Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
File:                     gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json)
Hash identifier:          c95fKaFHESYWSDpvqe7JWz3AA4/HwLxN+9MztxCZdv4=
Subject key identifier:   34:E0:6A:CD:22:9D:17:CB:A0:EA:55:AD:F8:B7:07:27:70:E3:49:ED
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Certificate issuer:       /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
Manifest number:          A6
Signing time:             Sat 05 Jul 2025 06:25:11 +0000
Manifest this update:     Sat 05 Jul 2025 06:25:11 +0000
Manifest next update:     Sat 12 Jul 2025 06:25:11 +0000
Files and hashes:         1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: G/DGR9pIQ7OAV41bkZ5srOAezAPJWKarnOvgT14ARLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
        Validity
            Not Before: Jul  5 06:25:11 2025 GMT
            Not After : Jul 12 06:25:11 2025 GMT
        Subject: CN=6868c547-7075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:ec:6c:01:f5:ea:c0:87:b1:70:ee:af:65:
                    72:a7:ee:e4:b7:39:f1:03:d4:f9:34:09:4a:8f:a3:
                    a3:f3:1d:a4:2b:c2:64:72:09:02:6a:fc:df:6d:f8:
                    ae:11:4b:d2:df:af:6b:fd:ee:29:1b:bc:4b:89:43:
                    10:47:40:8e:04:2a:20:7d:af:0e:7a:68:0f:e8:07:
                    5f:24:36:7c:3c:97:f7:0a:d9:37:55:d8:84:ed:30:
                    d5:bb:30:f4:1e:ec:d7:dd:d0:b7:a3:6d:74:f6:18:
                    dd:ba:9a:cf:d7:e5:04:35:0c:b7:97:c7:a5:1a:d0:
                    d6:0d:4a:0c:98:f7:0a:07:7a:97:24:6c:9a:49:60:
                    e4:00:bc:2f:f7:3c:13:41:67:77:24:46:36:9d:de:
                    75:32:1d:09:21:b1:ca:2d:9a:72:1a:5d:e6:76:08:
                    f6:55:a2:00:f9:48:9e:8d:7b:05:2e:ff:2d:f2:0e:
                    e5:26:bf:ad:c0:15:5e:89:60:cd:e2:e6:4a:02:5f:
                    70:bf:df:80:c5:ff:89:88:7f:99:43:cd:b1:3f:2c:
                    44:ea:5b:9c:45:0b:39:7f:ac:6c:88:1d:36:af:60:
                    e1:05:09:19:9e:20:22:56:c8:28:61:de:78:67:ac:
                    0f:7b:da:7f:b2:44:5f:01:3c:18:c9:0f:1c:73:21:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E0:6A:CD:22:9D:17:CB:A0:EA:55:AD:F8:B7:07:27:70:E3:49:ED
            X509v3 Authority Key Identifier:
                keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c9:33:3f:86:5f:43:ee:37:77:03:5d:f8:04:44:30:06:ff:
         77:dd:60:bf:52:78:46:52:9c:b0:a4:fa:de:a3:ba:66:b3:16:
         92:0e:6c:4a:ce:a2:be:11:98:4a:dc:d0:10:e4:b2:2f:10:31:
         24:aa:ca:1d:c2:9f:4c:ba:4a:85:5d:8b:e0:a5:f1:6a:8f:e9:
         17:a3:ee:64:e0:6b:35:28:04:26:36:f7:fb:95:bd:cd:16:1d:
         86:e7:d7:6c:83:83:8f:3f:9d:75:a3:44:64:25:22:a4:36:c5:
         c3:3a:94:f3:a2:3b:05:cc:47:13:c3:3f:36:b7:ec:aa:05:e2:
         f6:22:76:ae:75:2c:c6:f8:4b:60:c9:71:e9:f1:d5:b1:58:31:
         34:55:6d:74:6b:fa:3f:3a:c7:e5:89:d7:b5:fd:97:95:28:c2:
         3b:de:d8:f2:e6:c5:44:f8:74:ec:cc:6e:a2:87:e6:0c:da:6f:
         46:36:50:38:a3:b5:bc:9a:af:9b:b7:dd:9e:0f:f9:91:b7:a8:
         b0:75:82:20:25:d7:1e:a6:f1:6d:dd:c7:e0:94:d3:e9:9c:96:
         56:8a:ed:d4:39:10:7f:e6:cb:5c:81:c2:3d:7a:07:e4:00:2d:
         7b:f0:4e:e8:6a:49:c7:50:a8:0d:d3:df:96:93:53:71:a8:ff:
         aa:27:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:39:26 2025 by rpki-client