Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
File:                     6tZGNV11k2y5Pta623kKh_4VN0o.mft (raw, json)
Hash identifier:          iPZfAxC3E1MXHgcmF+abweOiucS0XEXl0WzuRcr74+s=
Subject key identifier:   5E:67:21:66:55:E0:7E:34:8C:D2:EE:90:5C:07:A5:1F:66:AD:6E:DD
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Certificate issuer:       /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
Manifest number:          0136
Signing time:             Sun 07 Sep 2025 04:58:57 +0000
Manifest this update:     Sun 07 Sep 2025 04:58:57 +0000
Manifest next update:     Sun 14 Sep 2025 04:58:57 +0000
Files and hashes:         1: 6tZGNV11k2y5Pta623kKh_4VN0o.crl (hash: pWBxLMF3/Z3UfmrW8Y9dvR0nnKm129dVCBkyLvcpK58=)
                          2: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (hash: IYbwvT3qmzwsASPi9gEwkFkjfys+ZxVpssJBjkvN+uw=)
                          3: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (hash: lkljamiAGuWTdMNk035Kt/plV9Fx0R6Faku03HPbg7U=)
                          4: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (hash: tLt6JDfDub8DNFZW2G3EMTsxDiFDr62JlgmUF1Jhoi8=)
                          5: 836FCA52168411EFB6BDB96BC4F9AE02.roa (hash: TAOed49FFqoRHgKFy+Jz2KuJalrMPjm52i7KeouMhd0=)
                          6: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (hash: wVAgrqCE/Wj+Oq7c+aZ97qsJSVe62sCRsRf4hdQIDT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
        Validity
            Not Before: Sep  7 04:58:57 2025 GMT
            Not After : Sep 14 04:58:57 2025 GMT
        Subject: CN=68bd1111-7fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:86:7e:40:57:b3:6e:bc:20:d6:a7:83:ce:
                    7d:62:ad:18:1e:03:a4:44:41:3f:8a:8d:80:e4:d0:
                    91:ef:af:37:69:45:80:1c:ac:88:da:fd:0f:1d:88:
                    ab:8f:bd:d0:52:c6:71:4c:1f:42:b4:89:5a:2d:1d:
                    93:22:25:84:5d:36:e9:2d:3d:a5:24:ac:4d:73:15:
                    18:8a:ed:71:de:cd:75:d1:aa:ad:30:7f:7d:96:c7:
                    e9:de:b1:5a:8f:d6:62:41:19:e7:06:a0:ce:0a:af:
                    81:36:7d:3e:7c:46:be:59:25:27:32:d5:6f:4a:e4:
                    9c:bf:df:3e:5e:a6:df:71:f1:8a:77:35:87:88:2a:
                    24:57:00:c9:da:c3:83:a4:46:93:1f:e0:d2:1e:1c:
                    b7:00:de:8d:7d:e3:12:6f:a8:8e:d7:63:e5:cb:47:
                    63:36:b9:31:55:ba:9f:d2:d1:53:b4:5c:f1:39:da:
                    95:64:7c:06:0f:46:ac:d4:df:fc:53:f7:c0:50:a4:
                    8b:be:f5:91:9d:70:a1:35:36:17:21:f6:3a:16:f9:
                    1a:c7:42:70:61:61:7a:09:4c:84:27:20:b2:68:cc:
                    e7:41:02:da:7b:a7:df:e6:65:0c:c9:a1:90:33:01:
                    1d:a4:cb:f1:77:b1:c5:d9:c3:96:ab:ec:93:8a:04:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:67:21:66:55:E0:7E:34:8C:D2:EE:90:5C:07:A5:1F:66:AD:6E:DD
            X509v3 Authority Key Identifier:
                keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:08:52:3c:d3:bc:49:76:27:be:cc:a9:b6:91:2a:32:f5:cf:
         ad:50:2d:e5:00:11:90:37:55:82:89:95:90:ea:c3:3f:83:ac:
         13:1c:dc:ab:eb:e5:86:47:95:fb:2f:dd:f3:a4:b7:5c:1b:6f:
         37:00:87:b8:f1:b2:5e:4b:20:dc:4b:c6:ef:a6:4b:43:61:9e:
         03:f7:af:52:79:f8:20:43:e9:02:95:46:41:8f:f8:97:7a:58:
         a5:30:01:96:32:84:0c:77:6b:52:b2:36:5e:ac:05:e7:1a:df:
         e2:e5:0a:a1:ad:a8:3b:90:0c:27:18:43:9f:f2:c9:ca:eb:b9:
         8f:0e:a5:0b:51:05:55:41:34:ea:71:bd:5a:6e:b3:f7:96:39:
         f1:e7:3a:95:06:71:40:87:ee:34:47:de:ce:af:df:44:bf:cd:
         6e:6e:14:96:bd:1a:d6:ea:a5:30:dc:1d:1b:c2:cd:ae:74:1d:
         2e:51:dc:14:46:02:b2:f0:61:0a:27:8d:a1:b8:33:7f:18:8d:
         b3:8b:72:f7:e6:fa:00:eb:ce:d2:7b:bf:ea:7e:85:b9:9e:26:
         96:10:8e:14:84:3b:41:69:e1:b6:6a:0b:5a:78:b2:8e:4d:ed:
         e3:9e:d2:15:a4:45:bd:95:c1:fe:d2:67:0b:82:d7:6f:db:42:
         ea:6e:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:25:38 2025 by rpki-client