Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
File:                     6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json)
Hash identifier:          m5VeNDQp/TiV4A5BxukaTR18HhVQLBUjwKhx8tD221E=
Subject key identifier:   AD:D9:D9:9D:1A:86:EA:6C:0C:DD:30:32:5B:20:3F:33:E7:56:1D:62
Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
Certificate issuer:       /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
Manifest number:          0294
Signing time:             Sat 19 Jul 2025 02:01:28 +0000
Manifest this update:     Sat 19 Jul 2025 02:01:27 +0000
Manifest next update:     Sat 26 Jul 2025 02:01:27 +0000
Files and hashes:         1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: x9c3Xsmhu2nPXdF4ZP9RpFNJOcQQfrFJgSvhxL7CVyI=)
                          2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
                          rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
        Validity
            Not Before: Jul 19 02:01:27 2025 GMT
            Not After : Jul 26 02:01:27 2025 GMT
        Subject: CN=687afc77-8368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:15:58:43:11:a0:89:50:1e:fc:37:77:69:
                    94:fe:f7:9c:18:65:08:ce:5e:f2:1f:c6:d3:d7:35:
                    4a:8c:1d:14:2d:08:11:1f:b2:6d:ed:31:8a:93:ab:
                    04:af:19:e9:3f:52:64:75:6b:1f:49:20:39:e8:b7:
                    66:a6:9a:47:86:ff:64:8f:3b:25:5f:24:9f:e7:b4:
                    92:24:4b:92:66:13:b5:b0:a3:74:49:3f:e1:72:32:
                    8f:d5:eb:b9:9e:23:39:5e:56:21:94:61:f6:b7:62:
                    5a:8b:0f:6a:58:13:a1:c2:eb:8c:a0:1b:23:f4:7f:
                    c7:77:e5:9f:5c:2d:32:cd:98:26:56:9f:32:ba:39:
                    3f:92:69:c1:a6:5c:5e:92:04:bb:e5:21:32:87:37:
                    10:3e:de:2a:a8:a8:a4:a5:20:78:7c:6b:19:b6:15:
                    5d:b3:1d:35:ca:19:b2:5d:32:12:a0:e6:f4:2b:8c:
                    6f:27:67:d5:87:18:c4:a2:76:86:d9:4d:5a:10:17:
                    a4:31:93:e1:44:af:10:d9:bb:8d:61:e4:ed:4a:96:
                    a4:7b:cf:38:6d:c9:a2:42:5a:de:b3:58:b9:f3:57:
                    0a:45:03:6c:ce:87:27:69:4f:bb:d0:53:b9:d4:3a:
                    43:16:ee:0b:83:06:f1:ba:e5:aa:1b:c6:74:28:cd:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D9:D9:9D:1A:86:EA:6C:0C:DD:30:32:5B:20:3F:33:E7:56:1D:62
            X509v3 Authority Key Identifier:
                keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:93:08:31:10:bc:c2:cc:12:88:87:b7:fa:8e:c2:71:64:cd:
         a7:13:85:67:2d:6c:ea:44:9f:47:02:48:6c:1b:bd:8d:d1:69:
         b0:dc:ed:21:0f:6a:02:a3:f5:61:70:5b:d9:95:73:55:03:e4:
         93:5c:ca:0d:54:7a:bc:a8:23:42:d0:84:61:7c:fe:b2:66:ef:
         44:e1:db:d0:d6:17:79:2f:cf:ef:8e:25:f5:81:cf:1a:98:95:
         87:b1:99:3c:38:67:4d:af:cb:4e:f8:06:dd:6d:0d:12:85:5e:
         35:4f:79:86:96:94:76:fd:08:cc:c8:3b:c3:72:20:9f:83:d5:
         62:2b:67:96:c6:c3:75:dc:0c:25:b2:0c:48:6a:30:34:a9:fc:
         21:73:b3:e5:1c:3f:f8:fb:4e:56:04:39:5a:28:0e:c7:3a:b3:
         90:cb:d4:0b:8e:c1:4f:08:ec:6b:4a:23:03:c0:92:52:22:ab:
         66:3e:84:45:a5:87:bc:a6:fc:37:61:c7:14:c1:1a:5a:b4:2a:
         5d:45:bd:ac:8b:b4:ab:ff:66:3f:fb:f3:e7:2e:29:2c:2f:6e:
         f5:ae:39:91:6d:7e:56:d5:e0:13:5f:94:9b:a2:2a:50:ef:a4:
         51:5b:b4:1f:e1:85:09:79:7d:7d:d0:80:8d:ce:9a:1f:86:f7:
         39:3f:23:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz
RTk5N0Y0RDAwHhcNMjUwNzE5MDIwMTI3WhcNMjUwNzI2MDIwMTI3WjAYMRYwFAYD
VQQDEw02ODdhZmM3Ny04MzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jIVWEMRoIlQHvw3d2mU/vecGGUIzl7yH8bT1zVKjB0ULQgRH7Jt7TGKk6sE
rxnpP1JkdWsfSSA56LdmpppHhv9kjzslXySf57SSJEuSZhO1sKN0ST/hcjKP1eu5
niM5XlYhlGH2t2Jaiw9qWBOhwuuMoBsj9H/Hd+WfXC0yzZgmVp8yujk/kmnBplxe
kgS75SEyhzcQPt4qqKikpSB4fGsZthVdsx01yhmyXTISoOb0K4xvJ2fVhxjEonaG
2U1aEBekMZPhRK8Q2buNYeTtSpake884bcmiQlres1i581cKRQNszocnaU+70FO5
1DpDFu4LgwbxuuWqG8Z0KM1QYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3Z2Z0a
hupsDN0wMlsgPzPnVh1iMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD
OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4
UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVkwgxELzCzBKIh7f6jsJxZM2nE4VnLWzqRJ9HAkhsG72N0Wmw3O0h
D2oCo/VhcFvZlXNVA+STXMoNVHq8qCNC0IRhfP6yZu9E4dvQ1hd5L8/vjiX1gc8a
mJWHsZk8OGdNr8tO+AbdbQ0ShV41T3mGlpR2/QjMyDvDciCfg9ViK2eWxsN13Awl
sgxIajA0qfwhc7PlHD/4+05WBDlaKA7HOrOQy9QLjsFPCOxrSiMDwJJSIqtmPoRF
pYe8pvw3YccUwRpatCpdRb2si7Sr/2Y/+/PnLiksL271rjmRbX5W1eATX5SboipQ
76RRW7Qf4YUJeX190ICNzpofhvc5PyO4
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:28:25 2025 by rpki-client