Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
File:                     6SWAZhXd5dmqRq915ntcH7cUamo.mft (raw, json)
Hash identifier:          8M7RAUOk1xeEjKq6jIc2tiyw8Wos+ORJWs/iG2Vk6bM=
Subject key identifier:   A3:25:8C:14:06:D1:D7:B0:06:19:69:46:05:4E:0E:79:86:1C:FF:F6
Authority key identifier: E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A
Certificate issuer:       /CN=A918B3C9/serialNumber=E925806615DDE5D9AA46AF75E67B5C1FB7146A6A
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
Manifest number:          01AE
Signing time:             Sat 23 Aug 2025 03:19:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:19:22 +0000
Manifest next update:     Sat 30 Aug 2025 03:19:22 +0000
Files and hashes:         1: 6SWAZhXd5dmqRq915ntcH7cUamo.crl (hash: zl1Ce284RaoYt2Scp60TXMvOqS9zUzKOyPvTe3/8aO8=)
                          2: C8F537F6F57E11ED915A7D33C4F9AE02.roa (hash: O2h8BXQ/FNvU8eFR3b+QwOEGW2bYxQT6eEmwlg4YLVc=)
                          3: 55DA06F8038D11EE81D68954C4F9AE02.roa (hash: iSjGEfcg5o0TpD25QvdPysJleeFq2djI0D9nFTHgM2c=)
                          4: EEADE2CE038711EE81157F3AC4F9AE02.roa (hash: 574lj0eB3cKMatJkyN/TS3LQ6Zxmqx1rfS62DpaSCjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl
                          rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B3C9, serialNumber=E925806615DDE5D9AA46AF75E67B5C1FB7146A6A
        Validity
            Not Before: Aug 23 03:19:22 2025 GMT
            Not After : Aug 30 03:19:22 2025 GMT
        Subject: CN=68a9333a-2068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:bb:6c:ef:47:d3:64:a5:cb:ac:89:fd:f5:
                    27:8f:9e:3c:d2:0f:af:b6:d3:6c:0e:33:9f:f3:b8:
                    2c:9a:1e:b0:c4:35:86:7d:38:34:6a:00:9e:d6:ac:
                    82:37:9e:7b:a3:67:1c:c8:a7:92:3b:fb:24:d5:79:
                    d3:2a:c2:2e:9a:20:b6:be:4a:09:aa:e6:fc:81:a1:
                    5d:ff:c1:ac:6e:52:1d:19:ae:c7:fa:97:59:91:78:
                    54:3b:cd:77:19:9a:82:76:79:38:b7:e2:bf:2c:39:
                    b5:3d:bd:ce:46:6a:b5:86:bc:10:bc:f1:28:af:00:
                    99:b1:2c:4f:68:96:6b:79:96:49:41:97:9f:aa:d2:
                    8c:8e:34:cc:93:36:65:9b:6c:b0:86:a9:30:85:82:
                    31:41:f3:65:f3:53:00:96:ab:63:c8:83:7f:9e:df:
                    3a:b8:69:8b:f2:a5:d1:ef:fd:e8:18:fa:d9:7f:56:
                    ff:14:bb:13:09:bd:84:b4:aa:fe:51:30:79:f4:57:
                    51:f1:8e:36:dd:d8:be:ed:50:c3:11:20:91:aa:29:
                    42:93:8b:ef:8e:18:2a:79:0f:d3:5d:71:43:91:d7:
                    5d:c1:cc:b7:87:7e:d3:c6:e7:23:84:f9:4b:50:81:
