Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
File:                     6qKbMnjqfy5or_PZQPu17Kn41WA.mft (raw, json)
Hash identifier:          BHx5PR/7dGeUUksR/6luHjwNdYAH6rXHfcG+nvSLDYA=
Subject key identifier:   73:3C:E4:8F:68:CC:B8:FF:BA:3E:BE:BE:67:DA:AE:60:42:B2:B3:88
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Certificate issuer:       /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
Manifest number:          E7
Signing time:             Sat 31 May 2025 05:00:25 +0000
Manifest this update:     Sat 31 May 2025 05:00:24 +0000
Manifest next update:     Sat 07 Jun 2025 05:00:24 +0000
Files and hashes:         1: 6qKbMnjqfy5or_PZQPu17Kn41WA.crl (hash: n7X3pLkUoYLymey4KDCLucZvrmZ5t2oHQHntlqgpUWs=)
                          2: 57410984DB6811EEA3A06625C4F9AE02.roa (hash: PjA6/y3/URFKtBBGqwXOyXSRNtGtQief3EK0IMYpEOs=)
                          3: 68005612A19211EF9444186DC4F9AE02.roa (hash: 57t9aslQBqVubnpXgZYR9ppPEM+QHeUVCTd2/IZVpT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
                          rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185339, serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
        Validity
            Not Before: May 31 05:00:24 2025 GMT
            Not After : Jun  7 05:00:24 2025 GMT
        Subject: CN=683a8ce8-76c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:d7:90:a8:c7:42:7a:05:e6:d6:0a:3c:87:
                    a2:d2:98:94:1e:4e:13:3a:59:d2:f1:65:a5:72:61:
                    1d:01:e1:d4:20:90:92:8b:f2:c6:fc:24:42:38:28:
                    41:54:a8:1c:f5:2e:4c:63:bd:44:a0:b0:4d:c4:8f:
                    64:d6:44:fa:d9:d9:bf:51:7a:e0:ed:2a:cb:b1:5f:
                    55:34:e7:61:fc:f9:8a:93:b8:59:b7:5c:32:2f:81:
                    6a:79:f8:cc:d2:00:20:d1:7d:85:d9:d4:d8:d6:2b:
                    2a:35:02:50:d9:ad:90:37:ce:7d:5c:33:97:6a:4f:
                    03:f3:79:6c:93:ca:33:18:23:4c:19:aa:8c:0f:bc:
                    da:a4:7d:12:1d:f8:85:b8:ee:c0:2b:77:86:e5:dc:
                    4a:c8:12:b3:35:72:c2:53:e2:8a:87:1b:3b:b1:91:
                    0d:58:2c:87:b8:75:77:cf:8e:f0:f4:d1:cb:63:3e:
                    cf:26:62:22:00:9a:34:99:2d:74:c8:3e:15:67:ba:
                    07:d2:d3:b8:e3:7a:b6:f5:59:5f:c5:78:d8:d9:75:
                    a2:39:0a:7b:3d:d4:3a:aa:6f:79:ab:db:65:b9:d4:
                    5d:7e:27:3a:c2:61:4a:d7:98:4c:47:bb:b7:6a:b3:
                    68:0a:15:c2:85:b4:68:54:59:10:50:5d:c2:82:0b:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:E4:8F:68:CC:B8:FF:BA:3E:BE:BE:67:DA:AE:60:42:B2:B3:88
