Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.mft (raw, json)
Hash identifier:          CoEcpYNNgesZLVhBq1yzwHlK5s7iKAvNXRLyRANwk5g=
Subject key identifier:   1D:90:4A:65:5E:3D:8F:A3:8E:9A:6B:56:52:78:39:2C:18:C9:AF:DD
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       0A5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
Manifest number:          0A54
Signing time:             Wed 02 Jul 2025 19:54:53 +0000
Manifest this update:     Wed 02 Jul 2025 19:54:53 +0000
Manifest next update:     Wed 09 Jul 2025 19:54:53 +0000
Files and hashes:         1: 6Shcog-fi_-sepc7SeB-zEJbURg.crl (hash: GM/Wc2TNjMwgjRsn9HJGZilbTDn2KiUhkY1lDJyUwiE=)
                          2: 04DFAB682F3011EDBFC72D3FC4F9AE02.roa (hash: /yimLjurJ7sHVYzGxlJmL9G5S578rgeQv3crr3uJYA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 19:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2653 (0xa5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB, serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: Jul  2 19:54:53 2025 GMT
            Not After : Jul  9 19:54:53 2025 GMT
        Subject: CN=68658e8d-d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:ba:07:7e:e8:a9:ff:5d:14:c9:2a:1d:7f:
                    e0:79:29:a8:9d:e4:f4:82:83:9a:4a:92:a9:96:82:
                    a0:97:4f:d6:d0:be:d8:f6:9a:97:15:0d:ea:ee:50:
                    3b:31:42:8c:ab:09:bb:a7:81:09:0b:3b:50:f0:ed:
                    f9:d2:28:75:52:8b:a5:74:58:1c:b5:ea:e4:c2:a3:
                    02:9d:0b:cc:ac:f6:92:1a:b0:ba:5d:ea:90:7a:c1:
                    8d:76:56:19:99:01:5f:18:38:90:61:dc:b9:0d:0d:
                    fc:28:02:4e:93:63:48:e4:56:08:94:3d:6b:db:ed:
                    0d:42:ab:c1:ca:60:dd:01:be:26:4e:ad:89:d4:44:
                    49:6e:e6:20:98:52:e5:79:5f:e1:66:51:c1:66:2b:
                    dc:18:1d:dc:08:7a:23:0d:d4:ec:8c:2f:28:83:ca:
                    eb:ad:ba:50:1e:88:f8:c2:32:7f:3c:c1:db:5c:f6:
                    1e:25:e4:6a:60:f2:a3:23:82:3b:67:6d:e5:ed:63:
                    b5:f0:9f:ad:91:cb:02:60:f2:53:f6:49:54:8a:cf:
                    b4:08:0d:ff:a6:fc:2a:bd:98:45:fd:9f:58:51:10:
                    c0:19:ef:00:57:9c:37:28:40:17:58:08:2e:f1:03:
                    ac:43:87:73:3c:f6:4e:01:46:4b:83:6f:3b:30:47:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:90:4A:65:5E:3D:8F:A3:8E:9A:6B:56:52:78:39:2C:18:C9:AF:DD
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:31:ab:45:e6:d6:c7:19:31:75:51:b3:a0:68:78:22:e5:f8:
         d0:aa:1a:d0:ab:a6:86:8b:4b:58:fb:52:b2:a3:34:16:63:f9:
         76:99:73:02:04:fd:5f:0b:b1:20:f4:e9:f3:67:f2:66:c7:af:
         12:af:fd:e0:1a:31:8e:a8:bf:63:ad:5b:37:13:a0:e5:52:d1:
         9c:ff:d0:35:07:0e:10:1e:79:88:a1:1d:6c:a5:04:ff:49:34:
         43:c3:25:80:05:18:46:06:5c:d4:66:41:6f:94:fd:e8:08:dc:
         e4:9f:4d:6a:8b:06:c5:17:4b:6a:4c:ec:70:d9:5d:f3:80:5b:
         4d:2b:98:72:f2:70:a6:cc:9b:f0:a0:69:8b:f8:53:63:9a:13:
         12:e6:6a:f3:4f:74:cf:db:6c:df:d0:cd:bc:80:1c:6d:85:9e:
         69:2c:4b:e6:59:03:6b:74:be:5d:6e:45:94:a7:5d:78:45:15:
         a2:2f:2f:db:0d:75:17:30:cb:30:f9:31:98:1c:1e:2b:52:f2:
         a8:3f:bb:7f:a3:96:a0:a6:84:92:d6:3d:c7:a9:55:35:de:df:
         14:de:b9:ec:73:7d:cb:44:e1:9c:2e:15:36:8e:e9:37:1a:d4:
         0f:33:9e:0a:c3:a6:74:9b:58:e6:91:40:d7:e8:70:f7:78:b9:
         20:e5:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:19:15 2025 by rpki-client