Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
File:                     a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json)
Hash identifier:          s8fNfSr+N9+VjdJCZUyIlXFWyG2daaUewVfafrqe8KI=
Subject key identifier:   01:FB:DD:83:0C:E8:AB:C2:BB:F9:1C:98:F5:5C:6F:EA:24:2A:22:01
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0CE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
Manifest number:          0CB6
Signing time:             Sat 28 Jun 2025 17:58:46 +0000
Manifest this update:     Sat 28 Jun 2025 17:58:46 +0000
Manifest next update:     Sat 05 Jul 2025 17:58:46 +0000
Files and hashes:         1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: YORePXD07OJf7ismRgvQHQHyB8CIjH15Zc9IezGN6Tg=)
                          2: D3EC028C2AF511EE90800A65C4F9AE02.roa (hash: +hALYP3fmXiUu1g2+UCKikl1Y9WM+rKXEqvZUSDNE8I=)
                          3: 990D779897A211EF8F258761C4F9AE02.roa (hash: 7rnRdj6F+HEg+i7aB4aUe+GD+60bEZJEJnTlO3LVi6E=)
                          4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=)
                          5: 919D74562AF511EEA2663F52C4F9AE02.roa (hash: h0QhuXjDa5LUS0ETeRi4LQZ7+udZrItG82FhW+NYc/0=)
                          6: FD2A54D8DD6311EA9EFD035CC4F9AE02.roa (hash: 9m0UQLhCfmSnooX3c/o+r8ndL1ume0rI54qO9D+eF4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 17:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Jun 28 17:58:46 2025 GMT
            Not After : Jul  5 17:58:46 2025 GMT
        Subject: CN=68602d56-ead1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:ad:dc:56:fb:e8:0c:00:b7:72:4a:16:1c:
                    2f:f4:2a:52:07:19:be:04:d7:5c:bc:46:35:81:87:
                    70:71:47:ea:3f:09:06:9a:a3:98:8a:49:43:65:95:
                    dd:54:20:22:8c:9e:d1:93:0d:a6:7b:d5:fc:33:70:
                    2e:7d:ed:ac:97:10:8c:ce:9b:4d:ac:15:f6:fb:20:
                    6c:ac:7f:05:d7:39:f6:be:f1:06:c1:1b:ce:05:da:
                    bf:8b:35:b9:f0:0f:ed:98:21:e4:df:e8:60:d6:a4:
                    b8:08:12:46:2b:46:0f:2f:78:aa:07:55:c0:42:c2:
                    a2:a9:7a:53:4a:7a:04:2e:20:b8:08:a5:de:1b:c4:
                    35:43:ce:10:72:22:b2:9d:5d:11:05:30:1f:f0:70:
                    3b:62:70:73:53:09:37:18:5e:a8:4e:35:2f:ef:17:
                    03:e8:7e:b4:c9:f2:a5:a3:a0:04:42:27:21:e0:23:
                    d1:62:91:bb:d1:82:76:0e:eb:0a:3b:e3:1e:22:4e:
                    64:a2:3b:d4:40:9f:a3:3d:63:be:1a:df:42:a1:52:
                    18:f9:5f:85:99:5d:41:1b:6f:c3:f0:31:e9:3e:d6:
                    d2:2c:9e:ed:2e:46:76:03:2b:51:5f:cc:6b:eb:f6:
                    22:8b:64:7a:ce:df:4e:ab:a8:8d:8a:d3:a4:96:b2:
                    9b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:DD:83:0C:E8:AB:C2:BB:F9:1C:98:F5:5C:6F:EA:24:2A:22:01
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:ba:24:ca:90:2e:8c:35:4f:b4:eb:36:a0:f5:eb:15:f4:27:
         9e:b7:a4:44:1c:e8:c7:91:27:78:40:e3:e6:a8:ab:95:3e:5e:
         30:e7:70:31:7f:7f:8a:6d:6d:fa:27:d2:49:d2:1f:d1:e4:1b:
         49:8e:d9:13:e8:7e:53:13:c7:0e:44:5b:af:96:0d:cf:0a:b7:
         fb:88:39:ec:09:09:ad:7c:e9:14:ab:d2:e2:f9:d6:db:0d:bd:
         8d:e4:7e:90:81:45:70:0f:8d:44:1d:b6:18:30:6e:d2:3a:a2:
         22:93:5f:3c:bc:33:19:05:51:88:d0:bb:8c:06:18:35:a5:87:
         61:0b:42:88:c4:1e:95:05:ce:40:01:ab:04:77:f5:ac:0a:43:
         85:8e:82:15:51:06:da:4e:5b:b7:3a:85:e5:66:0d:53:74:b7:
         4e:40:c0:45:68:cb:54:5a:89:25:4a:32:9f:72:47:f2:97:2a:
         77:98:07:8d:28:ee:a0:3d:14:2f:1d:85:ac:1a:fa:04:59:db:
         8f:56:1d:38:d3:b5:f6:37:ca:f5:ad:cd:61:87:06:2d:da:e3:
         eb:8f:6a:d2:37:92:7d:32:1e:f5:e7:9b:66:5b:07:d9:a1:7b:
         68:0b:79:67:f9:98:26:0e:b6:c2:cb:62:24:a0:da:a1:e0:87:
         3e:65:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:09:33 2025 by rpki-client