Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
File:                     s6HqYHo_df54qoQuuJCSWZEQ_cY.mft (raw, json)
Hash identifier:          nM+TZS8CpY3qkwchwP+OYHJKI51I3k0uCq1sDgLbuoA=
Subject key identifier:   93:A7:0F:C5:D2:37:F4:FC:4F:63:DC:70:47:E6:8C:BD:EB:F1:D1:C4
Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
Certificate issuer:       /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
Manifest number:          7E
Signing time:             Fri 05 Sep 2025 07:12:24 +0000
Manifest this update:     Fri 05 Sep 2025 07:12:24 +0000
Manifest next update:     Fri 12 Sep 2025 07:12:24 +0000
Files and hashes:         1: s6HqYHo_df54qoQuuJCSWZEQ_cY.crl (hash: tiUbmqUwhlOrKTmsga40W4AyFHx5nfHKtfoT5bIjbik=)
                          2: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (hash: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl
                          rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 07:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
        Validity
            Not Before: Sep  5 07:12:24 2025 GMT
            Not After : Sep 12 07:12:24 2025 GMT
        Subject: CN=68ba8d58-5611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:69:48:38:30:90:1a:78:cb:8f:9a:85:ce:
                    be:c8:df:b2:4a:ff:5a:eb:33:d3:f7:23:d1:25:5a:
                    3a:88:00:e9:7a:07:11:1f:d8:ce:38:0f:ef:81:cf:
                    b4:81:a4:4c:ed:4f:98:e8:9a:42:06:6d:01:c8:9b:
                    73:d6:5a:a6:1b:1e:db:ff:5c:ec:a7:8c:68:8f:5d:
                    c0:39:b4:76:f8:e3:6f:ab:0e:da:aa:fb:6c:35:a4:
                    3a:3a:30:2c:c9:25:0b:b3:fb:b1:49:dd:b4:62:8a:
                    62:46:23:51:b1:76:1f:51:1b:28:9a:92:c6:45:a7:
                    65:66:ba:03:9c:1f:80:75:a7:b6:c5:7a:45:59:3a:
                    8d:38:76:54:e5:5a:74:3f:a7:30:8c:bb:b9:60:2d:
                    d1:7e:e0:a2:10:16:90:f1:f5:85:02:94:cd:fa:da:
                    5a:fb:f1:ab:9d:20:40:2e:76:4b:87:26:70:40:7a:
                    3e:96:64:e5:59:8a:a5:c2:ec:e6:1b:cb:c4:d9:c6:
                    9e:15:f1:4e:8b:dc:b3:27:d4:59:76:41:8f:a1:1b:
                    15:53:18:c5:7f:c5:5f:39:71:d3:00:eb:48:75:8b:
                    9a:fd:f8:71:11:d3:3c:2f:85:41:7c:12:76:75:19:
                    27:8e:e2:11:a9:e7:f7:a9:79:61:73:c6:1f:92:49:
                    5d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:0F:C5:D2:37:F4:FC:4F:63:DC:70:47:E6:8C:BD:EB:F1:D1:C4
            X509v3 Authority Key Identifier:
                keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:38:93:04:8a:5f:45:c6:3d:9c:0d:2f:22:87:0d:88:a7:3b:
         3f:f2:9d:9b:64:87:83:a5:25:63:4e:42:52:29:ed:88:a5:81:
         45:5e:b0:7c:21:23:aa:8b:33:63:53:bd:dc:37:39:21:f4:a5:
         c1:09:a6:b9:47:fd:5e:fb:a6:42:0f:d3:b3:93:83:2d:d2:3f:
         e1:9e:ce:30:ca:00:af:60:65:5f:a4:09:1b:e8:27:54:ce:94:
         6d:d6:73:07:b0:29:a5:aa:27:b8:30:1f:c7:a9:d1:36:bb:f0:
         35:25:f6:76:4a:57:58:f4:2b:71:ec:be:b0:e7:94:cd:68:92:
         de:0f:af:f6:49:c9:0e:d2:c9:2d:25:35:2f:e0:25:33:b8:96:
         23:b9:2f:82:b3:4c:a6:24:ee:36:aa:61:4d:ed:f5:30:c3:dd:
         8e:66:9e:1b:cd:0d:f0:bd:85:2e:93:3e:39:2c:8b:61:ae:bf:
         ba:d1:ed:0a:d7:3a:6e:20:51:77:37:38:39:15:6d:de:56:2a:
         5f:75:6f:9b:ec:94:22:ef:f7:40:aa:7c:42:ce:31:b4:b7:fd:
         17:0a:98:79:07:2e:40:00:48:5d:81:0a:62:85:53:d7:68:7a:
         80:b7:9a:5f:15:7b:86:77:26:bd:4b:96:b6:88:cc:04:96:c0:
         d3:82:0f:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjVCQ0MxMTAvBgNVBAUTKEIzQTFFQTYwN0EzRjc1RkU3OEFBODQyRUI4OTA5MjU5
OTExMEZEQzYwHhcNMjUwOTA1MDcxMjI0WhcNMjUwOTEyMDcxMjI0WjAYMRYwFAYD
VQQDEw02OGJhOGQ1OC01NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnPZpSDgwkBp4y4+ahc6+yN+ySv9a6zPT9yPRJVo6iADpegcRH9jOOA/vgc+0
gaRM7U+Y6JpCBm0ByJtz1lqmGx7b/1zsp4xoj13AObR2+ONvqw7aqvtsNaQ6OjAs
ySULs/uxSd20YopiRiNRsXYfURsompLGRadlZroDnB+Adae2xXpFWTqNOHZU5Vp0
P6cwjLu5YC3RfuCiEBaQ8fWFApTN+tpa+/GrnSBALnZLhyZwQHo+lmTlWYqlwuzm
G8vE2caeFfFOi9yzJ9RZdkGPoRsVUxjFf8VfOXHTAOtIdYua/fhxEdM8L4VBfBJ2
dRknjuIRqef3qXlhc8YfkkldNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOnD8XS
N/T8T2PccEfmjL3r8dHEMB8GA1UdIwQYMBaAFLOh6mB6P3X+eKqELriQklmREP3G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUJDQy9CMTE4MUIxMENF
NzgxMUVGODBFRjRENDRDNEY5QUUwMi9zNkhxWUhvX2RmNTRxb1F1dUpDU1daRVFf
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3M2SHFZSG9fZGY1NHFvUXV1SkNTV1pFUV9jWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NUJDQy9CMTE4MUIxMENFNzgxMUVGODBFRjRENDRDNEY5QUUwMi9zNkhxWUhvX2Rm
NTRxb1F1dUpDU1daRVFfY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbOJMEil9Fxj2cDS8ihw2Ipzs/8p2bZIeDpSVjTkJSKe2IpYFFXrB8
ISOqizNjU73cNzkh9KXBCaa5R/1e+6ZCD9Ozk4Mt0j/hns4wygCvYGVfpAkb6CdU
zpRt1nMHsCmlqie4MB/HqdE2u/A1JfZ2SldY9Ctx7L6w55TNaJLeD6/2SckO0skt
JTUv4CUzuJYjuS+Cs0ymJO42qmFN7fUww92OZp4bzQ3wvYUukz45LIthrr+60e0K
1zpuIFF3Nzg5FW3eVipfdW+b7JQi7/dAqnxCzjG0t/0XCph5By5AAEhdgQpihVPX
aHqAt5pfFXuGdya9S5a2iMwElsDTgg+A
-----END CERTIFICATE-----
Generated at Sat Sep 6 21:12:15 2025 by rpki-client