Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
File:                     M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json)
Hash identifier:          4tM1ODhyn3lYXlm+Cgo65QL9a8Umjea74xQ47XGtonA=
Subject key identifier:   B6:07:4B:B3:80:7C:79:0E:89:93:A3:FE:27:C6:5F:15:6A:51:18:55
Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
Certificate issuer:       /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Certificate serial:       349A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
Manifest number:          3492
Signing time:             Tue 10 Jun 2025 14:38:14 +0000
Manifest this update:     Tue 10 Jun 2025 14:38:14 +0000
Manifest next update:     Tue 17 Jun 2025 14:38:14 +0000
Files and hashes:         1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: Sakj/EDlGMYZukrKI+Dg9AAd7fP3TK69FSFneQT2VIs=)
                          2: 054DC680CE7411EAA3A39A3EC4F9AE02.roa (hash: 9+z7Zr10qHwp2Ri1PL9EErNNesIzycGYH/5jju84Tvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
                          rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 14:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13466 (0x349a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
        Validity
            Not Before: Jun 10 14:38:14 2025 GMT
            Not After : Jun 17 14:38:14 2025 GMT
        Subject: CN=68484356-fe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:33:2b:f1:8d:77:e1:4e:76:3f:b8:d5:8f:
                    7e:64:e9:a5:59:01:8f:49:1e:59:e7:0f:2b:00:f4:
                    c1:4a:2e:f3:a8:74:c2:54:a9:0c:f6:72:3a:d4:79:
                    b7:6b:c8:d4:3e:b2:ee:ef:92:d7:37:d5:bc:e4:3f:
                    61:ed:2a:51:49:74:84:2a:c9:11:af:bf:31:09:e5:
                    25:d3:76:c3:2f:63:f3:2d:fa:85:ba:91:2f:27:52:
                    f9:d9:46:92:7d:23:5e:58:c8:ef:01:2c:a0:4d:78:
                    19:26:11:c0:f7:d3:0c:66:7d:45:e0:f5:01:47:1a:
                    56:b6:51:9e:87:64:53:a7:bb:47:ca:ba:22:8c:19:
                    f1:98:8e:05:c4:35:fe:24:91:9e:a6:ed:3d:64:34:
                    33:04:68:1e:5a:21:f9:13:49:46:8f:33:89:89:73:
                    8c:73:90:2e:f0:bb:91:3c:32:7c:47:41:6a:c9:b5:
                    e9:28:38:f1:e3:75:88:08:72:26:d8:45:aa:3a:9f:
                    dd:4a:e6:1e:ef:76:41:c5:55:62:b1:89:39:7a:d0:
                    3f:b3:c4:e1:8f:56:63:44:2a:f9:c6:6d:d6:de:a5:
                    5d:7a:d7:e1:41:b1:ce:52:74:18:5f:c5:1f:73:93:
                    74:34:51:06:67:84:4a:0f:6e:38:35:dd:67:40:56:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:07:4B:B3:80:7C:79:0E:89:93:A3:FE:27:C6:5F:15:6A:51:18:55
            X509v3 Authority Key Identifier:
                keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0d:16:94:e9:f7:3c:01:d4:5e:e9:26:71:1e:ad:f1:76:22:
         e8:d8:bb:23:66:de:e8:e3:45:30:d6:71:64:26:d8:36:fa:65:
         aa:38:8c:b9:98:ba:fd:70:87:c3:89:55:90:52:3b:cc:b6:40:
         3a:64:02:b7:3c:bd:63:bd:e9:3a:d8:78:2e:ce:29:d1:fa:0e:
         19:f0:aa:21:01:93:49:b7:87:6d:7e:0f:26:68:9a:77:80:92:
         10:87:35:93:f6:fd:d6:a4:22:ff:35:ca:1d:39:05:1f:67:cf:
         9e:69:fd:33:3a:69:1d:c9:47:e4:24:17:82:d8:a2:19:92:76:
         9a:99:03:04:9f:e1:0c:34:d8:ee:f4:ff:ed:3e:30:91:1e:26:
         15:42:eb:80:1b:12:75:85:7f:cb:c1:16:eb:ca:59:aa:db:f6:
         0b:96:4a:1c:b5:9f:b9:a9:75:3e:d5:2f:f9:07:40:72:76:b9:
         f4:ae:f0:5f:db:ea:ad:c1:ea:28:d4:37:39:d6:4e:06:ff:52:
         d7:85:3f:f9:ac:19:0d:54:b1:2b:ce:dd:27:81:4a:d3:a3:1c:
         b0:85:e7:cb:ac:ab:d7:c2:9b:7e:f8:13:43:28:a6:04:e6:7a:
         f6:07:a5:ee:70:cc:7e:7f:b5:69:97:88:f1:5c:b6:7c:1c:1b:
         39:e0:02:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:06:32 2025 by rpki-client