Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File:                     6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier:          T5q/TRynmcL8Fkj8p7162LvKPepTwofMIHdOC0SORz4=
Subject key identifier:   54:0E:1E:36:9A:F6:6F:CC:82:A5:94:0B:65:DB:CF:EE:A7:D0:44:4D
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer:       /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number:          62
Signing time:             Tue 01 Jul 2025 07:57:15 +0000
Manifest this update:     Tue 01 Jul 2025 07:57:14 +0000
Manifest next update:     Tue 08 Jul 2025 07:57:14 +0000
Files and hashes:         1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: V99qwL2XyMjzE7Qp882UJWCUm8vrbW9dS1Kq+R8mqUI=)
                          2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: vja+a7NVCjcQj64L0y6ot3hr8lpW0YLqwI3TCyIsiEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 07:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
        Validity
            Not Before: Jul  1 07:57:14 2025 GMT
            Not After : Jul  8 07:57:14 2025 GMT
        Subject: CN=686394db-8ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:93:3d:00:ee:e0:1f:33:89:80:ff:a5:7b:de:
                    9c:0b:88:56:60:24:ef:e7:8f:50:68:4c:12:9d:a0:
                    c3:e0:d3:b6:ca:d7:a0:bb:82:0e:fe:d7:1d:3c:eb:
                    fe:f4:70:76:b6:9d:ab:a0:d4:3c:a4:09:fc:52:93:
                    67:cd:03:3b:66:d3:ea:61:5a:30:5c:f1:a3:ef:d5:
                    fc:f1:9d:c0:9d:05:56:50:aa:64:92:f7:c4:94:66:
                    54:e3:4c:6a:f3:0f:09:32:33:11:bc:5d:c8:ca:91:
                    5b:73:7a:7c:ba:c1:7a:f3:41:67:ed:77:28:6a:62:
                    45:e1:63:38:bb:9d:18:32:29:79:e5:a2:fa:4c:e4:
                    e4:e0:4a:4b:2a:78:51:ca:71:58:bb:53:0e:e2:12:
                    d4:a8:6d:10:8d:e1:5e:ee:54:d7:2e:f3:d7:55:00:
                    bf:c3:da:d7:d0:e2:b9:1f:db:3d:c6:9f:be:28:35:
                    c3:b8:7f:6c:29:ce:59:9b:d5:03:98:02:ab:43:14:
                    e9:4f:1e:0c:95:11:92:1b:0d:6a:d1:e3:5d:86:e5:
                    90:ea:33:d2:ed:d2:3b:4d:cf:6d:c1:7b:1d:91:cb:
                    a5:0d:57:cb:9d:b6:5a:85:56:0d:53:b2:c3:59:e3:
                    ca:e4:22:a7:44:c3:49:0d:bb:15:6c:8f:5f:e4:65:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0E:1E:36:9A:F6:6F:CC:82:A5:94:0B:65:DB:CF:EE:A7:D0:44:4D
            X509v3 Authority Key Identifier:
                keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:bc:db:b9:7a:38:29:24:bc:f3:d7:1b:1b:7d:2d:09:92:
         89:75:80:01:ff:1c:7d:ec:c6:37:9c:ee:6d:07:bf:38:4b:ff:
         95:02:ff:2f:f3:1e:a3:e9:dc:c3:aa:5e:b2:c6:4c:93:0b:fe:
         08:4e:f6:74:d7:a9:e1:4d:aa:b2:a4:77:e3:f9:5c:d3:e7:f6:
         49:c9:c4:ad:55:ed:25:a6:c8:55:55:ef:2a:73:a7:f7:3a:cd:
         14:78:e3:71:9a:34:6e:32:c6:a9:a2:f6:3e:83:a0:e5:c4:d9:
         55:c4:d7:e8:83:69:c8:06:f6:db:76:9d:db:c9:2b:1a:d8:9b:
         18:ee:e8:ab:e8:fb:a4:e6:cc:1e:1e:6d:4e:99:dc:23:df:16:
         44:81:71:42:69:a5:17:95:14:48:52:f2:73:5e:ee:91:ee:6f:
         b0:f9:ec:cc:0f:49:99:db:dd:e3:96:e0:4b:bd:a6:76:03:16:
         4a:82:19:2d:a1:23:d7:cf:6a:10:d0:36:29:b8:27:6d:51:dc:
         dd:d1:5c:86:36:2f:2c:e6:e5:ce:38:c2:39:f4:d1:b3:ab:ee:
         e2:b8:c3:f1:a2:43:33:22:7a:df:3f:27:a7:ac:d4:39:cb:1a:
         b0:6d:eb:2f:6b:7a:ed:c4:1e:51:cc:7f:7c:c4:13:e5:b3:eb:
         96:6a:05:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OTA4MzExMC8GA1UEBRMoRThDRjIyQTA4RTQzOTFDQUQxNTBGQTMxQjQ0REM5M0M4
QUI4MjVFQTAeFw0yNTA3MDEwNzU3MTRaFw0yNTA3MDgwNzU3MTRaMBgxFjAUBgNV
BAMTDTY4NjM5NGRiLThlYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDqkz0A7uAfM4mA/6V73pwLiFZgJO/nj1BoTBKdoMPg07bK16C7gg7+1x086/70
cHa2naug1DykCfxSk2fNAztm0+phWjBc8aPv1fzxncCdBVZQqmSS98SUZlTjTGrz
DwkyMxG8XcjKkVtzeny6wXrzQWftdyhqYkXhYzi7nRgyKXnlovpM5OTgSksqeFHK
cVi7Uw7iEtSobRCN4V7uVNcu89dVAL/D2tfQ4rkf2z3Gn74oNcO4f2wpzlmb1QOY
AqtDFOlPHgyVEZIbDWrR412G5ZDqM9Lt0jtNz23Bex2Ry6UNV8udtlqFVg1TssNZ
48rkIqdEw0kNuxVsj1/kZWTTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVA4eNpr2
b8yCpZQLZdvP7qfQRE0wHwYDVR0jBBgwFoAU6M8ioI5DkcrRUPoxtE3JPIq4Jeow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0MwNkYyRTQyRDFC
MDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEpl
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNk04aW9JNURrY3JSVVBveHRFM0pQSXE0SmVvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5
MDgzL0MwNkYyRTQyRDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2Ny
UlVQb3h0RTNKUElxNEplby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAK6OvNu5ejgpJLzz1xsbfS0Jkol1gAH/HH3sxjec7m0HvzhL/5UC/y/z
HqPp3MOqXrLGTJML/ghO9nTXqeFNqrKkd+P5XNPn9knJxK1V7SWmyFVV7ypzp/c6
zRR443GaNG4yxqmi9j6DoOXE2VXE1+iDacgG9tt2ndvJKxrYmxju6Kvo+6TmzB4e
bU6Z3CPfFkSBcUJppReVFEhS8nNe7pHub7D57MwPSZnb3eOW4Eu9pnYDFkqCGS2h
I9fPahDQNim4J21R3N3RXIY2Lyzm5c44wjn00bOr7uK4w/GiQzMiet8/J6es1DnL
GrBt6y9reu3EHlHMf3zEE+Wz65ZqBTA=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:47:26 2025 by rpki-client