Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.mft (raw, json)
Hash identifier:          M0tnBv5qku5li+iA6DnIiwzTIdCcCUGAggyX8LouQlU=
Subject key identifier:   A6:17:F6:C2:84:A4:73:3B:84:0C:EC:D0:49:B3:47:1D:90:55:81:40
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       0A49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
Manifest number:          0A41
Signing time:             Fri 30 May 2025 19:55:09 +0000
Manifest this update:     Fri 30 May 2025 19:55:08 +0000
Manifest next update:     Fri 06 Jun 2025 19:55:08 +0000
Files and hashes:         1: 6Shcog-fi_-sepc7SeB-zEJbURg.crl (hash: iYkKKufwDk2Y0YULqdVkaaG695Dfro5oGVatV1Y8MGM=)
                          2: 04DFAB682F3011EDBFC72D3FC4F9AE02.roa (hash: QlXB7lfn1sgpwkVvWpKhkoSXRwHDweeIAsqj1Bq83Co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2633 (0xa49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB, serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: May 30 19:55:08 2025 GMT
            Not After : Jun  6 19:55:08 2025 GMT
        Subject: CN=683a0d1c-a9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:58:ce:b3:13:55:16:7b:73:80:cc:a2:96:
                    89:04:9d:2c:e7:69:14:39:a0:51:00:b4:57:6d:6b:
                    38:0d:7e:db:5b:4f:11:39:80:6e:30:8d:20:83:59:
                    ec:e0:1e:0f:b7:1e:cb:e5:4f:c3:a1:68:72:23:fd:
                    64:36:3b:e6:c2:38:61:c9:68:17:ad:38:a2:04:30:
                    cc:17:bc:c5:b9:da:5c:27:15:56:13:6a:aa:22:85:
                    4b:90:98:73:2c:0f:9d:4b:b6:ad:f7:66:05:c9:5f:
                    77:d4:35:50:8d:79:e0:64:22:20:8a:e9:a5:5c:57:
                    45:17:52:fe:45:33:28:d5:cb:9a:0d:29:53:82:e9:
                    bb:31:c4:93:97:78:d1:1f:04:19:d1:63:16:70:87:
                    0c:bb:ab:c0:0b:a1:df:58:57:b9:21:c8:ce:17:3b:
                    7a:1c:ff:d1:fe:9c:f3:60:ec:ee:f3:e0:66:28:9b:
                    ae:54:4f:32:d0:f4:25:81:ed:9c:14:ed:a3:a8:6c:
                    53:2a:c3:a7:9f:9b:b5:a3:b7:77:89:05:b6:fd:e6:
                    c6:55:16:e1:8d:99:19:15:3d:c0:83:3d:f4:76:3e:
                    a7:8e:79:77:67:3c:88:a9:55:83:d7:d7:21:85:5b:
                    3c:09:2c:37:aa:db:24:71:52:89:01:46:a6:9b:f5:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:17:F6:C2:84:A4:73:3B:84:0C:EC:D0:49:B3:47:1D:90:55:81:40
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:b1:39:61:9d:87:67:c4:f8:68:9a:f0:23:21:5c:6b:e1:
         50:67:40:0a:e8:cf:20:da:db:2a:db:c5:c7:b1:be:89:0c:4d:
         4a:e3:f2:30:c9:44:02:8c:db:04:f8:e1:d7:72:16:1a:38:3d:
         b4:59:0e:23:7a:0d:72:45:46:9e:79:0f:49:9b:61:ae:f6:cb:
         bf:eb:64:28:2e:3f:9f:a6:c3:c3:7e:77:b1:88:80:00:a9:82:
         00:a5:99:4a:ed:ca:46:57:61:6c:8c:ac:88:81:50:83:a0:df:
         02:90:b9:de:f6:b2:80:27:54:24:e3:29:8d:7d:df:33:d9:66:
         b3:5f:5c:7d:63:53:35:5d:16:45:2e:41:ef:23:ed:2e:cf:90:
         fa:cb:35:0c:c5:56:bd:f2:6b:7d:7c:6e:e3:b9:1a:03:a9:86:
         90:aa:23:fe:e9:e6:40:ff:d3:b4:20:69:c6:78:84:a1:2c:eb:
         cc:70:bf:81:e1:3f:37:5c:73:1d:7a:f0:f5:ea:09:ce:ba:e9:
         ba:6d:17:3d:7b:ab:21:fc:23:88:a0:de:97:31:b0:95:09:74:
         93:f4:04:52:ca:b5:d9:8f:bf:13:a6:e5:4d:d0:9b:e3:49:90:
         a3:7b:f9:21:2e:0d:b0:c8:86:68:e7:c9:c5:f5:2c:14:9a:f3:
         de:fe:1a:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNFRUIxMTAvBgNVBAUTKEU5Mjg1Q0EyMEY5RjhCRkZBQzdBOTczQjQ5RTA3RUND
NDI1QjUxMTgwHhcNMjUwNTMwMTk1NTA4WhcNMjUwNjA2MTk1NTA4WjAYMRYwFAYD
VQQDEw02ODNhMGQxYy1hOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFNYzrMTVRZ7c4DMopaJBJ0s52kUOaBRALRXbWs4DX7bW08ROYBuMI0gg1ns
4B4Ptx7L5U/DoWhyI/1kNjvmwjhhyWgXrTiiBDDMF7zFudpcJxVWE2qqIoVLkJhz
LA+dS7at92YFyV931DVQjXngZCIgiumlXFdFF1L+RTMo1cuaDSlTgum7McSTl3jR
HwQZ0WMWcIcMu6vAC6HfWFe5IcjOFzt6HP/R/pzzYOzu8+BmKJuuVE8y0PQlge2c
FO2jqGxTKsOnn5u1o7d3iQW2/ebGVRbhjZkZFT3Agz30dj6njnl3ZzyIqVWD19ch
hVs8CSw3qtskcVKJAUamm/UGwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYX9sKE
pHM7hAzs0EmzRx2QVYFAMB8GA1UdIwQYMBaAFOkoXKIPn4v/rHqXO0ngfsxCW1EY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0VFQi83MDZEODQyNDY5
QjAxMUVBQTRCMjk5NDJDNEY5QUUwMi82U2hjb2ctZmlfLXNlcGM3U2VCLXpFSmJV
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZTaGNvZy1maV8tc2VwYzdTZUItekVKYlVSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0VFQi83MDZEODQyNDY5QjAxMUVBQTRCMjk5NDJDNEY5QUUwMi82U2hjb2ctZmlf
LXNlcGM3U2VCLXpFSmJVUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBczLE5YZ2HZ8T4aJrwIyFca+FQZ0AK6M8g2tsq28XHsb6JDE1K4/Iw
yUQCjNsE+OHXchYaOD20WQ4jeg1yRUaeeQ9Jm2Gu9su/62QoLj+fpsPDfnexiIAA
qYIApZlK7cpGV2FsjKyIgVCDoN8CkLne9rKAJ1Qk4ymNfd8z2WazX1x9Y1M1XRZF
LkHvI+0uz5D6yzUMxVa98mt9fG7juRoDqYaQqiP+6eZA/9O0IGnGeIShLOvMcL+B
4T83XHMdevD16gnOuum6bRc9e6sh/COIoN6XMbCVCXST9ARSyrXZj78TpuVN0Jvj
SZCje/khLg2wyIZo58nF9SwUmvPe/ho9
-----END CERTIFICATE-----
Generated at Sat May 31 17:28:52 2025 by rpki-client