Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft
File:                     6yX--P-P_HFEQDc2nK2vr2zYklI.mft (raw, json)
Hash identifier:          9MTwT0VwW+6fbMIVL0qWTyaCLS9QEMOqPaK7YWI51HQ=
Subject key identifier:   64:2D:DF:48:5C:26:95:75:E5:7A:85:F9:6C:41:B8:5C:ED:7A:E3:8E
Authority key identifier: EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52
Certificate issuer:       /CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft
Manifest number:          01C8
Signing time:             Sun 07 Sep 2025 03:18:35 +0000
Manifest this update:     Sun 07 Sep 2025 03:18:35 +0000
Manifest next update:     Sun 14 Sep 2025 03:18:35 +0000
Files and hashes:         1: 6yX--P-P_HFEQDc2nK2vr2zYklI.crl (hash: /WPIr6sK+3JqsHw7MN6sCWk2iv9ODbtTDkyl8H85gYA=)
                          2: 7E156BA0D46511EDBFC00C87C4F9AE02.roa (hash: FRRfK4hKeTw9lsBnsIsSbgs7rIXetSWQ2flb/qNJQ7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl
                          rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 03:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185456, serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252
        Validity
            Not Before: Sep  7 03:18:35 2025 GMT
            Not After : Sep 14 03:18:35 2025 GMT
        Subject: CN=68bcf98b-4ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:33:26:9e:ac:6d:a7:7a:cd:cf:e5:9b:b3:
                    93:be:82:68:34:0f:dc:4c:ea:7b:ad:52:63:3a:bb:
                    15:b5:7c:b2:8f:04:31:02:44:69:71:2a:08:ee:c6:
                    d2:7f:b3:a9:0e:72:72:f5:c4:cd:86:52:f7:6c:90:
                    32:a9:f5:e2:d2:a0:f6:19:6e:11:89:27:5e:ee:ba:
                    bd:87:23:30:5e:a5:a8:1c:84:11:b7:a5:af:9e:00:
                    f0:ec:95:22:eb:65:45:aa:02:af:38:df:70:9c:e4:
                    a5:b7:88:2e:7f:89:d2:76:82:06:94:0e:9d:0c:cd:
                    10:ee:92:b3:8d:6f:8a:6b:89:30:aa:1b:79:1e:1c:
                    76:13:94:19:4a:1f:2c:f3:69:19:ee:09:14:7f:be:
                    7c:19:22:54:37:2e:5f:96:cb:84:ff:b7:a2:fd:e2:
                    31:10:df:46:d9:9f:ed:0d:58:68:76:b0:12:cf:4f:
                    eb:88:17:ee:ff:80:ea:e2:1e:ba:06:2f:d7:26:8b:
                    46:24:b4:9b:0a:bc:78:6e:c4:a1:c8:00:6e:47:fa:
                    82:4d:fe:84:48:38:e2:e4:2f:35:df:30:21:8e:dc:
                    70:7f:d4:21:e7:7b:2f:cb:ca:f0:2e:a2:34:73:9f:
                    83:6a:4c:1b:3d:c3:65:60:af:41:0e:86:d2:76:3d:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2D:DF:48:5C:26:95:75:E5:7A:85:F9:6C:41:B8:5C:ED:7A:E3:8E
            X509v3 Authority Key Identifier:
                keyid:EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:74:c9:94:8e:7e:82:89:56:5f:20:8b:70:3e:fb:e2:ff:
         8e:45:f5:e6:c2:bc:ad:7c:c3:aa:be:c8:3a:0b:1a:4a:01:16:
         70:55:5a:b0:7c:27:a1:56:8b:12:49:66:c7:82:e4:26:76:5b:
         93:b7:02:75:ee:bd:cf:f4:42:1d:52:5f:94:62:16:a3:e4:f3:
         a7:92:40:83:35:86:ad:de:de:c6:1d:e1:3d:cd:4d:60:52:e1:
         a0:f6:c2:21:b9:ef:6a:c2:d8:37:8b:87:2e:9e:8e:f0:ec:b6:
         58:d5:85:de:5a:1d:97:ce:21:07:e9:c6:1c:99:ba:5e:1b:c5:
         02:e8:c2:6b:fa:17:e0:ee:6f:5a:8d:0c:eb:65:ac:97:b6:92:
         61:10:53:26:bd:88:31:61:8f:fa:53:5e:66:5c:e1:0f:cc:66:
         e0:2f:a2:b8:81:b1:c5:f2:b0:53:35:e0:24:40:20:ba:e6:b7:
         4d:54:b1:71:f6:52:02:60:5b:35:81:05:cd:72:b4:a0:2d:eb:
         45:00:13:ca:7f:42:20:91:51:8b:8e:62:e3:49:34:d7:e0:5c:
         ff:f2:8e:41:7d:9f:23:ed:b9:a2:8c:4d:9b:18:9a:21:57:f0:
         b7:cf:6b:e5:8a:69:e5:e1:0e:c3:ce:09:c5:a6:48:6f:5e:b0:
         30:66:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 20:48:53 2025 by rpki-client