Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
File:                     G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json)
Hash identifier:          fHkq9DRZsOcQs7y2PYlxnxkBBuzyBB5Guv32t8Lvlow=
Subject key identifier:   EF:D5:10:0A:82:B8:79:0D:88:01:BA:24:29:24:93:C9:99:48:4F:F9
Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4
Certificate issuer:       /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
Certificate serial:       1C0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
Manifest number:          1C01
Signing time:             Sat 10 May 2025 16:08:36 +0000
Manifest this update:     Sat 10 May 2025 16:08:35 +0000
Manifest next update:     Sat 17 May 2025 16:08:35 +0000
Files and hashes:         1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: DyNy0Zn82rw5Zakv6H02Dt9d75pGzGV/RVBVx8H0H5s=)
                          2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: eMi2yq9I2MPYaPzqg2XL7DC7JwJfMQi8ycwnLu24i5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 16:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7182 (0x1c0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918770D, serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
        Validity
            Not Before: May 10 16:08:35 2025 GMT
            Not After : May 17 16:08:35 2025 GMT
        Subject: CN=681f7a03-6bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:f8:bc:8b:a2:8a:54:1e:16:e1:21:60:5a:
                    2f:1c:68:43:08:3d:f4:b7:64:18:f7:da:ea:96:1a:
                    28:22:f7:77:82:1f:f9:eb:38:25:bb:16:82:0e:a2:
                    67:e3:25:4c:b0:99:c8:e7:90:90:d1:fc:5f:23:1b:
                    39:4d:db:0a:da:a8:99:54:15:6c:19:1e:41:8c:b7:
                    1b:c1:d2:ac:8a:53:74:c3:5e:b3:67:f8:99:71:60:
                    22:5c:74:3e:0f:77:2d:3c:dc:af:b9:54:a4:a8:b2:
                    d9:b2:7d:80:99:94:ff:6d:72:c7:18:fe:78:3e:4f:
                    f9:ff:69:2e:ff:dd:08:96:09:46:c3:b0:1f:1a:33:
                    ed:79:f9:78:24:af:dc:28:c1:b8:1f:85:60:34:67:
                    e4:72:44:03:65:12:4c:8e:d4:cb:02:17:46:b9:5c:
                    e1:82:61:a6:60:76:7a:12:8d:ea:f3:8c:c0:a2:a8:
                    a8:f7:e0:d2:65:9a:ec:dd:89:6f:bd:2d:9d:69:de:
                    9e:ce:6b:91:c3:86:99:21:2f:68:b9:3f:cf:40:70:
                    5f:d7:31:1d:52:a1:55:0e:90:5d:97:ff:aa:2d:df:
                    72:19:74:93:da:d8:53:ff:db:79:7d:13:43:00:90:
                    e1:6e:9f:f8:b0:ca:60:22:a5:6f:41:65:81:d4:a1:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D5:10:0A:82:B8:79:0D:88:01:BA:24:29:24:93:C9:99:48:4F:F9
            X509v3 Authority Key Identifier:
                keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:c9:34:81:78:a2:da:7a:76:bb:ea:8f:50:83:62:a7:bb:
         5a:ee:9b:7e:df:c9:64:30:57:c9:d0:ae:7d:bb:7c:e7:81:5d:
         25:dc:d9:8c:b3:56:6a:6e:79:7a:b0:b6:e9:3a:0f:35:f4:d7:
         f3:21:46:02:27:9d:92:d7:c0:0f:80:e8:9e:7f:aa:b2:0b:3e:
         8f:92:73:f2:89:3f:2c:2d:ea:c1:94:5b:95:d4:69:e3:d2:1b:
         8e:42:57:fa:f3:3b:08:db:9b:c1:b7:17:ae:6b:c4:3b:c1:fd:
         80:cb:61:f0:6f:d5:c5:fe:b0:ce:67:52:f8:85:a6:44:29:51:
         57:3c:20:42:7e:a9:23:bd:0c:9c:b1:d1:50:28:19:5d:4f:3f:
         51:2b:68:4d:db:de:d8:64:f9:26:94:2a:ad:d1:29:e9:1a:de:
         78:f3:bc:4f:96:d5:61:b7:dc:c6:1c:c9:34:3f:ef:3c:12:9f:
         41:f2:f8:d6:c5:1e:0c:82:31:dd:7a:63:e3:52:3a:9a:c7:db:
         3f:7a:af:84:fa:2c:57:d8:26:1a:3c:d4:93:5f:bf:6f:5a:63:
         96:2b:17:03:01:34:d2:97:51:91:85:e1:f9:f6:c6:af:9a:83:
         a5:13:28:25:ea:98:f5:8e:25:77:8f:85:d7:46:a8:37:53:bb:
         5e:90:e8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:32:53 2025 by rpki-client