Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
File:                     6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json)
Hash identifier:          x+rGzQclHSY3FX3S/MTCEDCjTrekcsEw0pbPQhS3Cuc=
Subject key identifier:   6C:99:C6:2A:B4:E5:60:D2:B6:A7:DE:E8:C8:A8:92:4E:2E:0B:FA:36
Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Certificate issuer:       /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Certificate serial:       1B3A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
Manifest number:          1B38
Signing time:             Fri 22 Aug 2025 16:23:11 +0000
Manifest this update:     Fri 22 Aug 2025 16:23:10 +0000
Manifest next update:     Fri 29 Aug 2025 16:23:10 +0000
Files and hashes:         1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: Tebf2wPA1M2VP10F2V0A9q8tvp3y729CesV143R1oDY=)
                          2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: W3khPMeaOIIvZA6XChV502z9D4IWV/QOl7ps2nePO0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6970 (0x1b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
        Validity
            Not Before: Aug 22 16:23:10 2025 GMT
            Not After : Aug 29 16:23:10 2025 GMT
        Subject: CN=68a8996f-c952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:6b:9b:d0:8e:75:30:fe:c2:14:d8:c8:35:
                    b4:a3:89:8d:49:d2:f9:aa:3b:32:7e:da:72:6b:c1:
                    aa:29:fe:ba:58:36:f7:3d:db:91:07:45:fc:65:32:
                    ac:84:5b:0e:e1:8f:84:9d:da:ac:ab:85:50:88:e9:
                    2c:71:3b:81:f9:a8:c4:cf:af:26:14:bf:12:0d:24:
                    81:88:8f:3f:81:c0:f2:8e:1f:1c:1d:87:e2:fd:bf:
                    53:46:b2:bd:26:a1:c1:59:7e:44:15:3e:c2:8e:7b:
                    64:e4:fc:df:2d:1d:19:b0:ab:b5:24:83:c5:bb:61:
                    a0:41:fc:f1:af:fb:7a:1f:67:2f:7f:a1:62:89:3f:
                    f1:85:c7:e5:16:18:34:e6:d4:d6:76:c5:be:6c:fc:
                    ab:29:c8:80:d5:ab:40:02:a0:3c:b2:92:95:d5:fa:
                    d9:3e:68:4f:dd:45:69:bd:4b:3d:b0:2a:f4:43:7d:
                    46:54:37:f0:43:67:7a:51:7e:4d:9a:66:03:01:fe:
                    04:df:b0:34:aa:70:6a:7c:fb:20:50:6c:22:d9:7e:
                    a5:67:b5:e2:cd:ae:c1:8f:0f:6b:9f:d5:bb:fc:a3:
                    a8:f2:fb:04:77:44:d3:12:ed:bc:43:d8:f0:45:49:
                    48:33:b6:83:10:b4:83:a0:7d:4b:00:c9:ae:b8:b1:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:99:C6:2A:B4:E5:60:D2:B6:A7:DE:E8:C8:A8:92:4E:2E:0B:FA:36
            X509v3 Authority Key Identifier:
                keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f5:12:2c:f1:5b:39:f0:09:0c:47:56:7c:32:6f:fc:f6:06:
         88:54:97:b1:d1:2d:c1:e0:2e:75:92:67:f9:6b:13:7f:e9:c8:
         c5:60:37:bb:b2:bf:91:65:86:00:86:3d:2b:8b:91:53:7b:d8:
         6e:40:c3:9b:28:a9:da:2c:15:50:62:85:d8:c6:e7:9c:0d:80:
         b0:45:a3:fe:d5:88:7e:48:38:c9:fd:a5:dc:1f:60:d0:84:a9:
         25:df:cb:98:8e:41:94:d5:b5:77:10:0c:64:da:42:18:55:9f:
         73:f0:e9:63:2a:9b:23:cb:f5:db:e2:52:4c:bd:12:07:6f:8b:
         df:61:0f:3b:25:c0:d4:ed:ff:cb:35:d2:86:e0:34:9b:40:12:
         e1:9c:01:77:da:0f:1b:02:de:be:a1:be:ef:67:1b:de:18:4d:
         85:07:75:57:31:f5:37:6e:0d:7e:01:ee:ab:7c:ab:b8:2c:b7:
         13:73:f5:69:38:91:dd:9e:eb:f6:a6:ce:ee:c3:ae:13:86:6a:
         9f:d2:1e:22:2c:c8:88:8c:d5:2b:81:d9:27:1d:06:84:1f:5f:
         16:ed:a1:25:d6:da:25:75:b7:a3:66:1f:d3:7e:58:88:0c:6a:
         ba:d2:d4:5a:5b:0c:54:59:a8:2a:4e:b9:6a:e4:36:74:86:d6:
         7a:88:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:43:06 2025 by rpki-client