Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
File:                     6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft (raw, json)
Hash identifier:          LYaoM9g1GG7yrtMNktTWNNWbYREhbUEDVDsfR4ZkOik=
Subject key identifier:   A2:E9:E6:12:EC:42:29:A6:01:9C:C2:2B:38:36:0F:E0:C2:31:C9:FA
Authority key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
Certificate issuer:       /CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
Certificate serial:       0AC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
Manifest number:          0AC0
Signing time:             Tue 12 Aug 2025 19:44:22 +0000
Manifest this update:     Tue 12 Aug 2025 19:44:21 +0000
Manifest next update:     Tue 19 Aug 2025 19:44:21 +0000
Files and hashes:         1: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl (hash: R/lnquiCMuIGyrxsAqJlQXQxlllioFgRJT5wcDx/pqk=)
                          2: BA767AE8584A11EA91887312C4F9AE02.roa (hash: QzbZM8VI+qrpVgcRdiCcn83mrJ9UmLN8pezGTWNqCvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl
                          rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 19:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2759 (0xac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119635, serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
        Validity
            Not Before: Aug 12 19:44:21 2025 GMT
            Not After : Aug 19 19:44:21 2025 GMT
        Subject: CN=689b9996-f7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:13:0f:9d:e1:7f:67:a5:3a:c4:b2:8b:17:
                    24:f6:95:2a:93:79:93:1f:e8:05:89:b7:89:38:61:
                    7f:2a:14:54:40:a9:d0:6d:7b:22:52:28:a6:3c:23:
                    23:5f:b0:c1:c2:4d:58:ef:9f:a4:66:d8:2a:67:c6:
                    97:0c:c0:c5:b0:52:82:5a:d4:a8:9f:01:bb:ca:51:
                    25:58:04:bb:12:c3:6f:09:36:0a:22:9c:89:cf:29:
                    b0:da:eb:ed:13:5a:56:e5:55:17:6e:52:91:e5:4d:
                    3b:0e:f8:ec:fb:5f:da:5f:fa:f0:59:f8:62:1a:35:
                    6f:89:69:98:60:03:cc:87:2a:cf:91:3e:ff:44:6d:
                    30:e0:2a:3e:e1:5a:67:62:63:82:da:cd:1a:05:2a:
                    7b:e0:7b:d3:1a:df:50:64:c4:cb:46:73:c7:55:f9:
                    68:3e:eb:0d:5d:ba:c6:c7:fe:26:c1:09:41:32:d7:
                    55:3d:69:e6:05:7b:8a:4e:17:86:8c:6a:33:e5:04:
                    f1:cd:61:bd:a7:6d:7b:c4:6a:07:67:af:c4:55:55:
                    2c:b4:79:4d:41:d2:ec:f8:cf:b3:33:47:16:15:7f:
                    bc:f8:27:ba:cd:b0:a1:30:bd:53:86:db:9d:fd:ad:
                    a4:05:f9:7e:62:ba:0f:80:05:31:79:ae:63:92:f5:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E9:E6:12:EC:42:29:A6:01:9C:C2:2B:38:36:0F:E0:C2:31:C9:FA
            X509v3 Authority Key Identifier:
                keyid:EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:de:c8:e6:ff:9b:d1:0c:b2:93:fd:4c:49:ad:f3:7e:23:6c:
         c8:8e:a7:70:b3:56:33:e3:b7:09:de:27:3f:85:68:e0:92:64:
         72:ea:9b:61:e2:18:28:aa:90:5f:43:90:5a:e9:af:fe:9a:11:
         3f:b0:64:3c:6a:24:5c:69:4c:27:3c:f7:7c:29:d7:93:52:9d:
         76:d0:c6:90:6a:54:fa:a3:dc:06:57:a4:dd:77:32:3d:2b:e8:
         1b:0b:34:44:f0:da:44:fc:14:0f:99:93:da:60:f2:f4:22:f1:
         c8:1f:74:f7:bd:2a:3a:0f:a7:ad:e4:f1:83:af:02:b9:ff:35:
         5c:c5:ea:30:39:04:8d:a4:9f:c2:4c:b3:67:dd:03:d2:56:1c:
         07:62:01:a7:e1:b2:51:12:ff:c8:74:d7:3f:6a:cf:f9:ae:c4:
         1c:bb:4b:83:70:3b:57:7b:99:d7:dc:83:a1:de:06:53:7b:82:
         27:d5:e5:7c:f6:ee:11:00:03:b6:da:9a:3a:a0:98:f0:6a:6f:
         e1:81:d5:18:04:bf:5b:6c:46:f5:23:b0:40:9b:db:8e:f5:72:
         05:cd:74:5a:97:7b:c6:ad:2c:49:63:cf:5d:a9:38:f6:e9:64:
         bb:a4:e4:52:b1:b5:75:38:1e:9c:30:3b:60:3f:42:55:f8:7d:
         e0:8c:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:52 2025 by rpki-client