Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
File:                     x6CGcqgQDaMwwSIxURVYe-YRDfE.mft (raw, json)
Hash identifier:          8Svlz4X16fwegZL/yG8BX00UyoXZHoEeuWz3Zx2QPn8=
Subject key identifier:   15:B1:51:88:F9:AD:38:89:C9:EC:C3:A6:20:D3:B0:BA:52:4F:24:99
Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1
Certificate issuer:       /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1
Certificate serial:       06E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
Manifest number:          06E1
Signing time:             Fri 30 May 2025 22:11:22 +0000
Manifest this update:     Fri 30 May 2025 22:11:21 +0000
Manifest next update:     Fri 06 Jun 2025 22:11:21 +0000
Files and hashes:         1: x6CGcqgQDaMwwSIxURVYe-YRDfE.crl (hash: Qec5Bz2Ip4qp9YrDs3aKDW8AmtqvjJZV8WkTwXRdLlM=)
                          2: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (hash: fLIn/n29gS9WQea5NQ408mptvqiyp1OsclxpM5zgbkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl
                          rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149CA9, serialNumber=C7A08672A8100DA330C122315115587BE6110DF1
        Validity
            Not Before: May 30 22:11:21 2025 GMT
            Not After : Jun  6 22:11:21 2025 GMT
        Subject: CN=683a2d09-d038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:a8:e4:e8:c4:60:af:55:e1:d3:fa:8b:16:
                    36:e6:27:92:39:ba:e3:88:a2:2e:8b:ee:5d:19:53:
                    e4:f2:b1:7a:fb:ab:99:67:47:5e:0b:2c:64:0f:9c:
                    eb:51:92:8a:92:44:d6:0d:0b:bb:59:8a:93:d1:38:
                    03:a3:a1:71:b0:ad:8b:4c:76:49:05:9f:fd:08:99:
                    21:24:85:3b:38:c7:4a:23:85:76:73:f8:6b:cf:c5:
                    04:94:23:34:ae:81:9a:42:b1:59:c1:8f:6c:90:d8:
                    75:31:d5:1c:70:51:d0:4c:ae:1a:15:74:86:9d:91:
                    87:a7:89:6d:c7:27:30:b5:ca:7a:5e:6e:7a:13:fe:
                    f2:b5:07:5d:3e:d5:b5:c3:b8:be:56:81:63:e3:db:
                    49:ce:b4:71:9e:f1:39:64:94:5a:60:92:ff:7a:a8:
                    07:a9:f8:0a:ef:04:2a:e5:02:85:06:0e:55:3b:6a:
                    ec:0d:46:63:43:81:84:b2:be:b0:3d:e2:b9:f8:dc:
                    84:45:0b:c3:84:bb:e5:45:0b:ee:ba:1f:b4:2f:ff:
                    91:9c:73:28:1a:99:bf:4a:08:3e:e9:7c:c7:db:96:
                    c3:39:2d:90:6c:84:5c:08:4d:b4:40:96:1a:74:df:
                    b6:a0:f6:b3:b1:cd:c6:f9:4b:3a:3d:8e:a7:34:10:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:51:88:F9:AD:38:89:C9:EC:C3:A6:20:D3:B0:BA:52:4F:24:99
            X509v3 Authority Key Identifier:
                keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d3:88:32:5a:17:65:68:61:e3:c7:9e:5d:0d:35:b4:bc:c3:
         75:9f:97:20:10:0d:0a:e4:bc:77:f2:6a:0a:58:8f:9a:23:75:
         b9:22:ed:b1:b0:c6:32:ee:3a:07:7e:bb:08:15:65:74:95:85:
         6b:06:81:79:c4:ee:4c:41:b1:76:d1:c2:6b:71:00:80:2a:04:
         11:d5:fc:86:51:67:41:b9:fa:31:0a:bd:51:57:25:ae:54:b3:
         4e:e8:b5:c1:70:b1:99:32:6f:85:84:95:cd:11:0e:53:eb:48:
         f5:7c:d4:22:dd:63:cf:1b:0a:15:5b:32:95:df:37:d8:15:71:
         f3:f4:b9:35:16:15:63:4a:ef:d4:ba:9f:c6:ff:f7:84:e8:58:
         1e:42:7f:94:5b:bd:08:a0:2f:b0:6f:89:35:05:9b:a2:98:ce:
         72:3c:8b:32:f3:9a:f0:9e:91:65:51:67:d9:88:b8:29:3e:d6:
         08:7e:04:ca:80:37:cd:fe:dc:65:b6:2a:fd:57:e4:4d:2e:0e:
         43:0d:67:09:84:3e:5a:40:44:1d:34:56:a5:36:59:e0:eb:29:
         9c:2a:e1:7d:14:12:e2:e2:84:d8:6c:ba:d5:d5:8d:e1:19:3e:
         2f:a0:39:26:af:e8:ab:3c:eb:33:58:67:5a:68:c1:ac:f4:3c:
         15:7d:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:49:41 2025 by rpki-client