Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.mft (raw, json)
Hash identifier:          wi85GJ3T4bO6eHznjcS+rAuR99PDMWdrwNx8RiFdgXg=
Subject key identifier:   33:A1:DC:C1:12:6B:2B:AB:6E:4E:9C:E1:8D:04:48:98:DB:78:1C:F9
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       0A42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
Manifest number:          0A3A
Signing time:             Wed 14 May 2025 19:51:45 +0000
Manifest this update:     Wed 14 May 2025 19:51:45 +0000
Manifest next update:     Wed 21 May 2025 19:51:45 +0000
Files and hashes:         1: 6Shcog-fi_-sepc7SeB-zEJbURg.crl (hash: QzeCOljxJm89reMC0idGXMYQ2HQ5h4DGpwS0EVDQOLc=)
                          2: 04DFAB682F3011EDBFC72D3FC4F9AE02.roa (hash: QlXB7lfn1sgpwkVvWpKhkoSXRwHDweeIAsqj1Bq83Co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 19:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626 (0xa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB, serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: May 14 19:51:45 2025 GMT
            Not After : May 21 19:51:45 2025 GMT
        Subject: CN=6824f451-9a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:15:aa:d3:42:0f:5a:dc:ae:41:91:fe:d4:51:
                    ad:b7:f4:03:d2:23:66:3a:c1:53:9f:11:c4:a7:90:
                    7f:13:9b:94:46:3e:4a:b2:0b:87:f4:54:4a:eb:1c:
                    da:d2:93:03:7d:ca:fe:59:49:0f:ef:b7:71:6c:12:
                    41:bd:9d:72:f2:d2:ca:b5:90:5a:12:34:37:8f:c8:
                    be:ea:99:e9:e6:44:4b:4d:61:65:66:e5:9f:c4:b3:
                    81:45:7c:fb:41:9d:fc:92:38:56:7f:1a:36:bd:53:
                    54:3d:07:90:18:22:43:73:0c:61:fe:27:c9:d1:67:
                    12:01:7d:02:36:0c:5c:05:5a:a0:d8:e9:bb:8b:f4:
                    cb:65:28:9f:49:f4:29:6b:03:7f:64:e4:63:a3:a4:
                    49:56:18:84:2e:be:fb:fa:ec:12:96:2f:af:d2:ba:
                    17:67:63:46:c9:be:9d:2e:d3:32:1b:6b:20:81:78:
                    90:d5:02:47:5d:4c:7f:fa:8b:93:a3:41:96:a2:1e:
                    2f:c8:22:e6:12:32:ca:45:ed:ad:81:dd:89:e5:be:
                    5a:df:c6:4b:e7:ec:d1:7b:9a:43:ee:be:43:a5:96:
                    55:89:0c:5a:dd:95:ee:cf:44:d4:3c:81:96:08:7f:
                    a0:9e:d8:42:fd:74:2e:4d:74:f3:c1:78:8d:c5:f1:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A1:DC:C1:12:6B:2B:AB:6E:4E:9C:E1:8D:04:48:98:DB:78:1C:F9
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:52:26:4f:be:09:e1:0f:3a:f9:86:f7:1f:79:c2:6d:7f:14:
         0d:aa:41:4b:ab:e7:88:32:b9:b2:0a:6a:f5:0c:3c:3f:96:21:
         89:6f:43:d6:f3:8b:b7:71:9b:04:1a:09:86:c4:75:f4:76:3e:
         5d:c7:ec:1c:8e:6c:91:e3:d0:72:fd:89:54:32:54:58:58:c3:
         59:ca:37:f6:fe:c2:7e:38:f6:af:c2:57:63:6c:a6:ce:02:51:
         0d:3b:58:46:d9:f3:5c:cb:a1:94:9e:31:ca:31:26:a3:e3:43:
         c4:f1:4b:97:d3:07:8e:ad:ce:8d:79:40:ae:d3:e6:46:b6:4b:
         fa:43:fc:af:84:9f:e2:e5:ef:57:46:94:b5:44:86:74:28:ff:
         be:af:83:bb:47:cb:43:58:66:b6:ba:e4:12:f5:7d:1e:e0:aa:
         cb:8f:d4:5a:2f:d6:89:7a:48:82:b1:9d:b1:af:0d:da:26:a5:
         20:ff:b0:79:dd:ae:1b:fb:6b:00:35:d5:0a:61:25:3a:fb:86:
         85:0e:6e:37:33:8d:5d:35:a6:8b:fd:6a:7b:3f:c8:2b:24:66:
         f8:94:0e:41:56:f9:2b:1b:c2:b1:f6:4c:07:ea:f3:e1:61:6d:
         c1:ef:65:8c:05:fe:16:fd:3e:55:19:90:78:f4:2d:99:81:ca:
         4c:ce:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:03:15 2025 by rpki-client