Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          ETT1759nePInf4zzW3thvGX6Istefk2/h7XFWY17EvU=
Subject key identifier:   04:9B:F4:F5:09:C9:21:4D:24:F6:8A:9A:DA:22:82:19:DD:54:20:71
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0D2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0D20
Signing time:             Fri 22 Aug 2025 18:10:39 +0000
Manifest this update:     Fri 22 Aug 2025 18:10:39 +0000
Manifest next update:     Fri 29 Aug 2025 18:10:39 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: FEus96CNPkAe7i3Av0QFKJhtluzecaR9kTTfeYC8UuE=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3371 (0xd2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Aug 22 18:10:39 2025 GMT
            Not After : Aug 29 18:10:39 2025 GMT
        Subject: CN=68a8b29f-bd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:f2:3a:9d:9d:0d:61:61:1b:ec:0f:f3:52:
                    d1:92:79:04:a7:35:ce:92:35:b0:f9:f8:fd:9d:a7:
                    54:72:99:d5:16:3b:76:ef:1c:b8:b1:a5:3c:14:1c:
                    08:bb:66:7a:75:d8:f0:ef:fc:fc:09:36:65:c9:09:
                    a5:a1:82:8b:68:83:e3:7d:b2:69:87:2b:ab:e8:16:
                    81:3d:ac:87:45:9e:17:6f:e8:97:23:a6:27:d8:7e:
                    1a:f2:c6:4f:d1:0a:a4:04:03:db:e6:d2:a2:27:88:
                    fe:39:a1:24:82:ef:38:4b:f0:d4:34:f0:af:a7:8f:
                    c9:ae:89:f5:c0:42:8d:b6:76:d2:e1:ad:e6:99:44:
                    e2:fa:9f:b2:3d:6d:e6:45:33:b0:7e:71:e5:1d:e4:
                    72:35:0b:d8:46:24:7b:f1:78:34:39:70:a9:02:88:
                    de:78:e4:1e:d1:44:d6:50:f7:d9:c4:d3:ca:1f:cf:
                    4b:e5:b1:20:d1:b6:85:75:d3:e0:18:47:c3:1e:48:
                    2a:bb:af:16:88:2f:48:80:ab:e0:3e:36:af:c8:ff:
                    e3:c2:ee:33:3f:1a:cc:4e:f0:b9:34:3f:7d:c1:df:
                    98:17:a3:b7:47:40:22:da:b3:f5:0f:b5:85:94:86:
                    57:1d:06:1a:fa:36:57:40:5c:cc:3b:b9:08:e3:55:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:F4:F5:09:C9:21:4D:24:F6:8A:9A:DA:22:82:19:DD:54:20:71
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:92:af:0b:1b:6f:ed:9f:96:d8:1f:20:ee:d1:17:e6:3f:
         a6:ef:e5:21:f3:2b:4f:e0:bc:32:12:e4:0e:94:b2:7b:f7:f4:
         9b:c0:ed:6a:71:b6:23:24:27:c9:10:56:66:c8:77:fc:93:ae:
         fe:25:58:bd:46:39:d5:96:a5:32:1b:31:1e:ef:30:05:d9:d0:
         71:ed:a0:af:66:24:ad:26:80:4d:dc:6a:05:df:3b:52:a1:28:
         1b:66:e9:00:dc:e2:a8:9a:0b:9d:90:d5:34:ba:8f:ec:7b:49:
         a3:53:31:2e:b6:5c:f0:00:b7:b5:e5:5d:f9:0c:e9:f0:98:5d:
         36:9c:2c:21:f1:3c:a3:78:d9:53:fc:08:7f:8a:be:b2:5e:ea:
         b3:2f:8b:d7:a5:d8:01:3c:44:65:61:18:b9:ce:4c:3e:ba:a3:
         94:2b:96:22:93:0e:fa:2c:59:63:8b:05:05:df:a1:b2:85:4c:
         ca:03:14:2d:f2:21:64:6c:bb:7c:f8:ac:0f:2e:18:d9:61:dd:
         b3:cc:c4:a5:8e:3b:ec:7c:32:30:d0:2b:b6:ee:d0:21:e8:d0:
         43:ad:91:35:7f:0a:52:be:13:16:60:04:41:d2:fb:99:7b:e5:
         1c:5b:ef:b9:5d:dc:c8:dc:10:7d:6b:6f:23:6b:84:d4:87:98:
         1a:24:0b:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx
MEVDMzE3N0EwHhcNMjUwODIyMTgxMDM5WhcNMjUwODI5MTgxMDM5WjAYMRYwFAYD
VQQDEw02OGE4YjI5Zi1iZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyxLyOp2dDWFhG+wP81LRknkEpzXOkjWw+fj9nadUcpnVFjt27xy4saU8FBwI
u2Z6ddjw7/z8CTZlyQmloYKLaIPjfbJphyur6BaBPayHRZ4Xb+iXI6Yn2H4a8sZP
0QqkBAPb5tKiJ4j+OaEkgu84S/DUNPCvp4/Jron1wEKNtnbS4a3mmUTi+p+yPW3m
RTOwfnHlHeRyNQvYRiR78Xg0OXCpAojeeOQe0UTWUPfZxNPKH89L5bEg0baFddPg
GEfDHkgqu68WiC9IgKvgPjavyP/jwu4zPxrMTvC5ND99wd+YF6O3R0Ai2rP1D7WF
lIZXHQYa+jZXQFzMO7kI41VPnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASb9PUJ
ySFNJPaKmtoighndVCBxMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0
MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu
Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBei5KvCxtv7Z+W2B8g7tEX5j+m7+Uh8ytP4LwyEuQOlLJ79/SbwO1q
cbYjJCfJEFZmyHf8k67+JVi9RjnVlqUyGzEe7zAF2dBx7aCvZiStJoBN3GoF3ztS
oSgbZukA3OKomgudkNU0uo/se0mjUzEutlzwALe15V35DOnwmF02nCwh8TyjeNlT
/Ah/ir6yXuqzL4vXpdgBPERlYRi5zkw+uqOUK5Yikw76LFljiwUF36GyhUzKAxQt
8iFkbLt8+KwPLhjZYd2zzMSljjvsfDIw0Cu27tAh6NBDrZE1fwpSvhMWYARB0vuZ
e+UcW++5XdzI3BB9a28ja4TUh5gaJAsy
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:33 2025 by rpki-client