Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File:                     6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier:          3jGTTeDyD0vqZsjFvU1zbARMX3XacNIOTlJW/x2Wd5c=
Subject key identifier:   C3:0D:43:B5:14:50:49:63:09:A7:72:30:FD:DE:3C:DB:CF:4B:C3:AD
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer:       /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number:          0388
Signing time:             Fri 13 Jun 2025 00:24:54 +0000
Manifest this update:     Fri 13 Jun 2025 00:24:53 +0000
Manifest next update:     Fri 20 Jun 2025 00:24:53 +0000
Files and hashes:         1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: dFuhIy/pPCC1egCqabzj5SsZw1jW8VjC+fXNXQmq9Kk=)
                          2: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: lo57P9VBB46ycGdmIW/WQMt7Bnu1G5Vu55lF8eOkAJo=)
                          3: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: pjuKTxitr3okr7uU46xmlWjTNZ4Ce4fMa5LiHSn7lO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
                          rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
        Validity
            Not Before: Jun 13 00:24:53 2025 GMT
            Not After : Jun 20 00:24:53 2025 GMT
        Subject: CN=684b6fd6-c563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:32:f3:f5:f1:fc:e3:ac:e1:18:46:ae:98:
                    95:20:8c:34:94:ed:32:d2:35:89:c3:12:24:12:60:
                    89:4b:3a:e6:b3:51:db:62:8b:b7:30:08:7c:a7:5f:
                    3e:0a:8c:67:b5:3a:4f:07:ee:c4:02:96:45:1f:f6:
                    23:ee:52:91:21:87:1c:60:2f:b7:2c:0c:7a:04:31:
                    7e:74:e4:21:f5:72:68:d5:df:f2:54:36:33:bd:c1:
                    2c:42:2f:03:0b:47:35:97:12:fa:04:77:c4:16:a2:
                    88:81:62:9a:ff:e1:f0:6f:f9:0b:9b:55:a5:f7:c4:
                    05:dc:32:22:80:1a:f8:d3:c5:d3:2c:1d:2c:aa:06:
                    fb:93:9a:17:ca:69:f6:11:c4:92:5c:1e:88:61:70:
                    ec:23:0b:36:1c:ee:c4:39:2e:d5:b9:51:11:bf:31:
                    e8:bb:44:f4:ba:c0:ed:fc:21:17:96:86:22:3f:fa:
                    f2:e8:c0:82:56:ee:39:9c:7a:90:ee:5b:79:78:d0:
                    b6:64:fa:e5:85:9b:e0:99:0f:0d:f3:aa:82:6d:b4:
                    9f:62:20:7f:ee:ef:e6:1d:76:eb:35:fd:f8:53:93:
                    5c:70:cb:17:6c:f7:76:91:bd:96:33:3f:2d:d7:90:
                    b3:41:80:69:ed:1c:0a:29:84:fe:47:87:b7:b9:a1:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:43:B5:14:50:49:63:09:A7:72:30:FD:DE:3C:DB:CF:4B:C3:AD
            X509v3 Authority Key Identifier:
                keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:27:5f:d4:48:33:88:27:19:17:4c:ec:72:c0:80:e5:7e:91:
         9d:89:71:1b:2d:78:d2:38:38:6f:d2:e7:2d:1f:7e:d9:70:6f:
         a6:bf:83:3b:e3:36:04:1a:32:e9:1e:f8:06:10:71:6f:79:8e:
         fc:98:eb:05:8f:da:bd:5e:c9:72:85:cc:be:97:a8:74:46:ea:
         cd:5a:40:df:b6:0f:32:5b:0f:ff:d3:3b:56:33:dd:52:47:53:
         ee:e1:22:26:a8:5d:dd:0e:47:e9:ed:fa:f9:31:ab:cb:3a:6f:
         3e:9a:c7:91:65:86:2c:f4:45:08:bd:ae:77:ff:0c:cc:2a:3f:
         d3:9d:14:fb:66:b5:2a:4e:19:6b:36:d8:19:f6:94:d8:6e:0c:
         3d:a6:b2:d0:e6:70:18:4b:87:5f:87:86:25:ce:58:03:75:d1:
         ca:87:95:e6:ec:05:51:f3:33:a8:1e:37:52:e6:35:d9:48:e4:
         be:f6:56:b8:3e:6c:5c:32:2e:3a:99:9d:c2:3a:74:00:3b:7a:
         4b:52:bd:70:43:eb:e0:14:dd:19:39:13:c3:c6:cf:96:26:d2:
         cb:73:6e:d4:cb:95:0a:da:d0:ed:7e:11:68:a1:f2:44:21:6d:
         84:4f:bd:cd:5d:07:ce:ce:78:27:28:1c:e1:4d:00:15:dc:fe:
         6b:7b:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:29:31 2025 by rpki-client