Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier:          y613xDD+2obce9ScmGtpTbZfMGgZDICljl2REgosWUs=
Subject key identifier:   83:1A:C4:7D:31:9F:3B:FC:88:CF:7D:6F:4C:6F:E8:AB:71:60:2D:BD
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer:       /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial:       0398
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number:          0395
Signing time:             Thu 03 Jul 2025 01:10:54 +0000
Manifest this update:     Thu 03 Jul 2025 01:10:53 +0000
Manifest next update:     Thu 10 Jul 2025 01:10:53 +0000
Files and hashes:         1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: 6gHJInAOOAm8nM4g0HuDmV15DeDarxUwr5Xf/gxJ1lM=)
                          2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: c/Zvm427kENiAideE2yc17TlzEqhW1utfEK6NB9dveM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Validity
            Not Before: Jul  3 01:10:53 2025 GMT
            Not After : Jul 10 01:10:53 2025 GMT
        Subject: CN=6865d89e-5d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0f:c1:30:09:65:4b:74:b3:76:1d:65:f6:c4:
                    25:72:06:bc:2e:5a:51:b8:b0:b7:a7:d3:89:10:af:
                    f5:b0:09:65:92:e3:c3:0a:49:9b:d6:aa:74:ee:13:
                    e8:db:98:ec:09:91:41:c4:7e:0f:8f:05:eb:03:14:
                    f6:44:35:b9:b1:b3:52:2d:e9:b5:27:31:3a:24:e3:
                    b5:19:16:e8:54:0d:c1:7f:96:56:b4:96:07:d3:f9:
                    d8:af:da:ee:6a:89:fa:d9:66:aa:f5:9d:de:bb:26:
                    e0:78:74:b7:16:6b:83:f5:09:35:38:09:fe:65:fe:
                    bf:f7:03:69:7e:91:1a:c4:97:06:0d:e0:24:58:9f:
                    45:64:3d:50:8e:73:3b:b0:be:7c:15:c4:23:ee:ef:
                    80:5f:d2:5a:81:8d:bb:ee:f2:b0:68:0c:01:72:e0:
                    16:d4:ee:e7:2a:66:bf:8f:cb:25:bf:37:50:93:fe:
                    48:f9:7f:10:48:17:79:67:2e:42:09:4b:34:f3:9c:
                    e1:76:ba:9c:0b:a6:39:a2:14:99:d0:53:88:62:28:
                    12:bf:6b:92:59:13:3b:0c:ed:bd:4e:5e:85:b5:1f:
                    7a:f5:be:8e:93:02:92:10:54:c6:83:a3:b4:32:ab:
                    ee:a7:1e:48:9d:0d:1e:89:bc:82:5b:a2:a9:d6:47:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1A:C4:7D:31:9F:3B:FC:88:CF:7D:6F:4C:6F:E8:AB:71:60:2D:BD
            X509v3 Authority Key Identifier:
                keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:dc:92:18:b0:9b:0b:c3:38:77:c5:a9:26:6e:4d:16:73:47:
         57:85:d7:c8:e5:7e:ee:f6:00:6b:bb:d2:53:cc:8b:fa:a1:67:
         9b:f7:97:9f:9b:cd:c6:50:f4:5a:0c:2a:c4:a9:c5:d0:6a:de:
         db:6e:41:07:b3:a6:7c:fb:27:98:70:14:b1:3d:08:a8:64:9f:
         8a:81:03:f8:7f:87:00:e5:2d:9a:4d:67:bc:50:10:be:65:27:
         43:3b:d6:8f:5e:ff:72:79:39:40:e7:d1:a0:93:c8:b9:07:50:
         56:b9:c4:19:3b:59:ed:6d:11:3b:a5:ff:f5:09:c1:a1:cc:c1:
         6c:79:83:61:10:30:04:25:89:5c:71:80:be:60:cf:b8:41:ef:
         f9:4a:ae:ac:04:8c:1e:90:86:c5:b4:bc:07:ff:c5:0d:48:53:
         4d:3e:6c:a9:3f:1e:1e:35:54:d9:07:7f:1c:36:39:8f:41:fc:
         69:7a:8f:cd:12:14:45:90:5e:84:16:c4:48:e5:fd:39:57:df:
         91:d2:84:33:18:21:0a:c9:a3:96:7d:5f:29:74:85:01:ed:4d:
         d8:b0:bd:c8:32:75:69:fe:41:eb:f8:e9:b1:5b:62:d7:83:a9:
         42:19:ea:28:fd:04:f0:0f:f0:c9:b2:7e:3b:e4:00:d9:f0:c8:
         de:7e:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:17:54 2025 by rpki-client