Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
File:                     6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json)
Hash identifier:          e7mDrMlXazHa6ugS3yZqjvWl/7HB6qVkEB/tHt7x7gU=
Subject key identifier:   B5:B1:07:84:BD:5C:89:DB:F8:D9:A2:22:32:FA:62:62:EA:CF:D5:4C
Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68
Certificate issuer:       /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
Manifest number:          C1
Signing time:             Wed 09 Jul 2025 06:40:53 +0000
Manifest this update:     Wed 09 Jul 2025 06:40:52 +0000
Manifest next update:     Wed 16 Jul 2025 06:40:52 +0000
Files and hashes:         1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: kO1nTj+EF+unGrajh5La85g9Q9jq5rvhJRNq/eEvbvI=)
                          2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: zJmy/7bWwOw3097+xOhmcdnCp+p0bjqozGeHRbB5Gck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl
                          rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Jul 2025 06:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68
        Validity
            Not Before: Jul  9 06:40:52 2025 GMT
            Not After : Jul 16 06:40:52 2025 GMT
        Subject: CN=686e0ef5-6270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:cf:0c:31:31:18:b4:a1:e9:32:d1:25:41:
                    8b:55:51:bf:a9:d2:39:60:50:a8:46:c2:98:80:d9:
                    d7:91:b8:17:46:f0:e8:34:06:c2:89:23:93:d5:dd:
                    43:62:ee:ed:c8:e1:59:67:a4:78:c8:1c:43:86:94:
                    f3:69:c2:a8:d3:fb:4f:21:86:e3:ab:b8:f8:6a:d3:
                    73:5c:61:95:83:1b:e3:5f:ea:0d:4e:46:e6:c1:53:
                    e7:de:1a:08:4c:25:44:af:1d:a9:84:35:40:3c:37:
                    28:20:b4:88:d9:c0:08:17:85:06:57:5b:b3:17:f6:
                    e2:d4:1c:ba:09:01:78:f3:38:22:9b:f3:be:f5:45:
                    13:a8:f2:6c:73:9e:1a:d8:cc:f3:5a:04:91:db:e9:
                    a4:3a:ce:ff:74:e9:3d:54:d8:93:2c:08:1c:03:13:
                    bf:1a:23:a3:aa:5a:d6:ca:d6:fa:76:1b:45:0f:15:
                    66:e8:47:24:59:d9:9a:2e:d0:cf:e9:5f:0c:b5:16:
                    1d:02:8a:4a:ad:98:f9:6c:fe:c6:2c:c1:17:82:0f:
                    5c:bb:00:36:c3:3d:fd:66:73:8c:b0:fd:a4:ce:db:
                    51:e1:77:cd:00:14:36:7e:f4:64:5f:47:62:11:03:
                    29:8a:2e:27:f2:8e:1d:d6:eb:5e:85:44:c3:2c:f7:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B1:07:84:BD:5C:89:DB:F8:D9:A2:22:32:FA:62:62:EA:CF:D5:4C
            X509v3 Authority Key Identifier:
                keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:83:b7:6e:81:c5:ed:07:bb:56:5f:55:a0:33:1c:b6:af:
         c5:2b:70:50:3f:6c:d6:b0:7e:dc:f5:e0:ac:6c:13:83:cb:bd:
         58:02:20:cd:a8:6a:bf:e4:98:b2:c7:c1:41:e1:8f:1d:7b:f4:
         67:ce:5e:ac:13:21:fc:69:d2:9c:0d:56:bf:c5:12:d1:1f:07:
         74:98:1b:70:d0:1f:d7:79:17:04:a9:77:3c:ef:89:63:42:34:
         8a:bb:da:9d:03:53:e6:82:d3:74:2d:6b:6b:b8:b9:6e:f3:c3:
         c1:e9:29:e8:4b:ad:91:b7:98:ab:e2:e7:fc:b1:d3:8c:ed:b0:
         4f:c1:57:79:1b:b1:25:be:a7:7f:31:0a:59:dc:72:86:78:63:
         f2:84:cb:56:36:a9:3c:fe:0c:6d:ae:51:60:e7:8e:dd:0b:26:
         8f:3d:45:c8:6b:a0:00:a8:72:e5:96:21:58:7f:49:c7:29:50:
         dc:76:8f:79:28:de:23:4c:16:53:e3:cb:74:c4:cc:96:73:c0:
         35:f9:77:7c:8f:30:e2:82:55:7d:88:66:3a:61:7e:59:cc:4f:
         bf:5e:9a:6a:d2:96:be:ed:7b:fc:d9:67:59:fd:ff:3b:e2:fb:
         31:63:a5:6f:7e:60:25:94:27:6c:d7:6b:26:04:2f:17:4d:80:
         69:4a:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 09:50:43 2025 by rpki-client