Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
File:                     6w67ZlG90AYnOWdC_xoLTqD94uU.mft (raw, json)
Hash identifier:          PKEbE2UTubr3vLrdB4UzXM6b58qcjGuj7ZJmvESixCE=
Subject key identifier:   B2:04:96:D9:D9:AE:B8:25:6C:65:5A:1D:56:E6:06:4D:94:1D:4C:3B
Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
Certificate issuer:       /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Certificate serial:       18DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
Manifest number:          18CF
Signing time:             Wed 20 Aug 2025 16:32:28 +0000
Manifest this update:     Wed 20 Aug 2025 16:32:28 +0000
Manifest next update:     Wed 27 Aug 2025 16:32:28 +0000
Files and hashes:         1: 6w67ZlG90AYnOWdC_xoLTqD94uU.crl (hash: iCYkf91EwPCan2gXF2OCiy4i4OfgGPtfswaNaR35PAo=)
                          2: C00CB30A87A711EA94E5CF22C4F9AE02.roa (hash: p54j5D7iq0gvHbqwmE5ZZRlIhbibIt/Fl7WSmYHuiWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl
                          rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 16:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6366 (0x18de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E504, serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
        Validity
            Not Before: Aug 20 16:32:28 2025 GMT
            Not After : Aug 27 16:32:28 2025 GMT
        Subject: CN=68a5f89c-dc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:23:a8:12:8a:a9:54:50:e3:8f:d2:56:37:
                    08:d8:78:1f:59:59:7e:ee:92:a2:c2:ac:d6:88:d2:
                    89:15:6c:7f:e0:b1:ec:cb:ad:36:08:e7:e1:20:d8:
                    62:47:6d:db:19:f6:50:a0:89:67:71:cf:f2:16:cc:
                    87:c4:b7:09:0d:5e:dd:b0:70:b1:39:25:f7:f4:01:
                    82:18:96:fd:bc:04:17:c8:3e:f1:b8:b6:d2:f3:9c:
                    85:bf:10:dd:23:47:5d:8b:0f:62:e4:b5:2f:ef:67:
                    d4:2d:1c:a2:43:fe:50:21:70:f8:02:37:d2:58:7d:
                    bd:ed:31:bc:49:10:2c:b9:72:f9:62:cf:f6:b2:d5:
                    cf:ad:56:54:ab:70:7c:17:28:28:eb:ef:0c:bc:2c:
                    22:7a:50:dc:aa:2e:73:4c:33:fc:4e:be:38:fc:ba:
                    db:2d:77:8b:a0:5e:9d:4e:7b:b2:46:06:f9:fb:37:
                    0a:79:40:c3:c3:49:8c:12:01:ed:57:3b:00:76:37:
                    54:dc:23:86:2b:dc:ed:11:51:46:74:b1:d8:6b:5a:
                    9c:04:44:54:a0:12:54:4b:be:2c:98:2c:80:bf:bc:
                    5a:8a:7d:cc:8c:db:df:d4:83:be:9c:05:2b:82:6d:
                    26:b8:1f:f9:55:b4:60:80:55:63:3d:b7:c6:30:e6:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:04:96:D9:D9:AE:B8:25:6C:65:5A:1D:56:E6:06:4D:94:1D:4C:3B
            X509v3 Authority Key Identifier:
                keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:57:ad:98:f3:60:c2:73:72:25:03:b0:cb:19:98:fa:da:
         60:e9:57:04:7e:c6:22:69:8e:0e:dc:c6:50:70:e6:ea:e5:41:
         b6:cd:18:89:3d:60:62:bf:2c:49:05:5f:3a:94:42:c8:5a:e7:
         29:5a:77:56:fb:30:a1:b6:2f:87:83:42:2f:2c:b0:e2:50:c4:
         fc:fe:9b:63:07:88:76:6d:30:ef:02:8d:3b:60:93:40:9a:4e:
         ab:10:c5:78:b3:e2:6a:90:d0:e5:90:73:d4:51:56:1f:fa:e3:
         a0:f5:bf:be:69:ef:db:39:38:92:fa:44:2b:bb:52:dd:9a:37:
         3e:86:c0:9f:a7:37:39:cd:4a:50:4c:9b:2f:a4:d6:43:05:e0:
         11:fc:70:b5:60:e4:db:7e:58:23:33:58:f4:22:44:dd:0d:0f:
         49:7c:eb:f7:f7:16:49:94:48:07:43:f1:b9:bc:c3:64:1d:09:
         17:41:50:d4:02:f8:d9:b6:f0:1b:2e:15:22:7f:44:c2:74:89:
         93:3b:7f:ac:ce:fa:6a:31:45:34:8c:c8:b4:fe:06:26:9b:8d:
         9a:b2:59:0d:8c:b4:9c:ba:dc:80:65:ed:25:5d:83:ab:7d:32:
         53:f2:0e:0c:14:ea:a7:6b:06:63:97:89:db:78:2b:62:0e:24:
         97:65:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:34:35 2025 by rpki-client