Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
File:                     kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json)
Hash identifier:          RrYaiArrihktpEqqM+x6FqOn5amln/3WIGOmK+/cTaA=
Subject key identifier:   5E:32:C1:C6:91:37:71:D4:54:9F:FC:35:D3:E4:C8:35:5D:F1:83:04
Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
Certificate issuer:       /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
Manifest number:          06
Signing time:             Sat 05 Jul 2025 08:30:19 +0000
Manifest this update:     Sat 05 Jul 2025 08:30:19 +0000
Manifest next update:     Sat 12 Jul 2025 08:30:19 +0000
Files and hashes:         1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: y5GLxKr2m0ji4wWmQCw/BXfSG3RmdU0iicb76EzRDCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
                          rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Jul 2025 08:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
        Validity
            Not Before: Jul  5 08:30:19 2025 GMT
            Not After : Jul 12 08:30:19 2025 GMT
        Subject: CN=6868e29b-fb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:b3:5f:df:0c:5f:85:45:7d:d7:41:f9:47:
                    ba:cd:27:2b:07:3d:28:be:eb:c3:a0:1b:17:7f:12:
                    85:89:d8:63:7c:d5:42:06:ef:c3:fe:83:2a:7f:34:
                    d8:6f:22:35:f5:48:45:ac:70:03:36:02:ec:11:eb:
                    63:c1:a8:e5:c1:f0:5f:77:f2:63:9c:06:c2:0e:a3:
                    e3:24:8e:42:d8:7b:17:03:56:60:be:7f:cf:dc:f6:
                    93:88:db:80:84:07:95:1d:6d:0a:aa:8b:30:59:64:
                    60:59:d1:dd:ec:68:36:89:01:81:d6:94:ae:08:10:
                    96:49:a3:8e:8e:e0:4d:4e:ef:54:5d:af:1f:0c:3f:
                    92:fa:40:23:5f:e0:e5:47:25:93:da:54:6f:71:01:
                    bb:3b:3f:1e:17:a8:fd:52:74:6d:9b:55:7c:af:66:
                    ef:ee:29:b8:7e:ec:90:cf:39:e5:af:19:9d:0b:ee:
                    51:c1:c0:c4:9a:ff:32:09:44:c7:fa:ab:38:c8:42:
                    16:10:60:c3:bb:57:aa:aa:55:f0:5a:ce:07:01:de:
                    13:f1:40:23:38:41:0e:81:93:0f:72:60:7a:40:4b:
                    58:aa:4b:6c:74:4d:d1:2a:05:f8:b7:29:bd:d0:cc:
                    71:a1:ad:38:46:17:d7:7c:88:5e:72:db:b9:95:87:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:32:C1:C6:91:37:71:D4:54:9F:FC:35:D3:E4:C8:35:5D:F1:83:04
            X509v3 Authority Key Identifier:
                keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:df:e4:7d:53:6f:52:8a:e9:48:bc:d5:bd:6e:97:45:e9:93:
         cb:61:3c:38:5a:52:31:7f:8d:be:0a:d8:f2:40:fe:21:77:c0:
         19:21:24:c7:4d:da:a3:a9:f5:eb:d1:22:86:8a:14:45:01:f8:
         ae:4b:2f:b5:4d:4b:2a:5d:cf:19:ac:4a:58:07:e8:89:9d:be:
         28:e2:77:65:94:e5:84:80:a3:b5:11:50:3c:1d:f9:2e:3a:df:
         40:41:5c:3d:3b:21:82:5f:8f:6f:a7:53:0c:a5:d5:e2:2c:2b:
         a7:c0:73:5b:3a:17:a1:a8:a5:dd:e9:00:5f:48:d2:f9:05:8f:
         66:6b:61:78:eb:2d:a6:27:93:d1:82:2c:e2:18:f0:3a:7e:e4:
         b4:ed:ef:60:cf:40:1d:c4:e6:24:aa:c7:94:c8:8f:49:91:ea:
         ca:71:d8:48:b4:54:23:0e:7a:a2:c7:8c:2c:5b:db:d7:e7:57:
         34:13:ee:52:7e:f2:08:17:4d:be:d0:f9:0e:d8:b7:87:0c:f3:
         17:96:d0:ed:d8:2b:d0:3f:18:9f:bc:8c:cf:14:b0:cb:c5:8c:
         ea:14:fa:ab:c2:9f:fc:9e:eb:3d:de:35:00:a6:b6:80:03:90:
         6a:9a:a6:77:ba:41:26:cb:cd:c5:4e:62:13:9b:30:29:4a:2c:
         8f:9f:ee:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 09:24:38 2025 by rpki-client