Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
File:                     6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft (raw, json)
Hash identifier:          Q4q/vwuPL4Ftcc7LAZzN+at28A0SGg61+ZPc67+LI68=
Subject key identifier:   13:80:41:A3:B7:E0:E4:C1:D4:95:45:71:95:12:D8:04:7D:8F:E8:76
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Certificate issuer:       /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial:       077F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
Manifest number:          076A
Signing time:             Sun 20 Apr 2025 21:14:57 +0000
Manifest this update:     Sun 20 Apr 2025 21:14:56 +0000
Manifest next update:     Sun 27 Apr 2025 21:14:56 +0000
Files and hashes:         1: 6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl (hash: ZIBaXO6Wdb7Lne3zxkBUxcj3zGRUbvYRrm1gmchewbs=)
                          2: 424FB76E5B7811EB8259662FC4F9AE02.roa (hash: EJI4ug1GxHVvqHvhL7mhbfrhtlrgIdYMjKZFuSdZ1RI=)
                          3: 518E90D088BC11EB8D00B631C4F9AE02.roa (hash: g3rv5WuB/2jOwkWM0ldEj38JTMg4kjD/MkrFaJE5IvY=)
                          4: BAF4AD0418B211EB8C78F510C4F9AE02.roa (hash: YX7S6YQKfzWgrnHOnII3LrtKoEeWJuSugYS6SU9zhmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
                          rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 18:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1919 (0x77f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D26, serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
        Validity
            Not Before: Apr 20 21:14:56 2025 GMT
            Not After : Apr 27 21:14:56 2025 GMT
        Subject: CN=680563d0-3cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:2a:55:5e:15:53:08:45:53:07:d7:2a:a1:
                    e0:d4:a3:2b:ef:c0:04:97:7a:18:7e:fe:c0:e0:26:
                    f7:82:cf:ea:51:6e:e7:37:e7:5f:de:85:36:88:5f:
                    51:f8:db:56:77:c5:44:dd:87:de:30:1e:60:ad:78:
                    08:46:1e:91:a7:4a:d1:76:a0:a3:a0:08:aa:56:ae:
                    a8:22:76:9f:26:be:70:de:4b:fa:1a:e3:68:ed:63:
                    d5:44:ce:32:15:c4:71:e6:38:be:d1:78:c8:99:9c:
                    97:84:f0:ae:1b:de:a0:e7:2a:5d:73:9f:e8:99:07:
                    c5:9f:d9:ed:30:11:4a:a4:c5:d0:6b:63:2b:8b:a5:
                    3b:c0:1e:2a:14:1e:3b:cf:3d:01:d5:5a:ad:f0:3f:
                    fc:38:71:79:0d:d9:66:4b:8a:be:cd:61:f2:ac:3c:
                    88:4e:0c:8c:0c:cd:a4:af:55:e8:66:da:9e:82:fc:
                    21:40:8a:ac:f5:5e:2f:d5:ed:35:1f:00:2f:9c:21:
                    63:d8:2d:45:74:e6:82:9f:f7:c6:a0:c0:7d:62:68:
                    57:9a:ed:72:32:06:ca:e2:74:ba:88:42:a5:d9:54:
                    04:e8:f2:1d:34:be:f3:cf:8d:72:e0:06:d4:cc:f9:
                    39:78:82:d1:e3:ad:ad:7d:a2:3f:2b:4c:e1:08:02:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:80:41:A3:B7:E0:E4:C1:D4:95:45:71:95:12:D8:04:7D:8F:E8:76
            X509v3 Authority Key Identifier:
                keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:22:cd:c1:c6:bf:e5:05:01:0c:bd:76:34:0b:f6:7c:4b:
         4d:ad:1c:94:e9:dc:7c:71:da:65:0b:08:ad:18:68:48:0b:55:
         c7:ba:28:50:d0:36:c9:91:4f:0b:09:f9:38:a3:f2:63:ed:27:
         a4:09:b4:af:bc:57:1a:30:1e:5a:1e:5a:89:43:92:97:f1:d0:
         cc:60:d0:2b:68:5f:ec:54:7b:98:09:49:14:71:5d:64:d9:1e:
         35:f5:01:0f:c9:ca:c2:d7:f1:f4:50:fd:a1:a1:ec:8b:04:7e:
         a3:d7:ec:3c:f9:05:fe:6e:0f:94:21:14:f5:9c:01:c6:d2:b2:
         3e:33:ef:1e:26:73:b9:94:87:0c:14:6e:ff:51:e3:72:69:3e:
         9f:ce:20:59:57:8d:3a:9a:e4:1b:e9:86:6d:eb:54:69:8e:f3:
         71:06:2c:99:8e:c0:a0:13:31:d5:3c:a1:7e:bd:05:cb:31:76:
         91:c2:61:ef:84:64:b1:4c:c6:72:79:fa:7b:39:a3:d1:00:58:
         a0:30:3c:c4:5e:03:49:56:bd:24:96:db:b1:cf:f7:5a:48:1b:
         bc:17:2d:b6:6a:81:2d:d2:ff:1d:22:3b:31:97:19:72:7a:95:
         15:ec:76:92:ea:00:50:33:8f:10:ed:66:d9:ff:29:d0:d3:49:
         66:cb:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:17:48 2025 by rpki-client