Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File:                     6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier:          MFWoIesHJshhwd4Q0PxxguGD/++xcLZi5FTmqGiNzq4=
Subject key identifier:   49:56:9E:74:9B:20:96:14:2B:91:FD:FD:7C:66:C0:93:5D:BB:80:ED
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer:       /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number:          01F9
Signing time:             Thu 03 Jul 2025 02:30:49 +0000
Manifest this update:     Thu 03 Jul 2025 02:30:49 +0000
Manifest next update:     Thu 10 Jul 2025 02:30:49 +0000
Files and hashes:         1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: Qa12wyZVXu+tPnwP3HJ3Rc5POzODAplZKnAmIgRpjGA=)
                          2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: IlKGwFHV9ZEo1VbyiGg5B3egdFnPmqfH6pmscMBr3y0=)
                          3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ceGnF1r8IOwVE50G1+2RnDibZLWap/obpLcH2ZWlhhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
                          rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
        Validity
            Not Before: Jul  3 02:30:49 2025 GMT
            Not After : Jul 10 02:30:49 2025 GMT
        Subject: CN=6865eb59-ce30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:a2:7c:fe:85:e0:43:18:84:5a:67:5f:5d:
                    1e:be:b8:53:12:36:5b:12:2b:b8:14:57:6c:ee:37:
                    7a:85:7a:d8:7b:74:4b:f5:f1:f0:bd:8d:14:8c:d2:
                    d8:39:9b:91:ce:e5:d3:8d:58:ff:64:b9:55:3c:b5:
                    cd:66:7d:eb:12:4b:be:2b:67:0c:e1:92:3f:60:cd:
                    1d:9a:b9:b3:4e:ab:dc:ad:cb:e3:30:3b:f6:fa:d2:
                    76:93:35:5d:7f:b0:66:0b:d4:6c:f2:a4:3e:de:b8:
                    20:9a:24:b3:a0:bb:50:1f:46:4f:1f:05:1f:bb:f7:
                    3b:53:54:51:fb:17:a4:9c:73:4c:6f:ad:8c:bb:78:
                    43:55:64:53:c2:28:8f:dc:8f:f4:e2:28:70:b8:1a:
                    3e:d9:a2:37:3a:90:d1:57:d0:bc:30:a8:19:ce:e2:
                    64:1c:d2:73:e4:c4:6e:24:2d:cb:5a:2f:9d:9b:35:
                    1e:aa:4d:c4:c1:ee:67:1b:78:b1:77:3e:12:e5:6a:
                    08:5c:cc:be:1c:dd:40:5c:0c:52:9a:b9:98:9a:b1:
                    21:89:57:81:4b:b8:b2:fb:e3:50:fb:9d:f3:f7:19:
                    bc:40:b8:28:45:8e:db:b3:fe:66:65:d6:cd:3c:86:
                    26:2d:d6:8f:df:e6:e9:73:87:cf:ed:04:e4:37:ba:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:9E:74:9B:20:96:14:2B:91:FD:FD:7C:66:C0:93:5D:BB:80:ED
            X509v3 Authority Key Identifier:
                keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:ad:14:61:45:11:8f:a8:91:06:fd:ca:4f:4f:66:8c:14:
         59:3f:3a:6f:6c:50:c5:f9:cb:0b:f1:4b:87:f4:18:46:d4:f4:
         bd:3d:65:75:db:75:a9:b0:36:6e:50:4f:e3:e2:f4:0e:12:a6:
         f1:ce:dd:6b:97:ca:bb:b7:75:67:21:b1:46:69:fa:ed:fe:55:
         31:a7:46:68:be:d8:ac:cb:0c:e2:ba:b1:0e:15:16:cc:b2:b6:
         00:34:11:b8:5c:bc:1e:7a:6b:55:97:9b:de:7e:91:d1:da:6e:
         fd:72:3d:aa:d0:99:7c:1c:59:b1:db:a8:92:ec:05:ee:82:7b:
         c4:ae:2c:9f:98:b1:37:93:fb:56:5f:f7:01:84:1f:47:a0:1d:
         7a:d3:84:0a:db:15:d3:41:d8:c7:41:8e:03:85:1e:32:fc:cd:
         84:32:d4:4f:08:da:cc:b7:dd:dc:43:8d:d8:bb:89:62:e9:88:
         07:92:51:b7:d7:94:68:a9:34:75:8c:09:9f:4b:06:e4:36:44:
         af:93:8f:c7:62:38:94:09:a3:d7:9b:6f:7d:93:b1:11:05:1f:
         8d:c3:82:de:d1:cf:31:e0:0e:63:45:09:56:a8:4d:3a:1d:7e:
         a7:e8:df:48:39:00:30:73:00:2b:c2:47:7b:ad:94:45:46:6e:
         79:28:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:31:38 2025 by rpki-client