Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
File:                     --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json)
Hash identifier:          6c7nw/E2qw229QfrRg/wQcIfQ8ubcJv/lDhh0sXp07Y=
Subject key identifier:   ED:5C:7D:70:2D:C6:12:EE:3B:1C:65:9E:59:1B:06:8F:37:90:57:8E
Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
Certificate issuer:       /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
Manifest number:          A2
Signing time:             Sat 19 Jul 2025 06:28:25 +0000
Manifest this update:     Sat 19 Jul 2025 06:28:25 +0000
Manifest next update:     Sat 26 Jul 2025 06:28:25 +0000
Files and hashes:         1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: b75lPLLpntfgRMD+i6cDoKW4Bt9wDGDNyLUMu30CmhQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
                          rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
        Validity
            Not Before: Jul 19 06:28:25 2025 GMT
            Not After : Jul 26 06:28:25 2025 GMT
        Subject: CN=687b3b09-1772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:bf:e5:3b:d2:4a:30:16:91:72:d2:8a:8d:
                    5f:93:e4:9b:ff:4f:28:1b:35:10:20:81:c4:c4:fe:
                    70:42:db:cc:98:4f:ec:d1:0a:d2:d8:a6:2d:24:5b:
                    ff:5b:bb:a4:4c:22:f8:b5:92:c2:c4:9d:18:c8:ff:
                    1f:e6:b4:a5:90:60:1a:2d:c2:65:47:d7:36:e1:45:
                    ab:45:70:03:95:f5:48:a9:26:6c:1a:ab:cd:e5:61:
                    6e:fd:93:df:fe:97:9d:aa:01:7f:c2:96:21:b7:8d:
                    88:89:2f:13:26:dd:c9:e8:bb:d9:52:e6:99:71:20:
                    69:ea:2e:29:23:1e:84:11:60:27:31:c2:55:59:e2:
                    cf:83:39:e9:f2:30:ac:c2:45:08:3a:a6:9c:d5:2d:
                    cb:de:0c:9f:4c:98:7b:ca:a1:9a:8f:6d:eb:2e:44:
                    bc:71:d7:36:e1:84:38:5f:72:a4:d3:31:85:0f:11:
                    74:22:34:c3:68:7b:5a:43:9c:5c:5d:de:c2:89:0f:
                    fe:de:45:f1:e9:96:b1:1d:15:e2:45:59:ea:84:3d:
                    81:b4:a8:05:13:12:40:1d:91:96:e0:20:32:4c:64:
                    cc:fe:e0:9e:5e:cb:85:04:ad:bb:c1:3a:1f:c3:cd:
                    20:3c:d7:cd:d5:aa:cc:1f:61:e0:bc:e5:5b:b3:db:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5C:7D:70:2D:C6:12:EE:3B:1C:65:9E:59:1B:06:8F:37:90:57:8E
            X509v3 Authority Key Identifier:
                keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d4:73:92:f5:f3:28:29:52:5c:2e:eb:ca:9c:86:40:f3:6c:
         1e:96:8e:95:67:bb:04:80:8d:c7:42:e6:b3:f4:1d:a1:57:7d:
         dd:5b:c8:fb:01:06:05:15:5f:4c:de:2b:db:b1:05:95:94:e5:
         9b:b7:45:a6:14:b2:e0:68:e0:0c:d2:b3:4e:b4:d5:8c:9a:a5:
         e0:cf:41:d6:18:aa:e0:6b:21:05:4a:41:21:91:4c:0e:07:9c:
         85:7f:f5:ef:7b:4b:6c:89:11:41:d9:d9:1c:69:ad:95:51:60:
         31:87:49:25:45:2f:cb:9a:60:c4:2b:56:67:90:2c:d4:e7:58:
         ad:a8:13:37:ef:eb:94:22:e8:ca:b1:6d:00:ea:ad:35:9a:78:
         d4:a2:4b:de:0b:8a:aa:5b:1a:5b:59:70:f8:d4:ad:b2:8e:2e:
         c6:9d:5a:fe:88:a3:83:6d:f8:6d:2e:7e:ba:39:3b:42:8c:fd:
         e3:34:86:95:d0:7b:42:76:e6:91:6e:97:1f:58:e1:7a:52:cf:
         3e:1e:c9:a0:d7:4e:84:18:69:a8:91:95:82:5e:4b:0b:b6:2c:
         e7:6a:b9:ae:11:8e:57:73:ae:d5:cd:a4:7f:6a:12:b3:04:f9:
         b6:48:ec:98:33:bc:7f:a6:51:46:19:ad:69:5a:d4:79:8b:e3:
         b6:e8:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:10:06 2025 by rpki-client