            X509v3 Authority Key Identifier:
                keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8d:f6:4d:2d:fc:0d:7e:e4:53:c0:9d:87:d5:75:6e:62:95:
         35:47:0e:b0:6b:bf:eb:e0:a6:17:ce:b2:aa:4e:43:f2:82:45:
         77:e4:2e:82:df:d9:b7:c8:5f:36:6d:6c:54:a3:10:7b:2b:db:
         b8:d8:a2:d2:4b:c4:29:c5:7a:5c:de:a6:90:fe:a0:fe:9d:0e:
         e2:94:68:94:6b:5b:79:ce:c7:ce:a7:08:1f:be:a0:ea:b4:77:
         cd:a8:e0:20:0a:69:66:fb:52:7a:1b:28:a6:8d:00:6b:d2:32:
         71:96:cc:52:de:58:84:70:c3:d0:db:88:2e:c7:46:a9:a2:d0:
         e4:8c:c3:e2:00:cb:6b:0d:90:4e:e4:2e:a4:5b:ca:84:3b:c4:
         f8:8d:6e:aa:9f:cc:07:7d:71:ed:b9:f8:7a:7a:d7:29:68:a9:
         26:e0:3f:ee:61:2c:aa:9d:be:9a:f8:f9:6f:82:c7:55:79:d7:
         3b:b4:4d:84:76:c2:0a:a2:3f:d2:7f:e6:db:22:c8:9e:eb:73:
         b4:f1:1e:b0:00:d2:af:a3:5f:c8:7a:81:41:a4:9d:10:e2:d0:
         c9:70:62:78:fc:5f:8e:4d:5e:67:98:04:74:95:d3:37:8c:0b:
         47:dd:eb:c6:16:20:bd:b2:03:d2:8f:82:54:09:ac:e6:3c:a4:
         17:be:52:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzMzkxMTAvBgNVBAUTKEVBQTI5QjMyNzhFQTdGMkU2OEFGRjNEOTQwRkJCNUVD
QTlGOEQ1NjAwHhcNMjUwNTMxMDUwMDI0WhcNMjUwNjA3MDUwMDI0WjAYMRYwFAYD
VQQDEw02ODNhOGNlOC03NmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Q7XkKjHQnoF5tYKPIei0piUHk4TOlnS8WWlcmEdAeHUIJCSi/LG/CRCOChB
VKgc9S5MY71EoLBNxI9k1kT62dm/UXrg7SrLsV9VNOdh/PmKk7hZt1wyL4FqefjM
0gAg0X2F2dTY1isqNQJQ2a2QN859XDOXak8D83lsk8ozGCNMGaqMD7zapH0SHfiF
uO7AK3eG5dxKyBKzNXLCU+KKhxs7sZENWCyHuHV3z47w9NHLYz7PJmIiAJo0mS10
yD4VZ7oH0tO443q29VlfxXjY2XWiOQp7PdQ6qm95q9tludRdfic6wmFK15hMR7u3
arNoChXChbRoVFkQUF3CggumgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM85I9o
zLj/uj6+vmfarmBCsrOIMB8GA1UdIwQYMBaAFOqimzJ46n8uaK/z2UD7teyp+NVg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTMzOS9EQUNEQjM4RURC
NjcxMUVFQTYxNzg5MjRDNEY5QUUwMi82cUtiTW5qcWZ5NW9yX1BaUVB1MTdLbjQx
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZxS2JNbmpxZnk1b3JfUFpRUHUxN0tuNDFXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTMzOS9EQUNEQjM4RURCNjcxMUVFQTYxNzg5MjRDNEY5QUUwMi82cUtiTW5qcWZ5
NW9yX1BaUVB1MTdLbjQxV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkjfZNLfwNfuRTwJ2H1XVuYpU1Rw6wa7/r4KYXzrKqTkPygkV35C6C
39m3yF82bWxUoxB7K9u42KLSS8QpxXpc3qaQ/qD+nQ7ilGiUa1t5zsfOpwgfvqDq
tHfNqOAgCmlm+1J6GyimjQBr0jJxlsxS3liEcMPQ24gux0apotDkjMPiAMtrDZBO
5C6kW8qEO8T4jW6qn8wHfXHtufh6etcpaKkm4D/uYSyqnb6a+PlvgsdVedc7tE2E
dsIKoj/Sf+bbIsie63O08R6wANKvo1/IeoFBpJ0Q4tDJcGJ4/F+OTV5nmAR0ldM3
jAtH3evGFiC9sgPSj4JUCazmPKQXvlJl
-----END CERTIFICATE-----
Generated at Sat May 31 17:47:15 2025 by rpki-client