Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
File:                     6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json)
Hash identifier:          TcvkwWrlxTf2gtDOHMLOc2pmbddthx9RrtMlKoaW/ME=
Subject key identifier:   B0:E3:FC:1B:71:F0:C5:0C:3E:59:45:49:8E:39:46:4E:BD:37:6B:39
Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41
Certificate issuer:       /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
Manifest number:          0212
Signing time:             Sat 23 Aug 2025 02:16:51 +0000
Manifest this update:     Sat 23 Aug 2025 02:16:51 +0000
Manifest next update:     Sat 30 Aug 2025 02:16:50 +0000
Files and hashes:         1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: uxfQJvwIyZlQZV+Dh6kE87XelS4fYtVk8DJrKrjtdDo=)
                          2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: TXPIWerNT1GXv7TyCQJNbBBoD6VtScjOMdZFAdd3h8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl
                          rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7FB1, serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541
        Validity
            Not Before: Aug 23 02:16:51 2025 GMT
            Not After : Aug 30 02:16:50 2025 GMT
        Subject: CN=68a92493-3c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:a0:6e:50:24:e3:29:db:a0:00:b2:b0:4f:
                    b1:17:c6:98:40:b6:f3:fd:12:91:dd:f7:0a:ed:7c:
                    e3:ad:35:ef:2b:b6:d3:ba:20:e0:16:73:6f:b1:1b:
                    81:ae:b2:5c:eb:be:1a:9f:be:90:df:50:98:eb:58:
                    52:72:30:dd:18:e4:35:02:f6:9f:b3:0a:e5:e2:5b:
                    c2:b0:0c:64:07:7f:b1:61:33:b3:8e:ab:b2:ab:9b:
                    48:7e:11:98:e7:62:00:4c:63:d1:1e:4b:fc:49:07:
                    34:5a:7e:a7:d2:08:e5:97:f2:30:1a:bc:ed:f4:a2:
                    ad:71:1d:f1:49:b4:5c:2b:4d:d2:39:98:41:6d:ff:
                    03:0b:12:e8:c4:90:7f:d2:3e:b8:30:c2:63:84:74:
                    61:4e:90:c5:a4:24:fb:07:18:56:2a:7d:04:6f:34:
                    38:8e:02:c1:6b:96:55:3d:72:c9:ae:d1:57:f5:61:
                    0f:7b:70:0a:ef:e6:63:8f:32:c6:38:e9:ee:5e:2f:
                    92:25:3a:cf:f3:8a:7f:ab:13:59:b4:52:4c:2b:f5:
                    a3:db:e6:4f:85:48:b9:19:ae:3e:5b:58:1c:ba:5f:
                    f1:09:87:6c:4a:03:54:f2:17:05:cd:87:17:26:df:
                    1d:5b:50:d4:79:67:91:9b:a2:01:44:2b:ed:4d:1a:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E3:FC:1B:71:F0:C5:0C:3E:59:45:49:8E:39:46:4E:BD:37:6B:39
            X509v3 Authority Key Identifier:
                keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:61:b4:4e:45:62:f0:e7:8d:45:0e:d4:81:c0:69:e6:78:1a:
         93:a9:40:29:5b:48:76:0c:15:d5:da:bf:75:ca:45:14:e8:6a:
         35:fc:7b:64:af:f0:91:5c:d1:41:16:fe:25:ec:9f:69:01:bd:
         19:3f:ab:bf:8e:11:ec:e7:4d:37:6c:35:49:80:e5:11:96:3c:
         cb:27:1b:65:75:b6:0c:ea:74:3b:88:a5:62:04:e3:f2:13:d1:
         bf:c5:f4:8f:1c:d3:11:bb:66:17:7e:06:e5:4e:9f:e6:7b:80:
         25:ec:fd:a3:9b:4e:c6:ec:80:9c:f4:79:01:2a:73:25:28:7c:
         9f:8e:0b:d8:54:c6:a3:24:d6:c8:7e:22:49:2b:60:6e:77:a2:
         62:e5:b7:d3:c6:dd:ca:86:44:fe:36:3e:7d:1f:55:2c:da:39:
         81:43:00:70:b5:4c:92:0c:6e:bb:4b:93:22:d9:c7:c1:16:c3:
         0f:5c:3f:ca:43:c7:40:5b:0f:31:e5:b8:38:cd:d4:14:d7:79:
         d0:26:e1:7f:f1:8d:a5:2f:4d:dd:dc:91:4f:8c:93:da:77:9a:
         18:08:78:0a:d7:4f:ca:d0:e6:ad:cd:ed:cc:97:25:03:23:64:
         10:54:84:a9:28:e1:07:11:2a:d5:51:c7:ed:7c:5e:48:2f:16:
         16:e4:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:46 2025 by rpki-client