Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
File:                     6A9XgW64BohdxesewuGtVKL58t8.mft (raw, json)
Hash identifier:          3B5juohWtS6SlBLCzp/kP7JOCMygn4bVvHZ24y/F/Qs=
Subject key identifier:   B4:C7:85:82:34:09:16:36:E0:1A:F0:0A:51:EA:82:CA:C7:71:A0:02
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Certificate issuer:       /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial:       080B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
Manifest number:          07FD
Signing time:             Wed 02 Jul 2025 21:14:00 +0000
Manifest this update:     Wed 02 Jul 2025 21:14:00 +0000
Manifest next update:     Wed 09 Jul 2025 21:14:00 +0000
Files and hashes:         1: 6A9XgW64BohdxesewuGtVKL58t8.crl (hash: cNS5iWMezi9OvZe8OLt7JBxEe3++D7roOGgZawo2zk0=)
                          2: F95379BE124411EB9E551E38C4F9AE02.roa (hash: hzhgTWFnab8T39Mu9sUJRnqHMQMLHx+/is4D+pExOhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA19, serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
        Validity
            Not Before: Jul  2 21:14:00 2025 GMT
            Not After : Jul  9 21:14:00 2025 GMT
        Subject: CN=6865a118-7121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:7b:c3:ac:c1:db:e0:90:24:2b:47:27:49:
                    c7:d8:67:b2:8b:bc:d8:a5:3d:0f:df:76:b5:a3:21:
                    5f:89:91:fe:20:0a:66:6d:7b:00:14:2e:4b:32:cf:
                    0e:4e:d7:a2:c2:c0:cd:1f:6b:91:9a:e4:25:7b:c0:
                    ee:2f:6b:31:9b:0e:31:f7:7e:5a:47:da:1e:d6:d7:
                    ee:06:57:31:ec:e9:4f:42:65:af:4b:07:6d:2a:4f:
                    11:12:08:19:d8:d6:f7:dd:12:71:53:34:11:49:68:
                    22:1e:38:fe:a9:22:18:83:14:ea:3f:a3:39:30:85:
                    58:09:42:72:17:16:bd:4c:a9:2e:92:20:06:f5:55:
                    97:91:b0:13:c7:69:94:a2:90:d0:21:a5:19:89:0d:
                    a0:f0:c9:fe:f8:22:38:1d:d4:f4:87:d4:ef:30:90:
                    59:89:38:75:63:0e:e3:c5:06:ca:9a:fd:9f:d7:e0:
                    00:88:ee:1a:77:6f:a3:9f:88:08:f4:d1:20:68:98:
                    08:a2:36:4b:d9:05:60:88:38:5e:62:ec:47:ab:e2:
                    6a:3d:f0:34:7f:5e:08:6d:6e:86:ac:5f:78:c6:a9:
                    84:c2:0f:bf:97:b6:51:ac:9a:8b:8a:61:bd:75:78:
                    ab:43:ee:c3:00:ff:a7:91:9e:28:80:e3:60:58:72:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C7:85:82:34:09:16:36:E0:1A:F0:0A:51:EA:82:CA:C7:71:A0:02
            X509v3 Authority Key Identifier:
                keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:fc:e2:04:0c:cd:1c:a0:99:0a:5d:1c:63:47:5d:6f:b3:
         c0:6e:f3:25:22:f5:11:67:04:ac:d7:03:0a:58:27:9b:97:08:
         61:42:9c:26:b1:bb:36:6c:8c:27:02:f4:26:0f:e4:93:06:f2:
         5d:c8:38:9f:a6:97:6a:ce:63:59:a1:d6:ba:33:f7:f2:c1:3f:
         b4:cc:71:e1:04:71:a7:fb:e8:75:1e:70:3b:f0:44:f9:90:4a:
         76:0b:20:19:e1:8c:b0:90:b9:fa:a7:8b:8a:b7:39:31:24:11:
         29:0f:31:62:60:d4:09:66:24:60:a6:44:90:74:96:a9:33:c3:
         f2:4e:b5:01:18:54:ef:33:a2:80:00:3c:32:9d:42:24:4e:ff:
         61:bb:d6:f5:48:98:d4:46:43:a3:c4:90:bb:ec:09:bf:b7:b4:
         ff:bf:20:b6:e0:4d:b5:c8:93:7c:88:b0:0c:dc:b4:47:0d:66:
         0a:51:a9:10:8e:5d:dc:ea:46:a3:ad:9e:aa:49:b5:bc:11:f2:
         70:96:80:4f:b2:73:7b:89:6d:92:8c:e5:0c:5d:86:07:92:aa:
         d4:db:65:40:b4:0d:03:46:d5:52:d4:d9:34:e7:d0:8a:d4:33:
         6f:7c:9c:62:99:1d:ea:b4:8c:a2:69:2e:7a:5b:9a:e6:93:9b:
         f9:93:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:09:27 2025 by rpki-client