Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
File:                     6IBLfhBNZXbwyNxIKlG142eqH3c.mft (raw, json)
Hash identifier:          Sl4ZlzRbHatbkhp2mzGcLjq5kJ69uGYdn9X53s/rdBU=
Subject key identifier:   55:0D:B1:EB:FE:70:33:E3:09:98:34:F6:85:2C:FF:DB:67:C0:7F:EC
Authority key identifier: E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77
Certificate issuer:       /CN=A915392C/serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
Manifest number:          9A
Signing time:             Sat 31 May 2025 05:52:11 +0000
Manifest this update:     Sat 31 May 2025 05:52:11 +0000
Manifest next update:     Sat 07 Jun 2025 05:52:10 +0000
Files and hashes:         1: 6IBLfhBNZXbwyNxIKlG142eqH3c.crl (hash: W8i3WJe3PyZlU+1PVl0zjsuSQvEEZagrTWinoAZjqPI=)
                          2: 2920764254CC11EF84CA4F17C4F9AE02.roa (hash: LFTBpIjwd4vxs9M7HrIPjAgrFCw7KOfaHYdxK0dO8Jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl
                          rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915392C, serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
        Validity
            Not Before: May 31 05:52:11 2025 GMT
            Not After : Jun  7 05:52:10 2025 GMT
        Subject: CN=683a990b-bdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:c1:80:64:76:29:6c:ed:b0:c0:12:b5:18:
                    5a:a2:28:81:0a:eb:1f:95:31:64:bd:68:1e:70:42:
                    ec:bc:86:d1:fc:05:12:70:a6:66:10:b9:1e:e1:a7:
                    a4:a4:ed:4b:dc:5e:00:09:a3:2c:64:72:8c:3a:be:
                    3d:a9:d9:e0:ef:99:fa:30:75:5b:83:1f:9c:70:c1:
                    fd:cc:12:b4:48:e8:24:6b:12:75:ed:83:d4:ed:9c:
                    3f:c2:e7:93:30:53:af:20:f1:70:d9:8a:8b:12:7a:
                    c9:fd:05:94:e8:48:03:a5:29:9b:c1:44:e8:d2:94:
                    70:4d:7f:b8:03:b5:17:9b:d0:90:b1:b1:44:f3:b4:
                    4b:2d:3c:f6:30:94:6f:bd:29:b3:b4:3b:e4:3b:c4:
                    25:61:ca:06:51:2b:0b:c4:81:1f:d7:1e:1d:c3:2d:
                    68:59:08:d7:e3:2d:86:2d:d7:c7:1a:ac:27:a1:1f:
                    f1:5b:0b:75:14:14:f8:51:57:56:2d:b3:26:c0:15:
                    b1:0a:43:33:c7:3e:27:ee:b8:3d:57:96:7d:20:fb:
                    1a:03:7f:fe:30:89:b7:2d:f2:cc:d6:fe:8d:94:b9:
                    33:76:65:9a:6d:e1:73:31:a8:5b:d2:7e:48:91:93:
                    44:db:e0:53:31:46:f5:c4:d0:43:62:06:1e:6c:da:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0D:B1:EB:FE:70:33:E3:09:98:34:F6:85:2C:FF:DB:67:C0:7F:EC
            X509v3 Authority Key Identifier:
                keyid:E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:ba:8f:b2:61:2c:26:a9:3d:d9:d4:7e:48:af:c3:28:71:
         8a:66:a8:ea:d7:4a:c2:36:c7:3a:df:0e:47:92:95:90:53:0c:
         9b:a1:f0:db:82:c7:07:83:b6:bf:6a:e0:6e:c1:7c:2f:b5:b9:
         ad:94:96:f9:14:3c:91:fd:4d:8a:31:21:9a:7b:94:13:1d:de:
         66:06:b4:ed:5e:00:37:b4:b1:2b:96:75:d9:c2:4a:08:34:84:
         e6:a5:a3:7f:f8:7c:32:c7:ef:2c:94:50:a1:8c:4d:b7:c2:8d:
         d7:37:4b:73:af:bd:d4:4f:1c:ba:5e:9e:0a:8a:44:73:c2:d7:
         f0:c9:db:55:e0:68:a7:47:44:e8:25:38:fe:8d:a0:a2:1a:69:
         69:c5:70:87:03:ec:ca:79:da:33:a9:c4:19:3a:5f:7b:8a:ed:
         e7:3b:dc:67:60:56:dc:c5:25:5b:f0:ef:cb:e3:89:de:52:e7:
         a6:a3:1e:44:cb:94:16:7b:fc:ed:62:a5:66:c8:61:ca:03:dc:
         e7:23:24:7f:7f:eb:1e:47:c4:32:b1:76:f3:0e:0a:4b:3d:e9:
         3e:10:c5:3a:fe:07:e8:1c:75:31:a6:5f:33:c1:83:63:a1:93:
         24:d8:38:46:a2:67:02:26:ae:9c:25:5d:32:15:d4:66:1d:2a:
         4d:61:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:48:45 2025 by rpki-client