Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File:                     6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier:          TqjhRJmz7BmuJrY1SmJUzYh9JRE3ATjhINQOtZnDIq0=
Subject key identifier:   80:1A:2B:39:09:D2:5A:B0:EC:C4:95:F8:B8:6E:50:AF:04:2F:7D:98
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer:       /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number:          CF
Signing time:             Fri 05 Sep 2025 06:13:27 +0000
Manifest this update:     Fri 05 Sep 2025 06:13:27 +0000
Manifest next update:     Fri 12 Sep 2025 06:13:27 +0000
Files and hashes:         1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: 7WUmaYGYXS2MfUmHq6+MlmJT6j1sdntJ3m5vnizw/tc=)
                          2: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: msL/KENDVWQUMvYyaW7j5WzxEJ6sxahQk+kZqFtRzK0=)
                          3: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: 47ro9pNe8tomss9aZ4VtGmmUiA4dH1RHfELIkfLkMBU=)
                          4: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: jdwllMTCFqVjmHB+vWxuk6uDQD76msFkVq9++d9B8Cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
        Validity
            Not Before: Sep  5 06:13:27 2025 GMT
            Not After : Sep 12 06:13:27 2025 GMT
        Subject: CN=68ba7f87-f96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:ad:d9:2b:53:c5:c6:c4:5c:c8:f2:f7:fe:
                    dd:d4:e2:21:a0:9e:db:78:a9:cf:e2:f2:90:83:2b:
                    6a:3b:e1:29:9a:67:b3:cc:f8:2b:ed:e8:44:78:2b:
                    15:f6:7d:f3:a8:7a:83:47:6e:4a:e2:3b:be:b4:4c:
                    25:75:b5:48:9a:be:8a:78:63:4e:d4:06:78:74:ba:
                    2a:69:be:fd:0e:5d:36:dd:76:42:96:35:44:70:f2:
                    2e:f6:72:91:4e:d3:c1:4b:d8:6a:cf:cc:88:d3:08:
                    87:15:6b:0a:16:e0:f9:84:e3:c1:63:2c:8a:63:f4:
                    49:e5:9b:e1:2c:81:67:7d:f3:35:f3:f5:00:b8:73:
                    ab:c5:c6:dd:3b:40:7c:c6:85:c4:53:51:d0:f0:d9:
                    c8:78:c2:bf:f2:9d:32:de:7e:e8:ab:b9:cb:e4:96:
                    ee:5a:0b:5b:b8:bc:a9:51:f8:20:ae:2f:0a:c5:08:
                    f1:f5:15:81:4f:c1:a6:f1:80:37:40:28:3c:d1:da:
                    ac:9a:ed:f1:f5:39:14:64:d9:2f:30:0b:6e:39:9e:
                    1d:fa:5d:44:5a:5c:d9:0a:ee:04:46:7b:8e:f4:13:
                    f8:b5:9a:cd:fa:ef:da:61:35:f7:84:f6:de:8f:c9:
                    ad:b3:2f:12:51:e3:1e:4a:84:7f:f1:d2:20:c7:bf:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1A:2B:39:09:D2:5A:B0:EC:C4:95:F8:B8:6E:50:AF:04:2F:7D:98
            X509v3 Authority Key Identifier:
                keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:84:d9:90:16:3d:c8:de:c5:d1:5c:6c:9c:b0:cf:d3:99:83:
         9d:79:15:e6:f1:bb:be:9f:9b:c3:f2:a8:ae:22:d8:59:99:cc:
         f3:84:9e:c7:96:62:9b:d4:e2:86:c5:d8:b4:e1:03:8b:53:5f:
         ac:92:81:3d:02:a7:f5:95:98:a5:91:a6:7f:0c:93:27:6d:de:
         1e:bf:b6:02:c1:f0:17:0e:c5:84:5a:43:2b:9f:bc:92:d0:db:
         48:da:b5:bd:83:cb:c3:7c:0c:0d:4e:15:80:6d:d0:b1:bf:8d:
         da:9c:4e:78:25:69:5d:89:4c:e4:17:e6:ae:a2:a5:1c:c6:3f:
         9f:13:3f:4e:18:98:58:04:34:10:61:2a:47:7e:42:70:c5:1d:
         a6:e1:91:12:33:0c:6c:48:08:21:1a:bd:d4:99:20:72:16:58:
         53:3b:7e:f1:52:35:82:30:dd:f8:97:35:75:bd:ce:e0:d7:34:
         3d:c4:76:95:4a:1a:97:22:ef:78:73:6d:e1:a3:6f:4f:aa:ee:
         e2:4e:39:f2:ba:8d:a2:9f:23:00:4a:9e:24:20:10:11:c8:f4:
         b9:d9:ce:82:26:b6:2b:0d:33:09:58:ea:a1:ef:a8:f3:d9:98:
         c8:52:d7:bd:3d:2d:2e:9b:80:35:6f:34:ad:de:88:89:75:0a:
         87:14:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:55 2025 by rpki-client