Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
File:                     6mETfAkAkG5HSNHgfMVV5qfM4QA.mft (raw, json)
Hash identifier:          616CD3qX6A/llM+CYXOOswPHbReD/sn7hS60qcDmW7c=
Subject key identifier:   0B:09:F2:B3:B3:95:36:E5:EC:48:0F:9E:34:C0:98:DC:BE:5E:DC:37
Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
Certificate issuer:       /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
Manifest number:          06D0
Signing time:             Fri 30 May 2025 23:20:57 +0000
Manifest this update:     Fri 30 May 2025 23:20:56 +0000
Manifest next update:     Fri 06 Jun 2025 23:20:56 +0000
Files and hashes:         1: 6mETfAkAkG5HSNHgfMVV5qfM4QA.crl (hash: mEXrbOX156wP3JHzhvkM+IGQ+j8s5bpFi6+88qbJd0U=)
                          2: 1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa (hash: q7wHaZ7WhIdB/9HOXBV7j7aexx2zP2ZakkHbOXZVsxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl
                          rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
        Validity
            Not Before: May 30 23:20:56 2025 GMT
            Not After : Jun  6 23:20:56 2025 GMT
        Subject: CN=683a3d59-aef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:d9:2f:b9:66:5b:2f:c7:29:f9:e9:44:89:
                    8a:75:f1:fd:40:1d:1c:9b:07:ed:1b:80:82:b4:39:
                    e7:4a:25:b8:5c:d8:d5:5e:ea:89:9d:51:b2:94:7e:
                    6c:22:40:49:57:79:4c:c6:63:f3:d9:c6:54:3d:08:
                    5a:45:a6:b9:52:64:b4:2c:6d:10:99:66:a1:e6:8d:
                    1b:69:04:db:79:bc:f0:5c:26:2f:78:f9:8f:1c:71:
                    c6:0e:3e:85:42:50:b3:e1:86:11:b5:8f:af:93:75:
                    78:12:73:e5:e0:4e:c0:66:92:1f:ab:69:12:d1:70:
                    75:c1:74:78:0b:ce:e5:69:3d:92:04:97:23:3f:58:
                    17:6b:eb:0c:97:d3:31:7b:10:2b:28:62:62:b9:99:
                    82:d3:54:cf:2d:04:e7:e6:ec:09:ff:b5:f2:af:f3:
                    87:c1:9f:a8:68:77:c2:37:f7:98:3f:b6:37:7d:7f:
                    e1:f1:34:f2:23:98:2e:86:27:91:c2:f7:7c:b5:82:
                    df:0a:cd:75:c5:19:6c:4c:05:0a:13:51:1d:56:89:
                    b6:e4:85:1f:77:24:d8:af:94:f8:42:ba:0c:e8:c2:
                    ab:da:cb:70:a3:18:b1:e1:6d:75:e8:47:47:ce:1c:
                    fc:ad:ed:ff:ef:7f:30:bd:4d:fb:d0:73:6a:a5:e2:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:09:F2:B3:B3:95:36:E5:EC:48:0F:9E:34:C0:98:DC:BE:5E:DC:37
            X509v3 Authority Key Identifier:
                keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:47:99:2c:33:02:35:36:00:bb:3c:02:c2:71:27:53:9f:15:
         5c:8e:ad:67:7e:7a:9e:c4:06:4e:10:64:94:7e:0d:e5:11:ea:
         2c:6c:77:49:50:0a:67:db:eb:a3:6c:5e:2a:44:56:81:75:91:
         b0:d6:49:ce:c1:43:ab:b1:16:e1:7d:ff:fe:4c:2b:ab:2b:8b:
         4f:4b:99:74:53:95:59:38:7b:6c:7c:f2:f9:a2:5d:82:e2:e1:
         13:b1:67:e1:c8:73:eb:94:21:31:fa:7e:fe:fa:26:7a:ed:7e:
         6c:5a:bb:ab:06:af:11:b5:e3:2f:ae:7f:87:5f:8f:9d:51:33:
         18:18:4b:85:2e:d5:a5:91:c7:25:a0:9e:53:3f:5c:5c:24:a3:
         3d:ab:14:14:fb:c9:01:0c:b4:4d:a9:4c:0d:66:ea:32:bd:ef:
         1c:79:50:56:5a:8d:d5:46:22:57:f4:ec:25:c2:d7:45:e6:36:
         13:ce:d6:fd:97:a6:3d:9f:6c:a6:d9:75:35:1d:83:8a:d3:50:
         4d:04:92:a6:d8:02:9f:8b:0a:f6:b1:0e:e0:a1:42:9d:ad:58:
         34:55:3e:37:5b:85:af:67:b2:10:fa:1d:14:cb:55:e6:42:10:
         1f:04:02:5a:f5:1a:36:bd:78:fc:2a:e8:cc:04:93:de:91:23:
         5a:7e:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:40:40 2025 by rpki-client