Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File:                     6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier:          vpg4tzKIKGi4E8B122eHV3PfhqCR9bUx4X+cZkoMxNI=
Subject key identifier:   2D:A4:91:FD:EC:54:B9:C4:44:C3:E0:65:67:AA:D7:87:EB:EE:DB:33
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer:       /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number:          0123
Signing time:             Tue 29 Jul 2025 05:14:31 +0000
Manifest this update:     Tue 29 Jul 2025 05:14:30 +0000
Manifest next update:     Tue 05 Aug 2025 05:14:30 +0000
Files and hashes:         1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: nVgEfn1AAOZ/UZjRUrIgo5NOdRHtWWYeDwr3IuPpJVk=)
                          2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=)
                          3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
                          rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 Aug 2025 05:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
        Validity
            Not Before: Jul 29 05:14:30 2025 GMT
            Not After : Aug  5 05:14:30 2025 GMT
        Subject: CN=688858b6-3069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:ee:56:c3:80:87:ed:cd:51:c2:d9:0b:db:
                    86:20:e0:e1:c6:bf:40:ae:df:7b:1b:7e:92:1b:fc:
                    2a:ae:c2:0b:53:9f:96:15:68:3c:89:9e:7a:90:3e:
                    66:06:d4:66:6c:54:f1:de:a7:28:59:f3:5d:16:3e:
                    ac:bd:84:19:6f:9b:41:90:68:7b:c5:4c:12:d9:17:
                    14:86:fb:12:ac:88:94:e9:32:fa:1a:15:b6:8e:c7:
                    5f:36:52:d1:ce:56:95:7b:7f:ee:ac:2e:bc:33:f2:
                    7a:5f:97:ff:99:62:e4:32:9c:99:07:e1:c6:49:ed:
                    b3:df:81:27:d1:d1:d4:d2:6f:0e:55:5a:9b:0e:96:
                    39:2b:49:79:dd:e5:48:93:d8:e5:c5:dd:63:b7:eb:
                    07:21:bc:5f:8a:73:30:2e:2b:da:a6:04:64:86:16:
                    05:cb:69:27:06:e3:d8:24:29:12:af:be:57:28:83:
                    87:ef:7a:71:7e:e8:e8:28:d7:50:b1:97:e8:56:5e:
                    69:33:b6:27:81:94:b5:e2:c8:85:2d:62:17:84:2d:
                    ec:3c:4e:b1:37:3e:94:c9:46:97:76:fa:dd:ab:00:
                    d3:56:7b:5d:b0:ce:84:28:f6:10:39:a7:bc:db:3e:
                    8d:27:76:b4:45:8f:f8:23:0d:57:62:3f:44:d6:a1:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A4:91:FD:EC:54:B9:C4:44:C3:E0:65:67:AA:D7:87:EB:EE:DB:33
            X509v3 Authority Key Identifier:
                keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:cd:6d:5b:87:3a:a4:0f:38:a8:9e:e6:7d:4d:76:9d:3c:9c:
         58:23:c5:fc:ba:ff:42:83:b7:1d:2f:97:15:f4:ae:66:7b:29:
         8c:ac:3c:f8:25:73:93:2d:72:e6:0e:32:9c:24:c8:3e:56:a9:
         0d:83:6b:d0:f7:bf:c5:85:6b:d7:fe:3c:16:08:27:0e:a6:c5:
         1b:63:a2:61:dd:83:c8:b9:ba:a0:14:4d:44:17:c6:60:77:95:
         2c:a3:f1:6c:cd:1f:a0:71:6a:e9:33:8b:18:7b:38:99:b7:12:
         ab:30:2a:dc:b0:69:a5:09:a9:7c:c0:ce:92:c8:7b:0a:88:82:
         e3:fe:e0:d2:b2:62:f5:75:95:8a:10:d0:31:72:4c:2b:8d:92:
         5e:dc:8c:e0:9d:41:9d:ce:de:c0:6c:75:36:dc:51:cc:40:0a:
         e0:87:cd:6c:9a:be:52:62:3b:2b:df:30:0b:a1:76:c8:af:73:
         cb:2f:21:ea:ee:ef:42:6f:dc:77:c5:46:79:37:b1:45:b3:13:
         b5:c3:1e:cc:02:e0:24:41:98:93:a9:4e:17:ec:c9:2d:05:a1:
         ea:00:bd:97:25:a0:f4:e8:da:50:b2:88:74:ce:f7:43:d3:9d:
         96:02:cb:18:28:5a:6b:7c:6e:02:1e:7b:24:bf:7c:f0:26:8b:
         c6:44:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:52:32 2025 by rpki-client