:50:92:
         6a:5c:96:be:90:8e:7f:14:68:d0:a8:3c:de:81:42:9f:d3:a4:
         49:96:c2:00:d4:73:79:bb:55:14:d6:8a:46:61:31:4b:08:79:
         6e:4a:f1:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzcyNDIxMTAvBgNVBAUTKEVBQjI0QTkwQzZEMDQ2Q0Q4M0ZCNUVGNEEzQzU5OEU0
RUE5QTE2OEMwHhcNMjUwODIyMTgwMjQ3WhcNMjUwODI5MTgwMjQ3WjAYMRYwFAYD
VQQDEw02OGE4YjBjNy1hZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlt7sOE2+OVJduXcBydQMtlFqu3S/mslgw7B/Z0DSP4c8p5a2LtDZ73ht/FxC
Vt/rHKe4a3Qkw09oIgM14H1C+hzPcMJFIMqcmOFL1zsUbVZe3oiKWp0e2Tz4coXX
PjzGyW5Qq6A4SZoiG7zaN0Co2Vr0lnXjBZkbrvb8+jOlJPu/HU4l+IZ2TMWqVMfC
KREmMGqbXA5scKZ8v5sU6Ilioh00yiKqLqS+001F2FGvm9UCDLFgl0qzfjfBSBSm
ZIWINhO2LNaTn02G210TTF0WTw/2WItvDLgCtsPWHApjAmFj1Jbta0qhRCZvMhfC
AhDKPG6rLVO1GpWzbDUkorqAGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIa8T7uR
LK3KkggsEQnSeZX9rV6FMB8GA1UdIwQYMBaAFOqySpDG0EbNg/te9KPFmOTqmhaM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB
MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi82ckpLa01iUVJzMkQtMTcwbzhXWTVPcWFG
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZySktrTWJRUnMyRC0xNzBvOFdZNU9xYUZvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi82ckpLa01iUVJz
MkQtMTcwbzhXWTVPcWFGb3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzldcc8Eo3iwJRNCJFobze7Uv/W4jagrs+VjxPBwDY6N9q0irLtxuE
HUEeWZWIqe48PwvwuQkjo81XhsrqffcyuxYIUkHRAOdX51UDpZ+uLrTYEdNQLUvU
87QYKXc0ZzNYAZudGQU5JVNxUa4ZKOv4Gj6s66PBg8AVZyihpK7doeyuwB+6z6yz
2nMoBny+M4uq8Rd1skWe7NE9wPfPl9r3ZvUOP72LHKYBv20DaOQXQZKrzsM9qtyo
gO/UC2+FLVdE3s27fvE1FTFouYzV05Cyono/fCw1UJJqXJa+kI5/FGjQqDzegUKf
06RJlsIA1HN5u1UU1opGYTFLCHluSvH5
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:34:42 2025 by rpki-client