Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
File:                     6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft (raw, json)
Hash identifier:          rhbWb4jTKSU7SmUf1JCc57QjwMkkggl1UpHMQvulwTM=
Subject key identifier:   EA:CF:A9:F0:9C:A4:5A:47:48:42:3E:97:C7:F9:1A:5E:67:56:B7:24
Authority key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
Certificate issuer:       /CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
Certificate serial:       0AA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
Manifest number:          0A9A
Signing time:             Fri 30 May 2025 19:45:13 +0000
Manifest this update:     Fri 30 May 2025 19:45:12 +0000
Manifest next update:     Fri 06 Jun 2025 19:45:12 +0000
Files and hashes:         1: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl (hash: xw3EWR6IjNdbqO0BLWsL4eou4gyubyevKP5827zo36A=)
                          2: BA767AE8584A11EA91887312C4F9AE02.roa (hash: QzbZM8VI+qrpVgcRdiCcn83mrJ9UmLN8pezGTWNqCvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl
                          rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2721 (0xaa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119635, serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
        Validity
            Not Before: May 30 19:45:12 2025 GMT
            Not After : Jun  6 19:45:12 2025 GMT
        Subject: CN=683a0ac8-8ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:61:f5:fb:98:79:ab:ce:4a:4c:c4:01:af:
                    08:a0:17:e7:d7:a3:95:6e:c3:61:31:bf:c3:6e:75:
                    9d:f0:b5:49:08:0a:34:39:bb:f8:6b:46:10:2a:fd:
                    16:3b:e8:cd:a3:9a:70:29:11:20:5c:be:39:cd:4f:
                    66:39:b2:2f:7d:f6:9a:3a:db:42:87:83:e9:98:5a:
                    9d:dc:6e:68:85:b7:30:97:53:b9:d2:c5:d5:ef:e2:
                    91:b5:dc:15:7c:5c:6e:4a:e2:f4:18:c6:cd:2a:c7:
                    26:d0:be:a8:da:6e:d8:03:63:51:16:e1:77:29:be:
                    0c:f9:64:1d:29:08:b9:89:f0:38:c4:f4:d2:bf:fb:
                    df:bd:c0:48:4b:e0:7a:f7:d3:30:24:1d:4b:26:fe:
                    46:76:10:2f:e0:9b:c2:ec:39:9a:3f:7b:48:5f:6a:
                    2c:27:81:52:2c:00:d8:e5:93:b3:b4:bf:95:18:fa:
                    e6:0a:f6:ea:86:4a:ce:da:09:1a:82:6d:02:41:83:
                    7a:65:21:29:fe:84:9a:31:a5:1b:a9:bb:4d:e4:49:
                    81:c6:d0:c2:bc:e4:19:aa:66:0d:81:f9:ac:df:8f:
                    d2:03:c6:5b:71:f2:a3:ac:71:9b:ee:55:79:79:10:
                    5f:e4:0c:84:0a:64:72:46:42:f3:b4:aa:90:7e:3a:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CF:A9:F0:9C:A4:5A:47:48:42:3E:97:C7:F9:1A:5E:67:56:B7:24
            X509v3 Authority Key Identifier:
                keyid:EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:27:48:d2:b3:77:2f:53:ff:0b:ad:25:98:f1:b6:8d:76:
         f7:f8:1b:ed:a8:f8:39:63:20:dc:44:bb:7e:0f:e2:72:f8:0d:
         08:5f:1a:99:e9:16:f9:3b:f0:57:31:77:7b:6c:12:dd:43:f5:
         ee:a6:75:78:1f:ab:ba:d5:9f:ee:8d:2a:de:2e:da:cc:54:6c:
         8f:12:66:d4:cf:73:9e:0d:89:1e:ee:9f:05:68:30:a3:22:a5:
         99:2b:3a:09:6b:04:ad:33:e8:9f:5a:88:f6:05:a1:ed:04:fd:
         a4:76:b3:75:74:fe:92:3f:6b:37:7d:3f:e1:f7:27:58:c6:0e:
         b4:6a:34:94:8d:3f:86:22:62:df:64:f4:6e:9b:26:ab:af:f7:
         a7:16:e7:86:bf:cd:69:6e:15:1d:f3:75:63:87:e3:6f:62:19:
         2a:7e:51:a3:cd:04:1f:a2:3f:3a:e6:48:62:cc:c0:19:88:43:
         dd:10:74:72:08:bd:f4:cf:8d:cd:cd:53:58:f1:fc:17:b8:02:
         27:01:39:82:3b:fa:de:ca:66:8a:e8:85:d8:c0:96:70:71:17:
         19:23:05:77:36:d7:26:be:9c:03:b5:ee:fc:18:ed:b6:39:b6:
         46:2a:28:35:ab:a3:e4:8e:da:16:13:e7:b2:6b:bd:91:66:6e:
         f1:bb:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:49:37 2025 by rpki-client