Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
File:                     6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json)
Hash identifier:          021p+7tDqzg3Bdl7aUTW/kzs/q1gH2xKaWqgD7wGXtg=
Subject key identifier:   CF:20:1F:0B:B4:13:F4:5A:34:12:61:C2:33:D7:1C:C0:2D:BC:1E:AC
Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A
Certificate issuer:       /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
Certificate serial:       1244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
Manifest number:          1239
Signing time:             Fri 22 Aug 2025 17:15:25 +0000
Manifest this update:     Fri 22 Aug 2025 17:15:25 +0000
Manifest next update:     Fri 29 Aug 2025 17:15:25 +0000
Files and hashes:         1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: bI76hnVoA1NGlilpQvAYwTarqCO5j+HzEXmBrgItwEE=)
                          2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: x0pbE7Ea3sKXTfydYa2BTBmjtzbK1GRSFoSpJkmD3Ks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4676 (0x1244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
        Validity
            Not Before: Aug 22 17:15:25 2025 GMT
            Not After : Aug 29 17:15:25 2025 GMT
        Subject: CN=68a8a5ad-3178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:e2:e9:7d:b0:fd:12:32:86:a5:30:6c:40:
                    bf:61:8c:7c:ca:cc:62:b6:78:84:33:20:1e:47:89:
                    b0:d2:73:19:91:b5:a5:63:ed:6c:88:cd:2e:ef:9d:
                    4e:f8:a0:b0:84:2f:0f:0b:26:c2:41:08:fb:1c:39:
                    55:77:08:c0:ed:12:50:fc:3c:eb:ef:c1:f3:96:f2:
                    c8:69:83:4a:e2:67:e4:4d:9e:02:36:2f:ae:2a:2e:
                    ad:3f:60:d7:c0:1d:8b:f0:f5:f3:e0:88:2e:e6:1c:
                    03:2e:fe:65:78:7f:d0:bb:16:df:55:0c:b5:35:9d:
                    f1:60:4c:b3:a3:b6:b5:69:49:05:78:d6:2a:f8:4c:
                    f8:cf:d0:8c:ca:4d:e2:0c:08:c7:2a:46:ad:1a:9d:
                    95:07:09:1e:d6:ec:7f:ce:36:ec:7b:7d:b7:86:5f:
                    25:3d:f1:75:40:04:36:c7:58:9f:de:d6:5b:ad:41:
                    00:8a:1b:11:3f:ab:86:cf:90:1b:a1:22:fc:a8:70:
                    5f:28:3d:b4:3d:84:b9:43:be:b9:e5:0f:a6:68:ef:
                    4c:8f:4d:a4:8b:b5:d6:19:41:15:09:ec:c5:fd:d1:
                    22:8c:3a:85:89:69:9f:3c:93:4a:db:f6:66:19:c5:
                    73:e1:89:a3:1b:ee:83:fd:fa:64:0c:1c:89:0b:95:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:1F:0B:B4:13:F4:5A:34:12:61:C2:33:D7:1C:C0:2D:BC:1E:AC
            X509v3 Authority Key Identifier:
                keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:09:e5:43:cb:4e:f3:86:00:c2:bd:b1:2a:e1:e9:9e:d9:
         a8:b7:2c:d8:ce:08:75:10:ba:79:2c:c0:aa:f2:c0:31:f7:c5:
         b3:5b:bb:be:bd:1f:71:cd:dc:20:ab:46:dc:81:9f:5b:e5:f6:
         42:16:a6:73:2c:b9:88:5b:34:6b:49:fb:57:f6:e3:ce:73:46:
         de:2d:a1:b1:ae:a5:15:cc:f2:ba:88:e8:e7:c0:f0:51:d7:e2:
         65:32:e9:55:72:89:1c:e3:65:05:91:d2:dd:bc:1e:9f:f0:ce:
         16:2f:27:25:48:dc:ea:fa:45:86:fc:7e:a4:f9:07:03:a9:d1:
         6b:7a:d4:b2:be:b0:33:f7:83:01:5d:7d:80:2a:d0:2e:d1:cb:
         63:9f:01:40:47:3d:0f:22:85:88:7b:30:34:30:a3:77:93:a4:
         4f:73:bf:5b:62:9c:cf:8b:11:05:c7:38:14:25:09:93:08:8c:
         e4:15:39:64:8d:24:b7:65:8a:53:de:ea:53:7e:44:80:af:cc:
         8b:37:ce:ef:b2:cd:4d:9f:a2:e2:d7:65:7b:97:91:22:a5:3d:
         28:d9:f7:fd:7d:85:e9:3c:f4:dc:31:a9:1f:f0:cd:30:67:5f:
         31:b1:e0:6b:fb:94:6f:5b:a8:8b:69:29:b2:6a:8f:88:16:10:
         01:ef:80:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzMTQxMTAvBgNVBAUTKEU4NkMwRjcyMEU5NkExRDVGMDYwRDk2MEFFNDIyMjEy
NTU2MERDNEEwHhcNMjUwODIyMTcxNTI1WhcNMjUwODI5MTcxNTI1WjAYMRYwFAYD
VQQDEw02OGE4YTVhZC0zMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAraLi6X2w/RIyhqUwbEC/YYx8ysxitniEMyAeR4mw0nMZkbWlY+1siM0u751O
+KCwhC8PCybCQQj7HDlVdwjA7RJQ/Dzr78HzlvLIaYNK4mfkTZ4CNi+uKi6tP2DX
wB2L8PXz4Igu5hwDLv5leH/QuxbfVQy1NZ3xYEyzo7a1aUkFeNYq+Ez4z9CMyk3i
DAjHKkatGp2VBwke1ux/zjbse323hl8lPfF1QAQ2x1if3tZbrUEAihsRP6uGz5Ab
oSL8qHBfKD20PYS5Q7655Q+maO9Mj02ki7XWGUEVCezF/dEijDqFiWmfPJNK2/Zm
GcVz4YmjG+6D/fpkDByJC5XzFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8gHwu0
E/RaNBJhwjPXHMAtvB6sMB8GA1UdIwQYMBaAFOhsD3IOlqHV8GDZYK5CIhJVYNxK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMxNC85NkZFMzAwNkUw
RDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29kWHdZTmxncmtJaUVsVmcz
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZHd1BjZzZXb2RYd1lObGdya0lpRWxWZzNFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjMxNC85NkZFMzAwNkUwRDIxMUU4QTYzMTM0MjVDNEY5QUUwMi82R3dQY2c2V29k
WHdZTmxncmtJaUVsVmczRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCK3wnlQ8tO84YAwr2xKuHpntmotyzYzgh1ELp5LMCq8sAx98WzW7u+
vR9xzdwgq0bcgZ9b5fZCFqZzLLmIWzRrSftX9uPOc0beLaGxrqUVzPK6iOjnwPBR
1+JlMulVcokc42UFkdLdvB6f8M4WLyclSNzq+kWG/H6k+QcDqdFretSyvrAz94MB
XX2AKtAu0ctjnwFARz0PIoWIezA0MKN3k6RPc79bYpzPixEFxzgUJQmTCIzkFTlk
jSS3ZYpT3upTfkSAr8yLN87vss1Nn6Li12V7l5EipT0o2ff9fYXpPPTcMakf8M0w
Z18xseBr+5RvW6iLaSmyao+IFhAB74AU
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:31 2025 by rpki-client