Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
File:                     b6MnfND3RvILaYm150QQZcbD0eE.mft (raw, json)
Hash identifier:          iSlD8Cw2ouX5epWT8mZutABZNROiT6lbNf6uMEdFc5k=
Subject key identifier:   82:4B:0C:E2:8B:DD:32:59:FD:76:5C:45:C5:02:E1:A9:2D:F4:2C:48
Authority key identifier: 6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1
Certificate issuer:       /CN=A9183A53/serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1
Certificate serial:       0BD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
Manifest number:          0BCC
Signing time:             Fri 30 May 2025 19:03:37 +0000
Manifest this update:     Fri 30 May 2025 19:03:36 +0000
Manifest next update:     Fri 06 Jun 2025 19:03:36 +0000
Files and hashes:         1: b6MnfND3RvILaYm150QQZcbD0eE.crl (hash: nTElbu0nRyavTuOlg6zczPwEYn+63gkgHjqHpzhMbZY=)
                          2: 5B89EDAC1C1911EA905C7109C4F9AE02.roa (hash: yFbcE2/zh5W+jYTCtbp+al/Ly/eMMC6ALp6S0V30Zsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl
                          rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3028 (0xbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A53, serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1
        Validity
            Not Before: May 30 19:03:36 2025 GMT
            Not After : Jun  6 19:03:36 2025 GMT
        Subject: CN=683a0108-1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:72:98:25:6b:7b:fd:eb:04:08:a0:f8:df:
                    d5:eb:d3:6e:a9:40:15:ca:2f:53:80:af:cf:c8:dd:
                    e4:a2:33:3e:87:54:33:79:fe:d7:15:3f:85:dc:eb:
                    d0:1c:fb:69:8e:77:3d:f4:e8:89:f0:ed:c5:ed:c5:
                    0f:d8:5a:b3:c2:7d:30:eb:96:3f:a6:92:60:3c:a1:
                    f8:e1:08:de:25:e9:93:82:12:25:45:dc:79:8c:81:
                    29:4f:43:40:28:ba:e2:17:41:7b:c6:ce:da:56:77:
                    38:cf:c7:eb:71:fa:cc:89:c5:24:66:33:97:67:65:
                    4c:a4:cc:29:ad:53:e4:e0:47:76:2a:d1:66:ac:ee:
                    89:bf:d1:65:45:f4:8b:ed:cf:85:b1:8b:fd:7c:b9:
                    cf:7c:06:02:6e:fd:7b:32:14:ec:bf:f5:8e:cb:86:
                    2e:c4:a6:ae:a1:a1:66:73:88:12:65:0a:0a:02:6a:
                    dc:8e:c0:c3:39:01:52:c4:9c:9e:74:68:78:6a:09:
                    1a:96:43:36:06:20:76:5e:32:01:9e:b9:f2:cf:9c:
                    d0:56:6d:ed:2c:7c:c9:c1:ab:17:e4:2c:0e:c2:1c:
                    ce:26:5a:3f:5e:96:d6:f6:a3:84:18:20:ed:be:72:
                    03:48:52:4e:8f:b2:34:72:27:3f:04:c2:21:a1:6a:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4B:0C:E2:8B:DD:32:59:FD:76:5C:45:C5:02:E1:A9:2D:F4:2C:48
            X509v3 Authority Key Identifier:
                keyid:6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ff:20:eb:3c:9d:24:ce:58:94:b8:ba:09:1b:63:e6:6f:04:
         64:d1:8e:ed:fd:69:b8:e6:30:fc:d2:ea:5f:25:67:5a:9d:cf:
         66:23:7b:94:09:d9:e8:6d:ad:20:03:8c:64:9c:57:13:c3:ae:
         5e:6c:00:ae:1d:e1:f0:25:8f:c1:ad:dc:53:93:7a:07:8d:b6:
         9a:12:f3:23:c1:fa:e2:55:d3:42:3b:31:a2:69:e4:10:59:3d:
         d7:cc:81:64:a9:07:e7:3f:cc:94:bd:4f:05:c4:88:47:6f:b7:
         46:9c:29:3c:25:d7:00:d9:9a:59:4e:0e:5c:4b:01:3c:85:cf:
         5d:e6:4e:a3:df:cf:e6:7f:d4:20:75:bc:40:52:92:8f:36:92:
         72:e1:3b:ec:c0:c2:fb:54:4a:7f:02:a8:c9:d6:91:b0:f6:7a:
         4a:48:c0:b4:55:1c:9f:c0:f2:a3:03:43:3d:8d:45:de:a4:8e:
         db:0f:5c:7c:01:ba:ac:95:35:9b:33:63:c7:60:bc:90:d9:45:
         83:1f:da:b6:e8:31:d0:dd:ae:95:cb:f1:f6:1a:09:32:74:36:
         00:d1:7a:48:4e:d4:fd:10:18:32:11:3e:8f:a8:49:bf:3d:87:
         61:13:94:99:2d:49:d1:0f:e3:8f:53:03:60:4b:ff:79:23:49:
         87:74:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:38:33 2025 by rpki-client