Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
File:                     1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json)
Hash identifier:          VgB7WxXG69JB91ZGgJ0P7++NIhotmopMkBhcDfMwobM=
Subject key identifier:   FA:F1:A1:CB:2B:42:D0:5B:FF:0C:3B:33:1C:68:2F:3D:93:99:BC:4D
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Certificate issuer:       /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
Manifest number:          C6
Signing time:             Tue 01 Jul 2025 06:23:33 +0000
Manifest this update:     Tue 01 Jul 2025 06:23:33 +0000
Manifest next update:     Tue 08 Jul 2025 06:23:33 +0000
Files and hashes:         1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: O/seZm8BUsIBBqcNScq5tEX/Igib1Ll8EPQcHDVbysw=)
                          2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: LuOXDNonR3GEQAX6Ae//YPTmZrxLa+xdQ9eXFVMZLeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 06:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
        Validity
            Not Before: Jul  1 06:23:33 2025 GMT
            Not After : Jul  8 06:23:33 2025 GMT
        Subject: CN=68637ee5-638c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:af:7d:90:6d:f0:ac:d0:d7:40:27:62:bc:
                    67:0b:d5:b0:4a:a9:ac:e3:ed:e0:18:c0:2a:4a:2f:
                    12:b3:f9:b8:69:68:a2:66:05:e1:d5:2e:76:34:6f:
                    af:e2:71:62:23:f7:0e:bf:bf:35:f1:02:4f:3f:2e:
                    a6:59:9c:f3:06:b2:82:eb:a8:f1:ea:3e:83:85:64:
                    10:82:39:0e:a6:66:e5:1c:12:94:7a:b8:cc:b6:50:
                    eb:86:e7:64:1e:1c:92:e4:1d:25:85:07:d4:87:3a:
                    25:13:ba:ac:6b:f8:a2:da:22:f4:37:07:9c:d6:cb:
                    af:3b:02:8f:59:2e:b2:8b:a6:d4:94:43:ac:eb:3f:
                    2e:e5:84:8a:fd:8a:ed:22:0e:37:01:64:5b:e8:b5:
                    c5:77:c1:49:dd:f3:fc:0c:4d:d4:98:3e:d2:fb:58:
                    ea:bd:64:de:aa:0f:2f:d0:13:0b:e7:ee:45:f3:bd:
                    a9:cf:8d:6e:20:c2:f3:9c:20:8d:a7:4b:a4:67:4e:
                    9e:d0:07:33:85:7a:35:4f:02:ac:4b:51:59:88:a7:
                    65:2e:19:e0:2d:bd:7e:84:5f:32:36:5d:55:6b:de:
                    1c:08:89:61:d1:fa:64:f2:d3:d6:ec:69:d9:22:bc:
                    3a:eb:a3:c6:c4:0f:b0:88:9f:79:f9:05:9f:51:0f:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:A1:CB:2B:42:D0:5B:FF:0C:3B:33:1C:68:2F:3D:93:99:BC:4D
            X509v3 Authority Key Identifier:
                keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:29:e1:94:c3:43:3d:ff:dd:bc:1a:55:2d:a5:a6:b5:73:73:
         d2:e5:8f:c4:38:e8:09:5d:94:06:5a:7c:b3:82:a5:e5:a3:89:
         30:99:68:1d:1d:8b:b1:ca:b2:31:26:ef:5e:0a:2b:49:de:bf:
         c1:50:c2:7f:4a:dd:51:29:7c:1c:82:fd:49:0e:e0:6d:f7:9b:
         82:b1:bc:51:98:06:01:4f:be:a1:92:ca:1d:f1:5a:19:c8:fe:
         6d:9e:d6:47:94:60:07:20:f8:a8:7f:a6:e0:1f:03:a6:22:22:
         90:81:47:f6:26:6e:1d:5b:46:5d:5e:41:7a:fc:ed:a3:a9:07:
         6e:f5:be:71:80:e2:b3:3c:ef:aa:cc:29:e6:84:47:67:ac:fc:
         5c:6f:72:ca:c1:e8:da:f3:08:d6:9e:27:83:ad:24:34:f6:74:
         0d:97:11:5d:cd:fe:9d:3a:ad:ab:8c:fe:50:a1:02:6d:81:6b:
         9f:2b:50:15:c7:e7:91:d6:f9:0e:28:34:96:67:85:d2:8a:87:
         6b:29:c2:6c:67:b9:b9:7e:db:ce:51:76:9f:9c:7c:6e:d0:f3:
         5f:a2:b7:13:5e:bf:9a:8a:d7:90:87:36:b8:05:bc:31:07:af:
         83:c7:08:31:45:e6:98:a7:7f:6e:0a:3c:bb:aa:73:1c:84:4d:
         65:48:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:47:27 2025 by rpki-client