                    e4:2c:1d:c6:4f:25:bb:4b:3d:92:3a:d5:67:8b:7c:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:25:8C:14:06:D1:D7:B0:06:19:69:46:05:4E:0E:79:86:1C:FF:F6
            X509v3 Authority Key Identifier:
                keyid:E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7a:a4:68:3d:58:e5:7c:48:a0:ea:5a:05:25:84:e1:6c:89:
         ff:61:b9:2d:2e:88:16:1e:af:05:ae:bd:67:fe:ed:d4:1c:ca:
         fa:7e:aa:ca:21:67:80:31:ab:4e:4d:1e:55:ca:87:15:b7:20:
         b8:18:8c:cf:49:f2:ff:9b:bb:cd:44:5c:f1:8c:fe:73:f4:8c:
         ae:46:55:09:31:fb:88:3b:81:b3:7b:ec:7f:9b:c3:c9:0b:7a:
         89:f4:a6:b3:0a:28:d8:a0:e1:32:bb:53:30:13:65:1e:05:06:
         93:92:86:a6:a1:a4:00:4a:41:a6:6a:44:f4:4a:8c:72:eb:fb:
         5f:71:e0:08:45:74:0f:2b:d1:71:c8:fe:2e:c5:ac:f9:d7:0d:
         fe:97:b7:89:8d:67:13:6b:11:00:ed:4c:ea:78:d6:1b:45:3b:
         39:56:7b:6c:4f:66:cb:47:3a:3a:7e:db:cc:da:a0:30:c2:97:
         ea:c5:00:22:c7:e9:6e:c4:01:6c:70:a9:b5:1c:93:ac:72:df:
         28:6b:13:66:a4:d1:b1:c3:1c:a2:f8:e1:0c:1d:c6:f6:20:e0:
         68:56:90:c3:3d:39:1a:c0:1d:c8:88:4c:a4:10:fa:cb:fe:2c:
         d9:82:3b:c4:6b:e4:14:96:e8:07:3c:1c:0e:08:53:7c:fd:1e:
         91:af:4e:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIzQzkxMTAvBgNVBAUTKEU5MjU4MDY2MTVEREU1RDlBQTQ2QUY3NUU2N0I1QzFG
QjcxNDZBNkEwHhcNMjUwODIzMDMxOTIyWhcNMjUwODMwMDMxOTIyWjAYMRYwFAYD
VQQDEw02OGE5MzMzYS0yMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvI27bO9H02Sly6yJ/fUnj5480g+vttNsDjOf87gsmh6wxDWGfTg0agCe1qyC
N557o2ccyKeSO/sk1XnTKsIumiC2vkoJqub8gaFd/8GsblIdGa7H+pdZkXhUO813
GZqCdnk4t+K/LDm1Pb3ORmq1hrwQvPEorwCZsSxPaJZreZZJQZefqtKMjjTMkzZl
m2ywhqkwhYIxQfNl81MAlqtjyIN/nt86uGmL8qXR7/3oGPrZf1b/FLsTCb2EtKr+
UTB59FdR8Y423di+7VDDESCRqilCk4vvjhgqeQ/TXXFDkdddwcy3h37TxucjhPlL
UIHkLB3GTyW7Sz2SOtVni3x12wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMljBQG
0dewBhlpRgVODnmGHP/2MB8GA1UdIwQYMBaAFOklgGYV3eXZqkavdeZ7XB+3FGpq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjNDOS83RjE4MzQ2Q0Y0
OTMxMUVEOTU2NUU2N0NDNEY5QUUwMi82U1dBWmhYZDVkbXFScTkxNW50Y0g3Y1Vh
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZTV0FaaFhkNWRtcVJxOTE1bnRjSDdjVWFtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjNDOS83RjE4MzQ2Q0Y0OTMxMUVEOTU2NUU2N0NDNEY5QUUwMi82U1dBWmhYZDVk
bXFScTkxNW50Y0g3Y1VhbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAseqRoPVjlfEig6loFJYThbIn/YbktLogWHq8Frr1n/u3UHMr6fqrK
IWeAMatOTR5VyocVtyC4GIzPSfL/m7vNRFzxjP5z9IyuRlUJMfuIO4Gze+x/m8PJ
C3qJ9KazCijYoOEyu1MwE2UeBQaTkoamoaQASkGmakT0Soxy6/tfceAIRXQPK9Fx
yP4uxaz51w3+l7eJjWcTaxEA7UzqeNYbRTs5VntsT2bLRzo6ftvM2qAwwpfqxQAi
x+luxAFscKm1HJOsct8oaxNmpNGxwxyi+OEMHcb2IOBoVpDDPTkawB3IiEykEPrL
/izZgjvEa+QUlugHPBwOCFN8/R6Rr071
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:49 2025 by rpki-client