Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File:                     B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier:          hMvItUAkYUgEHhyUxkIMd3R9ClaSeQF3fJGFw4thMQ8=
Subject key identifier:   78:BB:5D:B4:51:CC:F3:BC:4D:0A:26:59:96:50:E4:68:D4:6A:35:7E
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer:       /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial:       09B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number:          09A3
Signing time:             Thu 12 Jun 2025 19:51:55 +0000
Manifest this update:     Thu 12 Jun 2025 19:51:54 +0000
Manifest next update:     Thu 19 Jun 2025 19:51:54 +0000
Files and hashes:         1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: zUw+gVCa/jFYZZsZYu5/gfqxf4/Sg/LptB4BYkcxeTE=)
                          2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
                          rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 19:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2481 (0x9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
        Validity
            Not Before: Jun 12 19:51:54 2025 GMT
            Not After : Jun 19 19:51:54 2025 GMT
        Subject: CN=684b2fda-775b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:aa:42:c9:95:f4:9b:fa:35:aa:86:4d:a8:
                    26:ae:92:6e:40:42:63:d5:ec:28:86:69:19:93:1d:
                    62:43:87:e7:02:a9:f7:b6:f4:ef:03:d7:b5:38:2b:
                    41:86:21:c3:0c:2f:89:45:19:f9:78:b8:00:9f:ed:
                    e2:a2:51:73:dd:b6:41:51:ab:89:98:4b:fb:e9:e3:
                    ec:cd:44:56:94:45:43:83:04:48:ec:c2:78:93:7a:
                    c7:d2:61:90:d1:81:17:9e:d6:a7:98:a4:f4:7a:41:
                    de:ec:82:ee:e9:e3:66:9b:aa:ac:27:08:56:a8:b3:
                    5a:e0:8f:08:1b:1b:7e:3e:47:f1:27:48:2f:62:4a:
                    23:23:30:26:e9:62:df:ab:09:43:f5:1b:03:10:dd:
                    2a:d6:3d:4f:9c:ec:3a:3b:9d:67:4e:32:a0:f4:99:
                    6e:06:12:c3:eb:34:c5:63:48:d9:74:27:90:97:57:
                    16:f3:4b:15:23:1e:85:1a:55:68:cc:fc:e8:eb:d5:
                    03:d7:58:f8:ca:92:dc:e0:55:31:27:0a:27:44:2b:
                    e2:99:35:a1:54:e5:f3:cb:41:9d:b5:e2:9b:52:b4:
                    86:bf:33:06:4d:a7:d6:ac:96:35:cb:42:08:19:1a:
                    c9:d3:2d:06:fc:fe:0c:b6:93:2b:8c:e4:cc:d3:dd:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:5D:B4:51:CC:F3:BC:4D:0A:26:59:96:50:E4:68:D4:6A:35:7E
            X509v3 Authority Key Identifier:
                keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:00:57:f9:82:d8:b8:80:ab:ac:57:3a:b6:93:c8:93:0e:eb:
         ab:71:77:93:5b:d6:45:ee:42:1f:76:38:d9:26:61:b1:27:ef:
         de:74:cc:30:45:dd:ce:d9:b6:06:94:77:70:8a:57:b5:16:a9:
         49:d2:86:2b:e5:41:c7:93:d5:0d:a0:92:b7:71:e4:a6:8e:df:
         a1:ec:52:da:82:1c:e3:e8:9c:2d:2a:c3:b4:cc:7b:cc:94:05:
         63:93:a1:52:48:39:5f:b6:20:cc:09:e9:f0:54:6c:91:e7:3f:
         86:2c:6e:04:f8:35:0a:09:bc:e8:2a:7c:6f:39:43:0f:92:5b:
         e6:81:f7:fe:95:f1:f7:ce:9b:31:2c:14:16:51:57:9f:8c:8c:
         5b:bc:54:10:8b:52:37:6d:ea:c4:68:4b:62:31:6d:5f:66:db:
         5d:ef:f4:bd:cc:12:e4:9a:3d:4e:4a:53:e4:00:55:24:df:67:
         91:93:fb:8b:db:93:e7:2f:bf:8b:2c:af:d6:5d:b5:05:f2:af:
         fd:a6:7e:cc:81:f2:51:c7:12:fb:8b:71:42:e9:91:f8:46:1c:
         e6:0e:24:c7:8b:43:d9:7f:c8:09:9f:cb:4a:bb:7f:db:87:f1:
         b4:ea:1a:dc:2b:15:ff:dc:4e:a2:d1:04:9f:fc:ca:27:d3:38:
         59:42:42:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0
OTU0MzdBNUYwHhcNMjUwNjEyMTk1MTU0WhcNMjUwNjE5MTk1MTU0WjAYMRYwFAYD
VQQDEw02ODRiMmZkYS03NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxeqQsmV9Jv6NaqGTagmrpJuQEJj1ewohmkZkx1iQ4fnAqn3tvTvA9e1OCtB
hiHDDC+JRRn5eLgAn+3iolFz3bZBUauJmEv76ePszURWlEVDgwRI7MJ4k3rH0mGQ
0YEXntanmKT0ekHe7ILu6eNmm6qsJwhWqLNa4I8IGxt+PkfxJ0gvYkojIzAm6WLf
qwlD9RsDEN0q1j1PnOw6O51nTjKg9JluBhLD6zTFY0jZdCeQl1cW80sVIx6FGlVo
zPzo69UD11j4ypLc4FUxJwonRCvimTWhVOXzy0GdteKbUrSGvzMGTafWrJY1y0II
GRrJ0y0G/P4MtpMrjOTM093YtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHi7XbRR
zPO8TQomWZZQ5GjUajV+MB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD
NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o
XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmAFf5gti4gKusVzq2k8iTDuurcXeTW9ZF7kIfdjjZJmGxJ+/edMww
Rd3O2bYGlHdwile1FqlJ0oYr5UHHk9UNoJK3ceSmjt+h7FLaghzj6JwtKsO0zHvM
lAVjk6FSSDlftiDMCenwVGyR5z+GLG4E+DUKCbzoKnxvOUMPklvmgff+lfH3zpsx
LBQWUVefjIxbvFQQi1I3berEaEtiMW1fZttd7/S9zBLkmj1OSlPkAFUk32eRk/uL
25PnL7+LLK/WXbUF8q/9pn7MgfJRxxL7i3FC6ZH4RhzmDiTHi0PZf8gJn8tKu3/b
h/G06hrcKxX/3E6i0QSf/Mon0zhZQkIF
-----END CERTIFICATE-----
Generated at Fri Jun 13 16:12:54 2025 by rpki-client