Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          ULd9gYqncwp5IcEx3UtllFEWkP9gwS/qJ26yuLsU+Zc=
Subject key identifier:   19:B3:60:F5:1C:BE:47:08:7B:50:A9:C1:E5:63:0B:2E:6D:C1:84:3E
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0A83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0A65
Signing time:             Fri 16 May 2025 19:55:32 +0000
Manifest this update:     Fri 16 May 2025 19:55:31 +0000
Manifest next update:     Fri 23 May 2025 19:55:31 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: mfOiIs7441y0VeXUI4Yms2lZqHIGhd8cJcE+qFyYhdA=)
                          2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=)
                          3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: iAsOrn+BfPbmaxKIym2huXek+8KrH7keNTNRSTAMeck=)
                          4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 19:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691 (0xa83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: May 16 19:55:31 2025 GMT
            Not After : May 23 19:55:31 2025 GMT
        Subject: CN=68279833-d890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:dc:5a:c4:38:a3:9e:a6:44:3e:ca:d9:79:
                    ea:e1:4f:f4:f4:df:6a:6c:b2:bc:57:40:44:84:0c:
                    84:af:79:64:ce:08:cd:74:0f:30:b9:2b:7e:96:5b:
                    ce:38:fc:8a:29:5b:3f:46:f2:2a:cf:8e:ea:65:64:
                    c9:b1:df:10:37:42:c7:e2:80:09:93:4e:4a:5d:61:
                    56:52:36:da:61:b6:a3:f3:f8:85:55:9b:f9:a2:3d:
                    e5:c8:f7:38:7e:3c:7f:92:f7:b6:2b:bb:60:e0:e5:
                    1f:d1:7f:41:25:28:13:93:e4:b5:1c:5d:94:14:e1:
                    30:eb:5a:56:b4:3d:29:88:d1:44:89:bb:eb:2d:4a:
                    4d:c4:08:48:a7:95:cf:79:b5:1b:06:7d:62:35:9d:
                    4f:c8:3b:2a:3e:51:1d:a2:bd:b0:a4:2c:4f:e0:de:
                    19:06:55:2a:82:0d:4d:c8:71:57:d4:58:c9:3e:91:
                    17:11:66:8b:4d:84:1e:8d:45:3a:e2:9a:4c:53:3c:
                    2a:be:a1:fc:86:19:40:a2:75:3d:8b:b9:e0:7a:f4:
                    51:ad:60:e9:88:c5:ea:6e:2d:70:15:2a:3d:1d:78:
                    45:fe:42:98:d1:8b:b2:8d:0a:be:66:c8:68:9e:7c:
                    3a:fa:5a:a1:ba:0e:06:a9:78:b0:4f:c5:d2:f0:f4:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B3:60:F5:1C:BE:47:08:7B:50:A9:C1:E5:63:0B:2E:6D:C1:84:3E
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:0e:08:a1:56:ec:7a:ad:04:0b:cc:a6:56:30:61:1d:07:
         ac:88:69:0e:e1:97:a7:fb:79:e3:bd:24:11:cb:28:77:77:80:
         79:6d:87:88:40:bf:fd:1e:1f:9c:23:84:c3:ed:8f:67:c4:2c:
         dd:e7:28:6b:6f:f2:96:2d:4a:d4:ca:7a:c0:ca:a5:24:58:3f:
         10:76:80:e7:06:bc:50:62:7f:b1:bb:16:83:eb:c5:4d:58:bd:
         96:f7:1b:e9:1e:40:05:cf:b4:97:3f:fd:63:c6:79:6f:bc:e5:
         f4:27:47:73:d3:a1:03:79:71:8b:c1:53:09:82:ed:77:6e:19:
         53:4a:a3:98:9c:75:3f:b6:ce:50:6d:54:cd:67:af:90:32:25:
         e8:05:7d:32:fa:1f:47:27:0d:b4:3f:12:92:8b:17:54:0c:62:
         1f:6d:59:f1:c3:1d:f1:76:3d:88:33:fe:29:56:db:f8:33:61:
         02:59:eb:6f:40:fc:85:9e:2b:f5:44:ed:51:df:5c:85:19:2f:
         06:27:4d:31:6b:af:15:36:01:38:c3:2e:b2:53:f1:b3:df:51:
         9c:c6:90:b0:c9:c1:58:27:41:77:c5:3e:e2:8b:66:c3:6f:b4:
         b5:c5:21:aa:00:b5:66:fc:d2:00:47:db:45:35:3b:bd:ae:18:
         ba:e5:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:25:00 2025 by rpki-client