Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
File:                     6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json)
Hash identifier:          a9zrwyX05KC5RNpj3rjlEUPF5fyei9264gxgHV2+KOY=
Subject key identifier:   9E:49:3E:52:B2:1F:79:91:14:F9:81:A8:8C:62:BC:92:8C:64:86:C8
Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
Certificate issuer:       /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Certificate serial:       0265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
Manifest number:          0260
Signing time:             Sat 05 Apr 2025 01:53:31 +0000
Manifest this update:     Sat 05 Apr 2025 01:53:30 +0000
Manifest next update:     Sat 12 Apr 2025 01:53:30 +0000
Files and hashes:         1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: wmVjLO8eZQ0YvQkeh2D03wss5bCc/o9ZT7fdlDCWlYQ=)
                          2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
                          rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDAE
        Validity
            Not Before: Apr  5 01:53:30 2025 GMT
            Not After : Apr 12 01:53:30 2025 GMT
        Subject: CN=67f08d1a-9ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:32:cf:68:c6:55:41:42:bd:3f:95:87:b5:
                    72:81:cc:ed:61:73:e6:09:50:db:88:c5:b2:0e:19:
                    ac:78:16:12:50:0c:d6:83:0b:da:62:58:7f:c7:38:
                    10:64:f6:8f:7d:c4:1d:75:6e:05:b5:ab:de:cb:c3:
                    c6:c0:c4:d7:62:78:45:a3:61:3f:80:cb:ec:2a:2a:
                    bf:34:43:b5:3b:22:aa:62:a4:aa:99:4b:41:7b:90:
                    02:56:9a:a4:3a:01:0d:28:48:53:c4:7e:0c:46:c4:
                    c0:3d:95:ae:67:29:71:24:be:62:78:c0:9d:6c:0d:
                    f5:4c:cd:7c:f4:52:3d:f4:90:80:c4:39:da:a4:45:
                    cb:8e:64:07:0d:28:3f:94:4d:97:65:8c:5a:71:37:
                    af:d6:11:ff:99:fa:b1:3e:fd:4b:a8:63:c1:c9:54:
                    df:e3:55:0f:f7:07:80:a5:60:b0:3a:77:f9:ea:0e:
                    bb:35:b8:c6:5a:3c:1f:99:1c:4c:ea:04:48:e9:bc:
                    10:06:40:49:59:39:77:be:b4:eb:58:4c:67:dd:5e:
                    ab:96:37:66:3b:f7:28:74:5e:75:24:d4:d0:94:41:
                    4e:54:12:57:a7:d6:5f:56:3c:b6:bf:51:56:3d:5e:
                    6b:fa:96:5b:d1:c3:dc:28:41:97:e0:bb:4a:f6:8c:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:49:3E:52:B2:1F:79:91:14:F9:81:A8:8C:62:BC:92:8C:64:86:C8
            X509v3 Authority Key Identifier:
                keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:16:17:2e:e4:a4:ec:6b:df:75:19:f6:ec:ea:aa:0d:f7:5a:
         22:b2:8f:d8:f3:62:21:b3:6b:97:dc:da:00:6e:e4:44:15:b3:
         e6:3b:86:d4:c3:d7:37:97:9a:f5:17:f7:c5:79:da:31:0c:75:
         47:37:c8:96:8a:a4:1e:72:8d:e7:6d:d0:12:9f:ea:47:4d:aa:
         1c:a3:90:96:73:8e:f3:a1:f5:02:12:95:00:5a:1a:50:27:1d:
         e5:d8:69:ba:f1:24:3e:8e:87:91:1e:53:1c:e4:c1:c9:46:e3:
         02:c0:91:1c:a1:a0:4a:a9:18:10:ef:be:1d:7e:60:97:43:6a:
         4f:33:94:b2:52:4f:ef:24:bb:65:cb:58:af:ba:19:73:36:ac:
         ad:4d:a0:97:64:9a:64:5a:f6:8b:f4:1a:0a:f8:72:0a:46:0a:
         0c:3b:57:f8:bc:9f:ab:8d:39:f2:16:e7:b2:a9:e1:d8:bc:6a:
         1e:e7:3c:2d:00:07:87:cb:bb:35:43:77:7d:1a:2d:93:21:40:
         5a:85:3d:ae:a9:ee:94:ac:74:32:5c:f1:49:4a:1b:87:3c:ad:
         0d:4f:dc:e0:4f:f0:3a:2b:06:9b:1f:a3:fa:fa:eb:7e:32:1a:
         3c:ec:1a:8f:47:4d:2c:a1:48:e2:0e:d2:c0:db:64:3b:6c:ac:
         bd:ce:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:02:42 2025 by rpki-client