Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File:                     6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier:          Lj8Vze6x/606MaFl1C3zzwCXnN8p1PsgHZ4arSeD9cs=
Subject key identifier:   D8:62:63:C9:1E:39:52:85:CA:A9:84:1F:A4:9D:37:1F:F6:FD:87:93
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer:       /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number:          020B
Signing time:             Fri 05 Sep 2025 02:29:40 +0000
Manifest this update:     Fri 05 Sep 2025 02:29:40 +0000
Manifest next update:     Fri 12 Sep 2025 02:29:40 +0000
Files and hashes:         1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: ixQ6Obbd8n9fGq7C7mIKLPvo9q1zORLYwbSqv9B1uvo=)
                          2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: qDl9A66XUfdxXb2Z9BDWMcaLCM85XHiGpfBrshr3vQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
                          rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
        Validity
            Not Before: Sep  5 02:29:40 2025 GMT
            Not After : Sep 12 02:29:40 2025 GMT
        Subject: CN=68ba4b14-1e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:b2:78:8a:09:ab:51:ae:42:b0:8e:70:bd:
                    fa:23:47:b2:56:29:5a:9c:e5:ae:a2:c9:47:69:7f:
                    1f:53:eb:67:d1:41:c4:60:57:6d:0c:4e:b8:d4:66:
                    c8:7f:03:68:59:1a:e0:15:56:1e:79:84:fa:b1:fe:
                    03:a5:18:5a:e4:65:4b:f0:db:2d:c6:f2:54:d4:7c:
                    ef:22:da:65:d5:d2:b7:44:f0:06:1e:f2:ab:63:e0:
                    80:1a:3d:d7:df:27:1a:50:95:c0:aa:71:ea:7d:c2:
                    89:84:8c:72:90:ea:55:25:fc:5e:8a:9b:89:2e:3e:
                    8c:b2:75:39:d2:81:00:59:7b:c6:89:e2:88:66:af:
                    9d:23:90:26:28:89:21:f6:96:d7:8d:cc:4a:03:d9:
                    48:84:af:88:ad:c0:f2:4a:a3:48:38:90:85:bc:b6:
                    fc:f6:f5:50:6a:49:11:44:72:59:d4:c2:e5:24:41:
                    db:70:d5:36:96:4d:3a:a9:12:a7:69:c4:aa:ce:c0:
                    93:eb:8b:5a:72:85:96:fc:67:9c:28:3d:e9:39:f4:
                    a0:91:19:10:b9:36:63:80:75:2c:b1:74:f6:c0:9e:
                    a2:01:cb:53:a7:5f:8d:ad:08:5e:53:0c:1f:10:ce:
                    f4:5c:15:5c:72:77:9b:4d:b5:f4:26:aa:f5:20:f4:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:62:63:C9:1E:39:52:85:CA:A9:84:1F:A4:9D:37:1F:F6:FD:87:93
            X509v3 Authority Key Identifier:
                keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:35:64:25:fc:13:64:a1:a7:b5:b1:e7:09:df:31:97:2f:
         2e:82:b3:6a:a0:11:d0:96:9c:b6:3c:02:47:d5:f8:ae:19:24:
         28:c5:fe:e4:ee:9f:48:d1:4d:5a:02:74:20:eb:67:1d:cd:14:
         c4:d9:b3:41:e5:f7:80:f8:c3:cc:68:80:d3:26:95:29:ad:55:
         ac:ac:f4:35:23:f6:e8:9f:de:2f:8c:a4:f0:8b:fa:de:ae:de:
         96:2f:5c:21:29:01:36:f5:ec:35:b0:cc:a2:a1:1f:55:d6:62:
         e1:69:92:62:ab:ba:70:f9:24:70:71:e7:d4:be:87:f1:0a:93:
         ba:bd:42:9e:b5:f3:a8:0c:e4:09:fc:da:c5:76:d6:27:a9:be:
         4e:ba:2f:69:20:82:28:32:b0:93:7c:a3:1b:7e:3c:43:07:ed:
         26:8f:aa:65:0c:90:c3:d1:f6:e3:d4:28:8c:cd:61:12:1d:ec:
         95:f1:7c:2e:b9:41:7e:7f:8f:e9:38:40:14:a1:2e:82:04:e0:
         2e:be:81:55:08:79:60:07:c3:91:1b:f0:12:6b:5b:74:7d:66:
         cd:fe:04:f5:06:79:92:db:b1:36:26:30:37:17:c8:2f:d0:87:
         a2:52:1d:4a:05:fb:ab:11:e0:cc:da:e7:0d:a7:7c:b9:2e:4c:
         27:70:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:47:12 2025 by rpki-client