Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
File:                     6IBLfhBNZXbwyNxIKlG142eqH3c.mft (raw, json)
Hash identifier:          ddwe+H2QLQVeUkaemyx3CJzgxUtHZU/9QJXfs1w2xc8=
Subject key identifier:   8F:05:F8:37:82:ED:62:75:6C:C7:61:DA:46:79:EB:F6:24:29:9E:F0
Authority key identifier: E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77
Certificate issuer:       /CN=A915392C/serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
Manifest number:          D4
Signing time:             Wed 17 Sep 2025 06:15:32 +0000
Manifest this update:     Wed 17 Sep 2025 06:15:31 +0000
Manifest next update:     Wed 24 Sep 2025 06:15:31 +0000
Files and hashes:         1: 6IBLfhBNZXbwyNxIKlG142eqH3c.crl (hash: F+jxIpYEtAc0cZAWxIE+w/ptWpUrLe58ocVvWdZGcBc=)
                          2: 2920764254CC11EF84CA4F17C4F9AE02.roa (hash: IrFxxAlGnVb5beRabO7QO6Z5Pnh09uDax8gaWrx9WwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl
                          rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 06:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915392C, serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
        Validity
            Not Before: Sep 17 06:15:31 2025 GMT
            Not After : Sep 24 06:15:31 2025 GMT
        Subject: CN=68ca5203-9a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:a3:20:69:e3:c7:06:e2:43:a1:7d:23:5d:
                    14:2b:10:d1:19:9c:82:e9:de:c3:8c:9e:4e:0c:a9:
                    1b:ba:88:25:cc:96:5f:1d:1d:5c:1b:aa:08:01:a2:
                    62:cd:35:a7:e1:00:45:09:2c:c8:fc:03:8a:f4:ed:
                    47:33:0e:3a:45:ae:46:3b:d3:45:01:d9:c8:3e:1b:
                    9c:3b:a1:e9:b4:a7:40:9a:97:53:06:22:fa:f7:2a:
                    7b:4c:e3:38:27:b8:44:4b:41:75:87:62:72:52:1e:
                    68:29:5a:cd:86:06:90:ec:83:26:e7:4e:66:3b:e9:
                    7f:a2:6b:fd:53:ac:99:2e:e9:12:00:16:e0:a9:b8:
                    23:e8:66:76:01:7c:fe:97:2c:35:e7:93:06:9a:68:
                    15:5c:74:87:94:70:14:eb:34:6d:1a:ed:7d:98:9d:
                    35:fe:e3:89:47:ef:67:de:ea:34:ed:10:6d:19:20:
                    ca:67:77:a0:0a:44:0b:15:23:0d:81:58:e4:2b:aa:
                    5a:7f:13:6e:fc:54:dc:02:3b:e8:d0:90:3d:36:14:
                    8e:b0:88:7b:e1:82:49:fc:c7:37:c9:07:4e:f0:e5:
                    58:00:1e:51:02:61:62:2b:d7:a2:d2:66:9c:fb:49:
                    07:73:ab:a2:fd:da:79:0d:5e:88:53:77:f7:21:89:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:F8:37:82:ED:62:75:6C:C7:61:DA:46:79:EB:F6:24:29:9E:F0
            X509v3 Authority Key Identifier:
                keyid:E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:73:22:4d:a7:91:5e:a1:a1:c6:80:c0:44:d7:aa:8a:6c:
         ca:91:2f:23:78:18:4e:2f:8a:44:b1:71:09:37:a8:6b:34:99:
         69:54:e3:ed:cf:f0:a9:87:70:07:ee:20:1f:9f:19:14:46:ac:
         f0:dd:98:2d:40:57:2f:92:37:6d:ea:64:d6:aa:12:1b:18:87:
         84:e5:c3:58:21:03:d3:73:4d:bf:bd:79:65:14:e2:a9:f6:56:
         6f:96:c4:d1:19:48:9d:3c:7e:8f:73:83:f8:9d:5c:3d:18:7e:
         20:95:a3:22:9e:ea:41:df:ce:71:9e:60:ea:e2:f8:aa:94:12:
         ce:a8:65:e3:bc:56:5c:25:e3:be:6f:d4:21:89:6a:9e:a5:81:
         4c:99:92:1b:15:15:54:bd:c5:71:d3:d1:ff:83:db:7b:44:88:
         4f:8f:18:23:a3:81:50:1b:b0:b5:b9:5e:56:44:06:e2:60:b3:
         53:81:f9:ca:52:74:88:04:f0:f2:e3:25:65:95:be:f8:f6:c1:
         0d:4e:bc:dc:0e:17:59:37:0c:c2:6e:28:d5:57:73:9b:12:45:
         ee:52:52:de:64:bc:5e:28:e1:66:66:ed:4d:c5:6d:92:2c:16:
         03:2a:1e:30:18:55:07:e6:40:fc:db:fb:72:71:8f:7a:27:b2:
         8f:ce:7c:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM5MkMxMTAvBgNVBAUTKEU4ODA0QjdFMTA0RDY1NzZGMEM4REM0ODJBNTFCNUUz
NjdBQTFGNzcwHhcNMjUwOTE3MDYxNTMxWhcNMjUwOTI0MDYxNTMxWjAYMRYwFAYD
VQQDEw02OGNhNTIwMy05YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5KjIGnjxwbiQ6F9I10UKxDRGZyC6d7DjJ5ODKkbuoglzJZfHR1cG6oIAaJi
zTWn4QBFCSzI/AOK9O1HMw46Ra5GO9NFAdnIPhucO6HptKdAmpdTBiL69yp7TOM4
J7hES0F1h2JyUh5oKVrNhgaQ7IMm505mO+l/omv9U6yZLukSABbgqbgj6GZ2AXz+
lyw155MGmmgVXHSHlHAU6zRtGu19mJ01/uOJR+9n3uo07RBtGSDKZ3egCkQLFSMN
gVjkK6pafxNu/FTcAjvo0JA9NhSOsIh74YJJ/Mc3yQdO8OVYAB5RAmFiK9ei0mac
+0kHc6ui/dp5DV6IU3f3IYkSVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8F+DeC
7WJ1bMdh2kZ56/YkKZ7wMB8GA1UdIwQYMBaAFOiAS34QTWV28MjcSCpRteNnqh93
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkyQy9BNjQwNEE0QTU0
Q0IxMUVGQTE2MjcwMTZDNEY5QUUwMi82SUJMZmhCTlpYYnd5TnhJS2xHMTQyZXFI
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZJQkxmaEJOWlhid3lOeElLbEcxNDJlcUgzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzkyQy9BNjQwNEE0QTU0Q0IxMUVGQTE2MjcwMTZDNEY5QUUwMi82SUJMZmhCTlpY
Ynd5TnhJS2xHMTQyZXFIM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqUHMiTaeRXqGhxoDARNeqimzKkS8jeBhOL4pEsXEJN6hrNJlpVOPt
z/Cph3AH7iAfnxkURqzw3ZgtQFcvkjdt6mTWqhIbGIeE5cNYIQPTc02/vXllFOKp
9lZvlsTRGUidPH6Pc4P4nVw9GH4glaMinupB385xnmDq4viqlBLOqGXjvFZcJeO+
b9QhiWqepYFMmZIbFRVUvcVx09H/g9t7RIhPjxgjo4FQG7C1uV5WRAbiYLNTgfnK
UnSIBPDy4yVllb749sENTrzcDhdZNwzCbijVV3ObEkXuUlLeZLxeKOFmZu1NxW2S
LBYDKh4wGFUH5kD82/tycY96J7KPznyu
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:36:21 2025 by rpki-client