Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier:          qodB55e7mFc4HYoeeeGCeE2bfeL+qi3JgDG8+tKxXCo=
Subject key identifier:   9F:2F:C2:79:7D:14:6B:FC:54:F6:30:CA:9F:2E:2E:AC:0A:44:FE:0E
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer:       /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial:       038B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number:          0388
Signing time:             Sat 07 Jun 2025 01:09:23 +0000
Manifest this update:     Sat 07 Jun 2025 01:09:22 +0000
Manifest next update:     Sat 14 Jun 2025 01:09:22 +0000
Files and hashes:         1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: kzoyr+rAxM05xZ7FIKcywAMcHXLfoIkx+O7r27Wmauk=)
                          2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: c/Zvm427kENiAideE2yc17TlzEqhW1utfEK6NB9dveM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 01:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Validity
            Not Before: Jun  7 01:09:22 2025 GMT
            Not After : Jun 14 01:09:22 2025 GMT
        Subject: CN=68439143-bbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:d3:06:68:af:1c:8e:30:7d:17:f6:e2:23:
                    fe:fc:6f:a2:2f:c3:03:3b:21:c5:01:85:64:b5:ef:
                    06:6f:8f:57:2c:55:c8:11:b4:da:2e:db:f1:23:d5:
                    c6:59:10:27:ef:78:e1:91:72:cc:08:23:db:31:14:
                    c0:32:f2:c1:e8:50:8a:d7:48:8f:af:e3:bf:a2:03:
                    29:bc:69:4f:85:8c:a2:d1:18:a5:d0:04:39:90:2d:
                    72:a8:d4:83:b8:3b:af:15:78:d9:19:a8:90:44:7d:
                    c4:02:b2:ea:d6:db:43:7a:97:50:f9:2b:ce:ae:50:
                    84:48:16:65:fb:f5:ec:51:3e:c5:a0:84:cc:e7:69:
                    8b:eb:26:d0:3b:6b:ef:56:6f:41:02:20:a9:c6:74:
                    c6:59:be:df:4c:47:98:3d:bc:88:6d:9e:5b:11:09:
                    01:a4:ec:6a:ab:53:70:51:30:85:57:83:05:47:4a:
                    33:11:68:13:25:77:55:01:e0:03:4d:41:a3:e2:79:
                    38:8b:b1:17:92:09:cc:82:36:80:85:62:ff:ca:6c:
                    36:f8:c6:57:38:13:fd:5a:e6:78:42:10:df:62:4c:
                    2f:db:62:af:7c:c0:a6:a7:e7:d3:e3:ce:f3:21:cc:
                    a9:23:06:e4:c5:31:bb:f0:43:84:aa:36:48:45:97:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:C2:79:7D:14:6B:FC:54:F6:30:CA:9F:2E:2E:AC:0A:44:FE:0E
            X509v3 Authority Key Identifier:
                keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b6:c8:ba:bd:ab:de:28:09:a4:18:20:0f:32:a4:ce:58:e0:
         3b:22:3f:c4:bc:f7:46:54:aa:1c:47:dd:25:c3:94:15:95:25:
         ed:4c:87:57:bb:0c:71:fd:f2:df:e8:e5:d1:7e:07:36:a6:3f:
         76:cf:0a:06:35:0e:90:29:ab:bb:a3:fc:a1:f7:99:62:fb:b7:
         51:1b:8f:b6:6a:fa:b4:c9:ce:fd:cb:ad:5a:9d:58:a0:ca:1e:
         34:21:47:cc:97:07:a9:ed:e2:67:5a:36:f3:f3:e9:83:13:ed:
         59:db:d5:bc:b0:38:da:17:40:e0:e9:b2:70:dd:12:53:c6:8f:
         2f:0b:00:74:50:ab:70:2b:51:8c:27:62:a0:c3:67:2e:e2:46:
         18:b4:3b:19:61:b5:92:f6:9c:dc:83:06:7f:53:0d:68:f0:12:
         b1:8e:7d:b8:45:aa:36:aa:14:11:33:7b:1e:87:d6:82:c2:da:
         aa:f0:52:40:03:9c:7f:11:81:d0:3b:a9:00:91:5f:3b:cb:07:
         0c:73:38:66:1d:de:c5:5f:8b:30:32:e3:2d:8f:a2:a0:8e:de:
         96:24:ac:54:2a:59:c1:f4:6a:27:8b:1f:50:eb:2d:30:4d:2b:
         47:f0:6d:eb:ff:51:d8:36:4d:59:94:ab:be:03:44:60:9c:83:
         07:84:7d:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA0MzIxMTAvBgNVBAUTKEVBREU4Njg1OTIxMTcwNDQzMkE4MTlCODE4OTlCNjBD
NUQzRERFOEIwHhcNMjUwNjA3MDEwOTIyWhcNMjUwNjE0MDEwOTIyWjAYMRYwFAYD
VQQDEw02ODQzOTE0My1iYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAreDTBmivHI4wfRf24iP+/G+iL8MDOyHFAYVkte8Gb49XLFXIEbTaLtvxI9XG
WRAn73jhkXLMCCPbMRTAMvLB6FCK10iPr+O/ogMpvGlPhYyi0Ril0AQ5kC1yqNSD
uDuvFXjZGaiQRH3EArLq1ttDepdQ+SvOrlCESBZl+/XsUT7FoITM52mL6ybQO2vv
Vm9BAiCpxnTGWb7fTEeYPbyIbZ5bEQkBpOxqq1NwUTCFV4MFR0ozEWgTJXdVAeAD
TUGj4nk4i7EXkgnMgjaAhWL/ymw2+MZXOBP9WuZ4QhDfYkwv22KvfMCmp+fT487z
IcypIwbkxTG78EOEqjZIRZfyPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8vwnl9
FGv8VPYwyp8uLqwKRP4OMB8GA1UdIwQYMBaAFOrehoWSEXBEMqgZuBiZtgxdPd6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9FQzY5MkYwNEE0
Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNFUXlxQm00R0ptMkRGMDkz
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzZ0NkdoWklSY0VReXFCbTRHSm0yREYwOTNvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDQzMi9FQzY5MkYwNEE0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNF
UXlxQm00R0ptMkRGMDkzb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwtsi6vaveKAmkGCAPMqTOWOA7Ij/EvPdGVKocR90lw5QVlSXtTIdX
uwxx/fLf6OXRfgc2pj92zwoGNQ6QKau7o/yh95li+7dRG4+2avq0yc79y61anVig
yh40IUfMlwep7eJnWjbz8+mDE+1Z29W8sDjaF0Dg6bJw3RJTxo8vCwB0UKtwK1GM
J2Kgw2cu4kYYtDsZYbWS9pzcgwZ/Uw1o8BKxjn24Rao2qhQRM3seh9aCwtqq8FJA
A5x/EYHQO6kAkV87ywcMczhmHd7FX4swMuMtj6Kgjt6WJKxUKlnB9Gonix9Q6y0w
TStH8G3r/1HYNk1ZlKu+A0RgnIMHhH2h
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:13:15 2025 by rpki-client