Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
File:                     6A9XgW64BohdxesewuGtVKL58t8.mft (raw, json)
Hash identifier:          PgbPuY2mPSD1vE3C7ZzZ2grd+PoxhlbNqTUUqWJDSI8=
Subject key identifier:   DD:E7:A6:13:9C:40:8A:C1:D3:3E:68:0C:FE:17:AA:B3:D1:5F:DD:CA
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Certificate issuer:       /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial:       0824
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
Manifest number:          0816
Signing time:             Wed 20 Aug 2025 20:57:34 +0000
Manifest this update:     Wed 20 Aug 2025 20:57:33 +0000
Manifest next update:     Wed 27 Aug 2025 20:57:33 +0000
Files and hashes:         1: 6A9XgW64BohdxesewuGtVKL58t8.crl (hash: Tf2XnrM3HYBTCLy5M3EvkS/pWio48iH2RnoK7UX30eY=)
                          2: F95379BE124411EB9E551E38C4F9AE02.roa (hash: hzhgTWFnab8T39Mu9sUJRnqHMQMLHx+/is4D+pExOhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 20:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA19, serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
        Validity
            Not Before: Aug 20 20:57:33 2025 GMT
            Not After : Aug 27 20:57:33 2025 GMT
        Subject: CN=68a636be-9ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:f1:b9:5b:71:ec:d1:bd:39:cc:07:25:0b:
                    c7:41:ca:fa:34:31:35:17:9e:7e:51:23:bb:95:11:
                    74:e7:82:7d:75:89:60:85:7b:c7:15:1b:5b:bf:af:
                    5e:05:fd:90:0e:bf:c7:cd:b4:0b:0a:f8:c3:b8:68:
                    7e:6b:ae:59:5e:17:47:dd:ad:b4:93:7e:dc:3f:de:
                    dd:da:85:83:ec:33:6c:a2:bf:16:4c:d8:b8:d9:0c:
                    68:18:4a:5b:dd:2c:4f:74:41:37:62:0e:64:9d:27:
                    d6:64:ce:dd:20:e3:ec:41:c3:e4:65:c7:4c:97:bb:
                    80:21:d2:97:6c:81:60:99:38:35:17:b8:56:fd:4e:
                    c9:ca:c2:f6:b0:75:77:7e:dd:11:64:b5:5a:68:b5:
                    a7:df:0d:b1:7e:4b:4b:47:92:d9:86:ae:86:4a:65:
                    e9:0f:a0:42:38:1e:5b:63:0f:83:fd:51:1b:94:55:
                    db:bc:c3:42:9f:fa:b5:30:5b:5a:a8:a9:f7:d8:6e:
                    b7:fd:c0:f6:4b:51:41:2c:0f:fc:c4:0a:a1:7f:37:
                    19:8e:e9:04:80:6e:59:cb:c9:12:1f:84:84:b6:dc:
                    bc:7f:b9:87:82:08:1b:e8:1e:4d:53:f4:ad:17:d2:
                    69:d5:3a:00:a2:07:3d:72:6e:27:2b:9e:ac:75:b4:
                    b9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E7:A6:13:9C:40:8A:C1:D3:3E:68:0C:FE:17:AA:B3:D1:5F:DD:CA
            X509v3 Authority Key Identifier:
                keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:46:d2:2a:30:20:2c:0e:d6:44:0b:28:9f:5c:2a:4d:8b:
         3b:09:34:1a:ee:57:df:cb:41:ab:27:36:bd:4e:4f:8f:2a:1a:
         2a:11:00:a9:b3:f6:5b:e5:22:74:2a:f0:6e:25:13:fb:d9:a2:
         cb:69:75:08:e6:e2:4d:1b:63:f2:26:eb:d0:5b:4a:1a:76:e8:
         66:6b:1f:0c:d0:65:00:0c:7b:e6:84:53:24:27:ba:60:16:a3:
         89:e8:37:54:8a:d6:82:0b:b9:e5:15:12:92:86:1e:58:fa:a0:
         8a:80:4c:45:0e:f8:31:c7:b6:17:43:d4:05:cd:5e:2e:99:93:
         06:18:f6:22:09:29:dc:dc:f7:de:38:2b:8b:e8:bb:b8:30:b3:
         fb:5f:e8:68:11:9a:9a:26:82:58:8f:1d:dc:5a:e3:67:7d:de:
         20:9b:47:9c:1b:c8:5d:f1:f5:6d:44:f0:5a:b8:52:89:ab:c5:
         99:6c:a2:a8:ed:00:ed:e2:57:f2:b8:22:32:52:86:e6:d9:71:
         17:f5:b2:03:ad:07:bc:08:17:c4:57:12:c7:ac:ff:53:22:30:
         7d:41:bc:f7:84:55:b0:f4:1d:24:86:26:99:6f:24:62:c0:84:
         85:f4:d0:33:6c:70:57:c1:fc:23:0d:a8:13:76:b5:73:2b:cc:
         b4:c2:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:32:11 2025 by rpki-client