Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
File:                     bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json)
Hash identifier:          Ls1A8gHrA4m41vJH1WwPmblDqLFBfVLiCkUkeDxNOJQ=
Subject key identifier:   B1:11:DE:17:8F:9E:AF:0F:76:2C:3F:D1:F5:38:CD:25:36:E6:20:D9
Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Certificate issuer:       /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
Manifest number:          1C06
Signing time:             Sun 08 Jun 2025 16:09:44 +0000
Manifest this update:     Sun 08 Jun 2025 16:09:43 +0000
Manifest next update:     Sun 15 Jun 2025 16:09:43 +0000
Files and hashes:         1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: KgTbz2Q2Tf9bF93fkaCpvQeLQhspBiVNATfkQ/Kv2/4=)
                          2: FFD6AB1040F411F08D8C204AC4F9AE02.roa (hash: novXxq/0mXKb7U7jlNZr6o9F+QMifFDd2ME5nghhCqM=)
                          3: 004DF1E840F511F08D8C204AC4F9AE02.roa (hash: rddsHZsaPwcw+sXciuJEszm6Xus+osPBkEyPEn5BkTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 16:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
        Validity
            Not Before: Jun  8 16:09:43 2025 GMT
            Not After : Jun 15 16:09:43 2025 GMT
        Subject: CN=6845b5c7-b5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:63:e0:fa:e9:91:fe:56:4b:52:74:0b:c5:
                    81:29:b4:72:66:4f:79:2e:f6:ac:0f:d6:19:3b:18:
                    3a:64:4e:8a:45:d0:8d:37:12:50:5b:97:f3:03:30:
                    f1:e9:4e:c1:bd:c9:44:e2:aa:52:0c:b9:84:a9:37:
                    11:25:3e:d1:fd:f3:42:90:7d:c9:36:0d:88:34:b8:
                    fb:f0:1a:24:59:eb:ea:59:92:29:6b:32:3b:b8:ca:
                    bf:c1:a8:a5:de:c7:ae:a6:65:2f:a9:db:ef:a2:da:
                    13:e3:7e:ae:8e:36:43:c0:6a:72:60:32:bf:50:d8:
                    e1:e1:97:96:68:28:5e:f9:c4:ca:89:db:9d:3f:72:
                    1e:86:87:f5:bd:e9:19:f6:0a:08:37:d9:5d:3b:b6:
                    d6:73:e0:0f:ad:18:86:3d:e4:41:a5:41:45:81:94:
                    f4:01:3e:a4:ee:5b:f4:27:fa:99:a0:dc:2c:f8:5b:
                    97:4c:9b:4f:81:3d:55:ec:87:90:f3:6b:3a:46:41:
                    56:39:84:6b:eb:59:71:18:7f:82:65:88:1b:49:51:
                    db:50:ff:73:bc:e8:dd:5c:f5:2d:24:3a:47:ec:b0:
                    8d:04:3c:cd:b4:e0:6f:87:6e:31:53:4a:f6:18:9a:
                    29:97:8a:3e:4d:1e:3a:68:26:71:01:fd:1c:5f:14:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:11:DE:17:8F:9E:AF:0F:76:2C:3F:D1:F5:38:CD:25:36:E6:20:D9
            X509v3 Authority Key Identifier:
                keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1d:df:ef:6a:12:9b:74:89:66:e7:bb:9f:d5:d8:b8:a2:d7:
         23:75:7a:1b:32:a3:4f:b0:3f:03:03:45:6e:5f:eb:6a:6e:7f:
         a7:da:f2:0e:f1:7e:fa:41:89:7e:49:b5:4c:d4:50:6a:f6:7b:
         51:95:51:ac:3f:48:cf:1e:51:b2:3c:82:f6:6a:90:b6:ff:93:
         0b:bf:ce:b9:1f:2b:0a:74:bc:d5:e7:bc:3a:ec:ad:af:95:47:
         3a:03:b0:c3:0f:32:1e:76:33:97:ec:9e:3f:85:73:a6:61:35:
         79:d2:e4:a2:15:c8:99:52:99:5e:9e:b6:cd:d5:5c:42:e1:37:
         67:6b:ed:7b:51:40:41:c3:db:31:f7:83:0f:a6:27:c9:6f:1b:
         7b:29:62:49:d9:4a:aa:c0:af:33:75:d7:04:c7:5b:bc:ca:d4:
         25:52:d6:bd:3e:14:2e:fe:fc:17:37:cb:24:91:11:d8:c6:68:
         db:fe:47:10:e1:16:a9:55:3f:c4:50:5e:e1:e6:f0:23:ab:df:
         d4:36:3e:03:00:3a:52:ea:26:e9:a0:85:d4:19:26:50:ff:b5:
         c1:c6:53:85:cf:18:8f:e0:54:a3:2b:f6:37:0a:18:d2:5c:36:
         4e:27:b1:63:bf:7a:de:fd:fd:ff:d3:b4:5a:a9:c8:24:73:b7:
         a3:e7:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:17:22 2025 by rpki-client