Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
File:                     6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json)
Hash identifier:          0FNLSXsy2Ekc2vFB3TC8tj7JyaWrEKK3oQiq9ym/dm0=
Subject key identifier:   2C:DB:A9:49:13:84:6B:87:A8:4D:81:8A:5D:C5:6E:48:56:7E:3E:B4
Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31
Certificate issuer:       /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
Manifest number:          F6
Signing time:             Sun 07 Sep 2025 05:39:46 +0000
Manifest this update:     Sun 07 Sep 2025 05:39:46 +0000
Manifest next update:     Sun 14 Sep 2025 05:39:46 +0000
Files and hashes:         1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: dUYrsr+NxO5hb4LhAsPCuJmZhWnBKHYDE+dx7I8tKjA=)
                          2: C562775017FD11EF9A320864C4F9AE02.roa (hash: mT/xhxJVAPolN6BiWxF1pYh0qrq0TTClAYLDrh0UW5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl
                          rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 05:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
        Validity
            Not Before: Sep  7 05:39:46 2025 GMT
            Not After : Sep 14 05:39:46 2025 GMT
        Subject: CN=68bd1aa2-f629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:36:5a:b8:0f:f6:7f:1e:9f:9d:11:44:0f:
                    78:37:b1:69:ba:7f:34:a3:aa:fa:38:69:1a:9f:30:
                    06:3d:43:97:85:35:1b:2f:6d:34:a6:8c:cf:2f:2d:
                    7f:db:67:38:9e:ef:da:96:c5:b8:79:83:c1:c8:5e:
                    cb:49:f8:13:c4:30:ce:ae:0e:17:33:2c:22:b4:2d:
                    10:4d:ac:c0:1b:7a:5b:b8:88:13:4d:19:d7:ff:f7:
                    1a:36:10:31:54:94:2a:0a:52:e8:51:1e:cb:2d:99:
                    91:92:9d:57:65:4d:51:4b:80:75:75:f1:b2:d3:d1:
                    2e:5e:f5:65:4d:b0:1e:4d:e7:0c:2d:91:23:fa:99:
                    bf:98:aa:da:ca:76:35:22:0d:51:92:c3:43:d5:d3:
                    0a:88:55:ad:52:06:ae:a9:2b:3c:63:8c:56:c3:c3:
                    ff:03:99:11:22:b1:65:55:d0:f8:a5:ab:39:c0:86:
                    80:c5:5b:c9:89:ab:a7:60:f1:82:29:2b:9d:7a:24:
                    19:de:4c:4d:15:9d:1e:db:ac:3c:4c:72:f9:e2:ae:
                    7d:c3:00:c4:ae:e9:2e:c3:d0:86:92:30:c8:3a:7a:
                    29:4e:34:7f:d3:e1:07:28:09:d6:63:82:73:75:80:
                    96:cf:98:c6:7d:d0:e0:6a:54:4f:39:ce:46:97:11:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DB:A9:49:13:84:6B:87:A8:4D:81:8A:5D:C5:6E:48:56:7E:3E:B4
            X509v3 Authority Key Identifier:
                keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:18:a2:88:b8:dc:94:22:ac:04:9d:8a:5a:81:e4:18:f9:
         06:1c:41:25:0e:9c:ef:63:65:ae:44:9b:78:f6:cd:f5:1a:3e:
         39:c9:2b:c1:04:0d:8c:46:f9:06:b4:76:70:03:67:c3:0f:bd:
         c9:63:68:6d:5e:90:9d:6c:ea:fb:bc:54:4c:46:21:41:2c:0b:
         fa:9f:ce:dd:88:4e:87:18:4e:e0:63:de:f5:a5:b4:e6:ae:cc:
         dc:50:f5:61:47:d9:90:33:44:6e:22:bf:ad:5b:5f:f2:58:df:
         b7:bf:a1:de:2a:10:72:74:13:77:51:f6:82:03:a9:56:88:f6:
         90:a2:cd:1f:61:e0:1d:2d:c2:0d:db:6d:3f:df:e6:41:0c:b5:
         22:58:8e:c6:d4:3b:5d:ea:e0:6f:19:83:75:df:bd:09:45:ff:
         79:6a:c9:97:e4:c6:56:76:3b:bb:4b:5a:39:24:05:e9:51:f3:
         bb:98:ce:c5:39:b1:3a:36:8c:2c:a7:2f:30:88:44:cd:91:5a:
         c6:bf:3f:2c:5f:98:31:57:2e:ba:35:4c:4c:a8:c9:ca:1d:43:
         55:e4:1c:50:e4:ae:f5:d7:29:11:2c:46:aa:ad:59:75:62:b2:
         3d:1a:31:be:76:04:67:61:7f:99:c8:6c:12:7e:74:a1:02:4e:
         0e:8d:f6:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF
ODEwMDExMzEwHhcNMjUwOTA3MDUzOTQ2WhcNMjUwOTE0MDUzOTQ2WjAYMRYwFAYD
VQQDEw02OGJkMWFhMi1mNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuq82WrgP9n8en50RRA94N7Fpun80o6r6OGkanzAGPUOXhTUbL200pozPLy1/
22c4nu/alsW4eYPByF7LSfgTxDDOrg4XMywitC0QTazAG3pbuIgTTRnX//caNhAx
VJQqClLoUR7LLZmRkp1XZU1RS4B1dfGy09EuXvVlTbAeTecMLZEj+pm/mKraynY1
Ig1RksND1dMKiFWtUgauqSs8Y4xWw8P/A5kRIrFlVdD4pas5wIaAxVvJiaunYPGC
KSudeiQZ3kxNFZ0e26w8THL54q59wwDErukuw9CGkjDIOnopTjR/0+EHKAnWY4Jz
dYCWz5jGfdDgalRPOc5GlxFrvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzbqUkT
hGuHqE2Bil3FbkhWfj60MB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3
RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH
MDZob1I5MzdvOUxvRUFFVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsQBiiiLjclCKsBJ2KWoHkGPkGHEElDpzvY2WuRJt49s31Gj45ySvB
BA2MRvkGtHZwA2fDD73JY2htXpCdbOr7vFRMRiFBLAv6n87diE6HGE7gY971pbTm
rszcUPVhR9mQM0RuIr+tW1/yWN+3v6HeKhBydBN3UfaCA6lWiPaQos0fYeAdLcIN
220/3+ZBDLUiWI7G1Dtd6uBvGYN1370JRf95asmX5MZWdju7S1o5JAXpUfO7mM7F
ObE6Nowspy8wiETNkVrGvz8sX5gxVy66NUxMqMnKHUNV5BxQ5K711ykRLEaqrVl1
YrI9GjG+dgRnYX+ZyGwSfnShAk4OjfZD
-----END CERTIFICATE-----
Generated at Mon Sep 8 22:13:18 2025 by rpki-client