Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.mft (raw, json)
Hash identifier:          FGTfkyRE+wCIUTN3lJjWxMgAvUvlSoUlDY6jrcyldI0=
Subject key identifier:   C1:8E:FB:9E:14:29:39:F5:54:9B:62:E5:77:94:5F:9B:42:9C:B6:0B
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       0A94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
Manifest number:          0A8B
Signing time:             Sat 18 Oct 2025 20:32:50 +0000
Manifest this update:     Sat 18 Oct 2025 20:32:49 +0000
Manifest next update:     Sat 25 Oct 2025 20:32:49 +0000
Files and hashes:         1: 6Shcog-fi_-sepc7SeB-zEJbURg.crl (hash: c8evTgGaagDtO8Q0w6sX9MQJQHppVi/1gsIRKHb8LZA=)
                          2: 04DFAB682F3011EDBFC72D3FC4F9AE02.roa (hash: /yimLjurJ7sHVYzGxlJmL9G5S578rgeQv3crr3uJYA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB, serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: Oct 18 20:32:49 2025 GMT
            Not After : Oct 25 20:32:49 2025 GMT
        Subject: CN=68f3f972-5f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:6b:fc:44:84:28:cf:0f:91:01:95:dd:3d:
                    d5:fe:1e:f5:d8:00:71:83:66:bd:67:27:e0:1e:b3:
                    a8:10:aa:a3:05:f5:85:c3:a1:c5:96:88:f8:5c:0c:
                    aa:c6:bf:99:a3:68:cb:4f:ee:7c:44:a0:a3:db:e0:
                    02:9e:be:89:34:87:6c:1e:64:42:89:d9:50:71:6e:
                    36:65:7c:65:d0:07:23:a6:73:2d:c3:55:0a:8e:85:
                    ff:b3:99:2c:65:63:b8:1f:de:c3:a6:18:0a:a0:84:
                    d2:56:52:97:0b:d8:05:a8:83:68:8c:e3:ea:32:f9:
                    0e:6d:11:a8:f8:23:f2:c3:e3:72:5a:41:58:f6:81:
                    3b:db:3d:ce:0b:a1:1e:f1:e6:35:e0:39:6f:de:6e:
                    ea:39:90:67:30:72:2a:61:9c:84:66:00:27:12:e8:
                    ea:8d:9c:29:49:3f:48:fc:cc:e9:dd:e2:bf:bd:5f:
                    2f:9b:8f:1a:82:6a:fa:29:77:86:ca:c8:1e:40:19:
                    43:19:1b:e9:a7:ab:56:86:50:83:36:ce:e4:12:22:
                    d5:26:ac:04:9b:a6:c6:4a:e8:37:da:42:b1:22:7e:
                    38:5f:9d:af:d0:13:99:c8:10:96:dc:5f:4e:7a:cb:
                    4c:14:ed:30:59:0c:ee:ae:aa:ce:22:cd:41:f1:ca:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8E:FB:9E:14:29:39:F5:54:9B:62:E5:77:94:5F:9B:42:9C:B6:0B
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:12:ec:6f:60:a9:cb:0a:05:b9:a7:05:7c:6f:b7:1c:5d:26:
         ec:4f:42:d8:77:76:ba:99:7c:b8:b3:ff:25:52:8a:8a:74:41:
         8d:25:e4:d3:ca:d5:cd:c7:53:c9:b8:b7:8c:d3:bc:7d:6e:46:
         b4:90:47:b4:2f:33:9f:28:61:22:5e:25:5a:eb:b9:03:7f:8e:
         0e:f1:2b:0d:a4:03:3d:78:0b:65:9a:1e:d7:1b:49:fa:57:44:
         d7:cf:ea:5f:bd:b3:7a:b3:bf:b2:d1:c9:96:7c:63:a2:18:29:
         eb:3e:4d:14:bb:47:e8:c0:e3:68:f8:4d:88:47:82:c5:c5:44:
         a3:66:36:fe:7d:b9:1b:97:f3:39:fb:7c:b1:e9:20:60:06:a2:
         a2:55:50:eb:c0:90:c2:92:5e:f8:fd:98:41:50:11:11:2a:ee:
         7d:c0:17:26:68:7c:2b:c6:71:9d:15:cf:02:7c:26:35:ea:04:
         76:08:8f:37:42:e7:9a:18:e7:12:5c:fd:61:32:32:f9:9b:14:
         4a:a5:01:43:89:10:3c:c7:c3:02:cd:8f:85:14:59:0e:52:2d:
         8b:b0:6d:a5:d5:43:f3:0d:a4:28:46:8d:fe:35:88:74:55:b9:
         73:36:d9:3f:38:a9:1d:f1:af:63:7e:40:d7:32:cd:44:94:e7:
         ea:5e:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:45 2025 by rpki-client