Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
File:                     6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json)
Hash identifier:          N5B5IRpk39Atxn8zDKN+3TTFPsiB64GNMadsr7c9RcY=
Subject key identifier:   F6:A0:6D:B7:46:CE:F8:37:49:88:85:00:B1:6F:91:81:D4:F6:B9:1E
Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A
Certificate issuer:       /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
Certificate serial:       1252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
Manifest number:          1247
Signing time:             Thu 18 Sep 2025 17:16:17 +0000
Manifest this update:     Thu 18 Sep 2025 17:16:17 +0000
Manifest next update:     Thu 25 Sep 2025 17:16:17 +0000
Files and hashes:         1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: ZusTZchuAzNxERgYpMVqdIPLQyYGwPl6apstNvmW6rs=)
                          2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: x0pbE7Ea3sKXTfydYa2BTBmjtzbK1GRSFoSpJkmD3Ks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 17:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4690 (0x1252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
        Validity
            Not Before: Sep 18 17:16:17 2025 GMT
            Not After : Sep 25 17:16:17 2025 GMT
        Subject: CN=68cc3e61-2d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:80:5b:3c:a6:19:8e:e2:68:92:43:5e:7e:
                    11:98:25:ad:c6:03:c6:8a:56:8f:87:bc:73:1b:b0:
                    2c:5a:4b:72:c7:28:bc:ff:1a:78:33:94:94:d5:1e:
                    b4:5b:3d:23:69:53:e9:ab:41:13:a9:9f:21:e1:62:
                    de:eb:13:7d:bf:c2:a8:b9:b5:16:0d:e0:56:43:03:
                    03:31:06:2d:17:07:ad:73:f0:04:0b:82:42:48:f0:
                    2c:c9:70:e5:f8:12:bb:92:18:b9:44:34:74:a4:36:
                    80:a8:8f:c6:63:01:5f:fc:9f:4a:8e:a4:93:b0:25:
                    cc:df:38:dd:21:01:5c:30:df:4b:25:9b:78:3a:de:
                    0b:6a:a1:6f:db:54:24:21:3a:bd:1f:ac:02:2e:ce:
                    59:97:6f:b8:fe:c4:64:83:ae:29:2d:0c:d8:42:39:
                    a3:d3:c3:e9:a1:7e:f7:ea:c3:3b:f2:ae:fb:8e:e5:
                    4c:08:08:26:41:5a:56:50:53:f2:e9:cf:6c:f3:c3:
                    c0:1e:42:21:14:a4:42:72:26:93:62:e4:f9:ae:40:
                    3c:2b:a8:ce:98:a9:f5:1c:5b:be:66:0f:eb:45:f9:
                    2d:05:b6:c6:8e:db:29:c5:a1:f0:38:fe:0c:67:09:
                    a8:93:d9:89:09:6f:03:8c:26:dd:47:34:7f:69:98:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:6D:B7:46:CE:F8:37:49:88:85:00:B1:6F:91:81:D4:F6:B9:1E
            X509v3 Authority Key Identifier:
                keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:18:a2:a0:6d:3d:93:43:03:e8:d9:8a:48:96:b8:77:eb:17:
         e8:d9:f9:55:d0:32:0e:9c:bd:2b:5f:1b:56:06:e6:2e:58:36:
         c0:3c:3f:3c:b6:4c:3e:e6:7c:f6:8c:c7:32:63:b0:25:73:fd:
         b3:67:64:28:14:b9:8e:1f:4c:4c:56:5a:99:5f:d2:ae:b8:d0:
         57:30:cd:2b:53:76:2f:cf:72:05:6e:a7:fd:d1:d6:e6:15:40:
         87:89:07:fc:82:88:58:8b:7f:6d:b2:38:47:86:7f:c1:80:ce:
         9b:3e:bd:54:b1:b7:5a:31:e6:c5:0d:40:24:9c:57:e8:20:36:
         ac:ad:88:df:cf:8e:7e:b5:c6:df:d0:65:36:16:82:e6:73:1e:
         a7:74:e9:f5:2f:67:ee:15:f7:25:20:4f:e6:35:34:b9:b4:77:
         d0:ad:bf:0a:00:bf:46:5b:fb:d6:fd:8c:74:b0:a4:fa:12:56:
         1e:7f:c8:04:ba:00:a2:50:fe:1c:b9:a2:0e:4a:1f:c4:27:33:
         b8:da:1a:e5:0d:52:fa:81:ed:fe:e3:a9:18:1a:c4:79:54:ae:
         da:16:87:26:c6:f4:6c:fa:af:8e:c2:02:23:8e:1d:48:d8:22:
         d9:c2:c7:c5:2c:3f:1a:f6:de:c1:c4:64:44:46:bc:bc:9d:b0:
         79:1a:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:45:24 2025 by rpki-client