Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
File:                     C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json)
Hash identifier:          UE/BTWrmFIfjKrn3RNTqyRAZBRQr2QAGPGwFPBrRjn0=
Subject key identifier:   6E:9E:A9:27:A6:F5:84:94:7D:27:B4:30:DA:53:0D:1D:13:62:08:0A
Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
Certificate issuer:       /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
Manifest number:          0117
Signing time:             Tue 01 Jul 2025 05:18:26 +0000
Manifest this update:     Tue 01 Jul 2025 05:18:25 +0000
Manifest next update:     Tue 08 Jul 2025 05:18:25 +0000
Files and hashes:         1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: jIdi8E9DW9g/rHcw1TnJXsQWb1/n+i1UWx4Zrxk+yEA=)
                          2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 5Euxmdyfg42rk8kh2tCEWEITcp7TGJlbx40uBqp19vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
                          rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
        Validity
            Not Before: Jul  1 05:18:25 2025 GMT
            Not After : Jul  8 05:18:25 2025 GMT
        Subject: CN=68636fa1-ef96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:fa:77:3e:cd:f1:9d:fa:d3:d5:6e:05:ed:
                    31:f6:07:f5:76:63:68:38:8b:c4:99:10:8b:f1:ea:
                    16:fb:d1:fe:e4:c5:bd:48:10:6f:41:03:5d:95:2c:
                    5e:ed:2b:7f:bf:21:53:9c:2d:b1:8f:66:39:ef:99:
                    7f:5c:1c:c4:2b:a4:f8:aa:54:06:6f:db:86:87:d1:
                    77:d7:c8:6b:83:71:97:85:35:60:41:1f:82:3b:7b:
                    49:e8:d2:bb:40:70:4a:b6:e2:32:cd:af:5e:22:6f:
                    68:f4:e5:91:c8:29:92:e7:a9:6a:ac:12:23:01:9f:
                    18:35:72:4b:1d:dc:8f:b4:22:7a:98:69:bc:b7:c2:
                    68:0d:09:c5:57:85:60:22:f2:ac:e8:8d:90:39:0e:
                    27:d5:87:7c:82:3d:48:e1:0a:40:5b:d1:aa:95:23:
                    ba:51:5d:a2:48:fe:70:e0:d3:07:16:d4:e9:4b:31:
                    6c:9b:f5:da:01:79:0d:97:74:d6:56:30:55:90:04:
                    b5:0f:a5:87:23:6a:f0:e9:7c:af:ea:5a:c8:60:ca:
                    c5:72:c9:22:55:7a:af:10:88:d7:61:5b:98:82:ae:
                    77:46:e3:65:2c:40:48:cf:71:de:e1:e6:49:35:bf:
                    51:eb:28:df:fc:58:b4:15:62:b6:f1:67:3e:e5:26:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9E:A9:27:A6:F5:84:94:7D:27:B4:30:DA:53:0D:1D:13:62:08:0A
            X509v3 Authority Key Identifier:
                keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:67:d9:2c:1f:f8:06:07:9c:0f:e6:d5:27:ec:ea:41:74:d7:
         8f:a8:da:e4:c6:8b:e7:e0:7d:fc:ca:75:54:17:27:7f:42:2c:
         35:e4:a2:05:6f:95:41:33:01:e9:6f:26:c2:a4:b1:6b:d7:ad:
         17:40:0b:6f:a4:ad:7b:6d:78:5d:e8:86:c0:90:94:7f:c2:a6:
         44:0e:6a:9a:a2:75:99:9f:17:43:f7:97:32:fc:34:1c:2f:63:
         0d:e1:7f:58:5f:8e:9f:67:40:4c:1c:36:46:1b:8f:83:b0:72:
         54:fe:b1:09:37:a6:4a:7f:bf:27:45:93:4f:a7:3f:ae:85:62:
         ae:ed:72:94:78:6f:c6:76:ea:e0:aa:16:5e:cd:f0:02:c6:bf:
         42:ef:01:0c:c5:2b:9b:01:c3:8b:52:13:5c:b0:e0:f3:f4:4a:
         92:a9:18:08:ae:c0:84:fc:b5:72:83:67:8a:e8:85:dd:35:6b:
         e5:06:3e:b5:3a:6e:f8:a2:32:40:86:3e:31:31:90:19:a9:bf:
         ca:a1:58:76:4b:4f:c5:d4:4d:72:a8:70:c2:a6:50:b7:79:2b:
         48:11:0a:5e:de:ef:04:7f:c1:a3:d8:26:d5:ae:7f:de:d5:e1:
         67:51:ca:34:82:6b:f9:e2:59:c4:88:b6:4c:1f:05:42:e6:52:
         b1:7f:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:49:40 2025 by rpki-client