Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
File:                     6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json)
Hash identifier:          cvH1x8W1XL1iaYSVOAiZJd0Q+M7/+LQ60UqtnItUapc=
Subject key identifier:   BF:25:96:53:4E:BA:08:C2:CE:55:2C:9B:91:D0:96:3D:63:7A:36:40
Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
Certificate issuer:       /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Certificate serial:       0CA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
Manifest number:          0C8B
Signing time:             Thu 24 Jul 2025 18:25:13 +0000
Manifest this update:     Thu 24 Jul 2025 18:25:12 +0000
Manifest next update:     Thu 31 Jul 2025 18:25:12 +0000
Files and hashes:         1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: 2irDpoN1Tn+vAxkJdUAeQvvFNnNQrDRsbjjXrCiewcM=)
                          2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: PKoIMzmjFW6opIpuPpXxT7JTsKk8w7rWTXfvOheNJEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl
                          rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 18:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3233 (0xca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D5C1, serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
        Validity
            Not Before: Jul 24 18:25:12 2025 GMT
            Not After : Jul 31 18:25:12 2025 GMT
        Subject: CN=68827a89-e69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:b1:e2:26:9d:b6:29:e0:6a:77:6c:e4:36:
                    93:0c:28:65:10:c3:a2:4f:6c:55:97:91:20:ee:fe:
                    61:4c:d2:77:7c:7c:0a:94:78:cc:9b:88:59:03:f7:
                    4d:63:c9:01:81:0a:5a:03:da:60:fd:e2:4e:20:89:
                    d5:8c:5a:42:23:fe:6f:d0:a2:14:14:c8:36:8a:ba:
                    c1:bc:68:a5:1d:b4:be:71:fd:f7:73:0e:06:6a:7d:
                    4a:a2:ef:3e:14:5b:e8:43:77:9c:8a:62:af:09:62:
                    92:27:8a:fd:02:6c:e0:ac:68:8b:70:2d:25:bd:9e:
                    61:7f:95:db:af:90:30:6b:1b:21:d1:f1:57:7a:08:
                    bb:97:4f:37:89:f5:f3:c8:59:0e:12:99:85:c6:28:
                    00:e8:33:ee:f9:d5:e8:c6:30:7c:5b:ea:a8:4c:69:
                    3e:6e:cc:a5:47:2c:db:22:40:34:40:73:63:36:dd:
                    5e:cc:47:24:b5:67:31:4b:aa:d6:f8:ab:9c:e1:fd:
                    64:17:ab:7e:34:fa:b3:81:c5:7c:e9:7f:d5:00:d8:
                    d1:46:82:a5:2b:e6:b1:07:3a:ef:77:fc:a2:84:45:
                    75:58:35:03:3d:5a:8a:28:ab:cd:cb:9e:bf:34:6c:
                    e8:af:03:8a:ca:b1:3e:89:29:08:ee:14:95:e4:95:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:25:96:53:4E:BA:08:C2:CE:55:2C:9B:91:D0:96:3D:63:7A:36:40
            X509v3 Authority Key Identifier:
                keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c5:06:0b:b7:e7:e4:b8:ff:84:90:7e:60:cc:ec:2e:74:54:
         d1:79:44:fa:fd:09:d0:30:53:6d:71:f8:33:b2:41:58:30:26:
         36:f0:42:28:b8:a4:15:08:c6:bc:29:85:2f:7c:87:b6:1e:cd:
         08:68:f0:c5:7f:95:1e:5a:67:a3:a3:d3:df:34:4c:ff:aa:f3:
         a8:57:3d:87:4a:03:aa:be:77:60:cb:2a:a0:01:bf:49:c3:6a:
         8a:84:1b:93:26:d8:23:17:bc:83:dc:02:5a:5b:06:4d:23:9d:
         58:c9:58:fe:b8:86:56:01:0b:a1:69:eb:e8:b4:35:51:19:54:
         69:a0:fb:fb:2d:19:e8:fa:16:0d:ba:36:bb:bc:6b:c8:ea:5a:
         bd:dc:74:05:a5:40:a5:44:09:66:ab:d5:a3:e4:8f:c3:11:c7:
         86:92:bf:7f:ed:cc:8e:f7:9c:bb:04:d1:77:0d:58:9c:98:bb:
         76:e8:ca:ca:58:bf:d5:f9:7c:36:ac:c0:f6:d7:1e:17:96:09:
         f8:c5:28:a0:68:33:b4:e9:1d:06:9e:e8:d6:63:11:8e:19:3a:
         0c:0f:94:cc:37:03:44:c7:cf:5f:65:a8:27:da:ac:b9:b6:9d:
         0b:ef:a4:6c:2b:9e:0e:8a:c0:a1:09:93:5a:f4:88:5e:a0:51:
         09:36:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:07:08 2025 by rpki-client