Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
File:                     et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json)
Hash identifier:          /TyrsUrnOuOiHNboiAaQSHS2EF6F3by5pHEbjs/kgNs=
Subject key identifier:   BD:D4:DE:F3:61:AF:FF:75:14:C8:EE:1F:25:C6:BA:8D:11:CA:C3:E4
Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
Certificate issuer:       /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Certificate serial:       06CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
Manifest number:          06C6
Signing time:             Wed 02 Jul 2025 22:23:28 +0000
Manifest this update:     Wed 02 Jul 2025 22:23:27 +0000
Manifest next update:     Wed 09 Jul 2025 22:23:27 +0000
Files and hashes:         1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: UGBTRbTHTRRAe+8gU6bf5X3Ym6lXL9AwP8W+sDqtdLU=)
                          2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
                          rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
        Validity
            Not Before: Jul  2 22:23:27 2025 GMT
            Not After : Jul  9 22:23:27 2025 GMT
        Subject: CN=6865b160-35a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:a5:66:2a:8d:f5:dd:e2:85:95:12:e3:7d:
                    89:3d:92:da:47:f7:d7:94:4b:6e:3b:6c:3c:66:e9:
                    92:79:3b:6b:33:6b:e4:50:61:a6:26:c4:79:97:67:
                    a9:ee:4b:0c:cd:76:b7:d1:3c:ce:2d:ad:20:1e:50:
                    ea:6f:1c:b6:ce:8c:61:bd:b3:1d:96:f8:c8:0e:62:
                    eb:67:ea:0c:4b:7d:5c:02:70:e2:e4:1c:79:23:19:
                    27:20:63:29:72:7d:26:50:8c:0a:92:3c:9c:cc:d1:
                    24:c2:11:99:24:b2:9b:8d:61:5f:79:0d:cb:92:2a:
                    27:ed:d0:00:29:79:04:d9:cf:61:7b:dd:69:95:82:
                    fb:cf:0a:b3:2d:36:da:41:58:63:5e:3f:e0:eb:e3:
                    cd:ae:3c:9e:99:17:6e:0e:69:ee:43:27:10:5d:00:
                    ac:19:16:68:0a:d3:dc:91:bc:21:b9:4c:3a:10:a1:
                    3d:03:72:db:9d:aa:88:71:8b:aa:3e:81:2b:84:47:
                    76:72:c4:fb:9d:77:4a:d2:63:65:53:b9:85:d2:17:
                    d9:00:53:ff:e4:71:e5:e5:5e:74:2e:79:7a:c6:53:
                    d7:ec:a7:27:3c:b5:70:34:b7:ad:16:de:78:db:80:
                    4e:eb:39:57:b5:51:27:b4:76:19:bc:5f:8c:d3:34:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D4:DE:F3:61:AF:FF:75:14:C8:EE:1F:25:C6:BA:8D:11:CA:C3:E4
            X509v3 Authority Key Identifier:
                keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:2d:8c:86:86:e1:85:c8:9e:1d:18:83:04:ae:c2:6d:32:
         df:0a:85:19:c5:84:f3:85:a8:99:e1:ba:fa:ca:44:d0:de:95:
         8e:55:74:51:01:43:bf:2c:e4:62:cf:02:8d:2b:74:a5:d3:66:
         0c:2b:a8:fc:61:be:19:92:a7:55:50:a4:41:42:54:8d:a1:80:
         7e:1c:49:d8:d2:2e:42:58:0a:e8:1d:3d:39:56:0a:a0:16:4d:
         9b:4b:5f:e0:32:dc:58:53:8d:8a:fa:a8:21:7e:21:8d:40:c5:
         78:fb:4a:39:35:b9:10:63:02:b0:2d:4f:65:fa:42:34:7b:64:
         96:a8:e8:ed:2a:24:07:94:23:34:34:16:21:d6:bc:90:ae:67:
         1c:4c:d6:8b:80:fa:9c:09:18:fc:56:a3:42:6b:85:51:b8:7d:
         65:d6:cb:cd:a3:99:e7:e0:b0:3f:24:68:40:41:d8:cd:40:db:
         73:4f:da:6d:d3:98:31:2d:80:7b:54:18:63:a9:99:21:ba:e9:
         f3:2a:c4:b8:14:d5:ab:dc:c8:52:60:b8:70:c0:1a:28:f4:7e:
         bf:50:c9:22:03:1b:7a:c7:36:f8:67:03:8d:17:d2:e2:e9:1a:
         de:26:65:65:5e:ee:1e:c5:7e:ff:e4:ec:f2:6f:cf:c7:bb:77:
         92:65:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:02:58 2025 by rpki-client