Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
File:                     6mEYPX8HHa7UVWQxG4oadb3OcNY.mft (raw, json)
Hash identifier:          g6SqNMryLN8ZBiB0SLW5z4SCGrXS/Fyob2zCREqBocQ=
Subject key identifier:   B1:3D:35:AA:14:34:CB:CB:4F:E7:E7:B4:41:74:93:9B:B2:E7:B4:94
Authority key identifier: EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6
Certificate issuer:       /CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
Manifest number:          D7
Signing time:             Sat 23 Aug 2025 05:44:35 +0000
Manifest this update:     Sat 23 Aug 2025 05:44:35 +0000
Manifest next update:     Sat 30 Aug 2025 05:44:35 +0000
Files and hashes:         1: 6mEYPX8HHa7UVWQxG4oadb3OcNY.crl (hash: jKoerpOmFnuRRLF9hXE/Opa9UA9r2ASp2DEfqSVahnk=)
                          2: CB54BF04390611EF93BAC362C4F9AE02.roa (hash: SBPg4qf1Hpdi+0DWgBFMwDlSC1uKF+MPsUyay046sq4=)
                          3: 5AFDCA16390611EF9290C361C4F9AE02.roa (hash: SumhTWc+8flvVqGSUtlnNECtrOpr5Ex0r4tAHN1aP0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl
                          rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91874B6, serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
        Validity
            Not Before: Aug 23 05:44:35 2025 GMT
            Not After : Aug 30 05:44:35 2025 GMT
        Subject: CN=68a95543-a18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:87:d3:ff:91:ac:ae:cc:13:70:98:8c:72:
                    c4:56:9d:5a:ff:9d:07:55:b1:9c:90:4c:42:ae:14:
                    62:c6:1d:c2:90:9c:94:c9:94:09:63:38:a6:03:fa:
                    9c:4c:dd:bd:aa:d3:0e:e5:99:5f:d9:cb:18:3b:0c:
                    47:ae:3e:e3:31:9b:8f:9a:de:1f:dd:d5:2d:a0:12:
                    8c:78:c0:0e:3a:1d:42:e1:88:c1:9c:4e:b9:7a:87:
                    31:59:3f:ab:99:3a:42:0c:fb:21:fc:8c:a4:e9:46:
                    7a:7b:71:ef:22:59:36:41:93:fa:5a:1f:f4:15:8d:
                    ce:32:54:9c:a2:80:a8:9f:b2:6e:5e:aa:e9:00:16:
                    03:5a:51:b8:a4:6a:09:6d:fa:77:24:65:b9:78:41:
                    b6:d1:fd:e5:a2:2e:05:63:c4:07:0d:72:3c:db:90:
                    c0:2a:e1:a8:70:c9:b1:cc:04:a3:5f:59:8c:b1:4b:
                    18:a3:9c:5f:6f:67:aa:0d:7e:89:ac:95:65:3a:10:
                    0c:64:35:4f:ea:1b:e5:93:0c:d8:48:8b:07:f6:cc:
                    b6:a2:b3:21:e4:2b:6d:e0:98:32:c6:5e:ed:a7:0e:
                    27:4e:d2:6b:82:fc:70:63:61:f9:86:a2:2b:cb:c1:
                    84:d2:35:74:b9:16:02:ae:4b:a3:90:9f:b4:85:2f:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:35:AA:14:34:CB:CB:4F:E7:E7:B4:41:74:93:9B:B2:E7:B4:94
            X509v3 Authority Key Identifier:
                keyid:EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:b1:ef:93:8a:0f:2c:94:47:8a:1e:0b:24:6a:fe:7d:24:
         f4:69:4c:7a:7a:5c:d9:29:c5:80:32:e2:7d:d4:14:91:e3:b3:
         3b:ab:39:81:5c:b8:e4:74:87:4b:47:78:a8:6e:d1:c7:fc:47:
         9c:8b:e6:8b:1d:3f:7a:11:d3:79:33:34:a1:30:5c:e6:55:bc:
         86:19:f2:90:64:50:3d:03:2d:cf:a0:a3:ad:6c:9a:68:a7:e2:
         5e:55:2c:55:f8:c9:91:8d:46:ea:b4:47:3a:29:0a:3c:84:db:
         62:4f:cc:99:20:91:63:16:a2:85:69:c9:ab:88:6a:1f:5d:29:
         22:24:22:65:e0:9f:b0:45:44:4a:69:ec:4a:ed:af:88:ab:8b:
         ec:d0:fa:4e:ba:2d:ea:6d:09:33:0b:89:bc:bf:10:d8:9e:61:
         f0:b2:c3:a0:ca:2d:79:04:1c:ae:99:23:0f:b5:61:7e:0f:25:
         39:9b:ed:fa:ed:bb:ab:eb:ad:3f:20:2f:db:44:a6:eb:11:19:
         7c:4c:e8:cd:0a:6c:c2:a1:df:38:d3:41:f5:63:43:3a:71:92:
         99:fd:50:ef:0e:c2:fa:ea:4a:4e:9c:ad:d2:3b:f9:5d:33:90:
         3f:52:96:d3:d5:90:3d:0f:5d:2c:26:c3:25:36:e0:e4:2d:f7:
         a1:97:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:26:20 2025 by rpki-client