Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
File:                     C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft (raw, json)
Hash identifier:          kG08sxZqdntzpLBksqMZgHom6cRXnfYNH6mP7ObRWfU=
Subject key identifier:   1E:54:A4:4F:22:9B:AF:47:88:45:C7:B1:1A:C2:F4:80:42:52:2F:77
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Certificate issuer:       /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
Manifest number:          5B
Signing time:             Mon 07 Apr 2025 06:02:34 +0000
Manifest this update:     Mon 07 Apr 2025 06:02:34 +0000
Manifest next update:     Mon 14 Apr 2025 06:02:34 +0000
Files and hashes:         1: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl (hash: O+cBgb1MLgmQmf5cWncuvEg/livYlhy8gnqbKT9S+W4=)
                          2: 10C5553891FB11EFB901C22CC4F9AE02.roa (hash: v8TD9OsqqUAKPcuAZeMff5sjhWiIKpMzGXGCpndoG2I=)
                          3: FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (hash: INAvAHudzPZT0eOcOkMlBnMLdZykePd0YOhNH7KxTi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944
        Validity
            Not Before: Apr  7 06:02:34 2025 GMT
            Not After : Apr 14 06:02:34 2025 GMT
        Subject: CN=67f36a7a-0485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:4d:dc:b8:75:01:85:58:37:08:cd:fd:59:
                    b1:68:72:7b:8f:f4:52:49:fa:c4:d4:16:89:b3:84:
                    91:a0:d9:cc:20:6c:d1:a7:36:9d:fb:e2:07:38:3c:
                    82:d6:2a:d2:c1:34:bf:f7:ae:36:62:94:5d:d1:7a:
                    a9:2e:83:8a:ad:9e:fb:02:e5:69:0c:4b:7e:a9:b1:
                    42:df:db:19:79:04:61:ed:34:d1:d0:c1:4e:2b:68:
                    5a:bc:48:48:40:95:84:b1:e0:5c:dd:53:5b:e4:9e:
                    a1:cd:93:e7:90:42:54:b2:96:de:b3:df:a1:83:70:
                    8c:cc:3b:ac:f2:d3:c7:8c:ec:ee:89:46:ae:a3:52:
                    66:4b:7a:10:c4:a3:3a:c6:92:9c:13:7b:93:89:2d:
                    b6:9c:49:dc:82:78:38:52:f7:ab:6d:63:c5:f6:a5:
                    53:b9:8e:6f:58:cf:87:81:ad:c5:f5:74:f0:6e:7f:
                    e9:d8:e3:6d:a5:89:46:ad:0d:34:b4:95:6c:49:f0:
                    8e:5e:3f:e0:38:43:85:16:1d:47:35:5e:34:61:f3:
                    44:9a:be:5f:dd:02:a4:ca:2b:ec:b8:33:28:75:b1:
                    ff:f8:75:0f:ce:80:1e:46:62:0a:bf:23:c7:d8:b2:
                    a3:f8:7d:26:fd:c1:d3:d9:f8:ad:e2:27:1a:47:d2:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:54:A4:4F:22:9B:AF:47:88:45:C7:B1:1A:C2:F4:80:42:52:2F:77
            X509v3 Authority Key Identifier:
                keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:56:45:3c:7d:de:2a:d3:5a:4c:73:b1:71:67:c6:87:82:17:
         f1:38:bc:39:c5:76:2a:22:f3:30:17:c0:ba:47:7e:6f:95:bf:
         d2:e1:91:b5:a5:79:f9:e7:55:79:c3:01:31:63:d1:2f:51:af:
         5b:1c:f0:d5:2c:e5:16:d9:82:28:72:56:ee:99:fa:51:49:c9:
         d0:be:18:d2:93:52:50:ce:8e:ca:f9:68:8f:5f:4a:7e:9c:52:
         87:53:7f:40:46:2a:70:ef:31:3b:3d:c2:88:ea:ec:0c:f3:8c:
         27:bd:38:40:24:6b:73:2d:33:e8:ec:3b:c8:b6:33:57:d3:ce:
         7d:af:8b:7c:c4:a4:45:30:c7:86:2d:8c:f3:58:f3:8e:60:f9:
         fe:fe:f9:13:9d:24:02:86:64:69:32:a3:bd:45:8f:2d:23:fa:
         ed:ed:1f:99:da:80:1a:56:01:e8:a0:e6:a9:c9:28:9c:36:66:
         c5:9c:95:42:5c:1c:2d:91:db:bb:8f:ad:66:b7:49:1b:15:b1:
         3b:d4:4f:5f:cb:94:b0:3c:91:09:40:77:ea:32:9f:41:26:40:
         51:89:74:52:f5:17:56:f5:51:24:26:c8:9b:5d:fc:5b:a2:a1:
         83:2b:0c:c8:f7:ea:61:0e:37:48:9d:5e:8a:cf:b8:8f:c4:61:
         9c:c5:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:04:00 2025 by rpki-client