Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
File:                     6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft (raw, json)
Hash identifier:          20ywh6uLLjCJSSEaIXxJZT01wc6Mn0vAIr5LRKKA8SM=
Subject key identifier:   DD:13:46:9C:AB:F4:9D:89:7E:38:49:62:6D:53:44:15:AB:87:50:1A
Authority key identifier: EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21
Certificate issuer:       /CN=A911BE01/serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
Manifest number:          06
Signing time:             Sat 09 Aug 2025 00:45:28 +0000
Manifest this update:     Sat 09 Aug 2025 00:45:27 +0000
Manifest next update:     Sat 16 Aug 2025 00:45:27 +0000
Files and hashes:         1: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl (hash: nhhVEnM3kqD9hv/uIuR/fr7pWhpON2tNw9bA3VhqvNI=)
                          2: 8A2C40D474B911F08BA0CD37C4F9AE02.roa (hash: EWAFcedkF4KQQjCKc7J1r1NxEnBfI+A1I/eGLsYGq3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl
                          rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE01, serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
        Validity
            Not Before: Aug  9 00:45:27 2025 GMT
            Not After : Aug 16 00:45:27 2025 GMT
        Subject: CN=68969a28-4542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:f3:65:8e:9e:45:08:0a:3f:08:f2:99:e5:
                    f6:e9:76:9f:f7:92:49:bc:fd:c3:d1:47:42:b6:f6:
                    c5:1e:7c:9c:2a:68:42:ab:a2:a4:d6:24:84:88:e7:
                    e2:21:a3:51:7f:4a:24:5c:ca:96:2d:27:ea:a5:d9:
                    41:15:f0:9e:18:1a:b4:04:b0:dc:32:b2:37:8f:b3:
                    52:84:72:1a:ac:2a:05:91:c8:75:59:69:d9:8f:40:
                    7c:07:9b:c7:a1:56:c7:0f:78:4d:8b:75:f9:41:3b:
                    77:c4:26:62:e3:eb:97:93:ae:ab:e1:c2:5f:7a:32:
                    d7:62:28:91:70:bc:05:e5:c7:48:a6:b5:1b:49:bc:
                    23:07:d9:60:80:7c:12:5c:d1:fe:7a:fb:85:ca:b1:
                    75:04:01:d0:c6:fa:9b:e9:e9:ed:e3:b0:dd:00:1c:
                    64:b7:1f:de:06:f4:05:29:3e:d1:41:08:a9:74:75:
                    d1:a3:f8:58:cf:95:13:ae:14:0e:dd:c4:a3:b4:8a:
                    ab:ee:e7:1f:cd:02:1a:3a:9c:06:2d:bb:e9:fd:54:
                    78:23:32:92:0d:d5:d6:c0:7d:6f:8d:34:ce:71:f0:
                    88:01:5a:de:2a:a9:34:cb:1b:e7:0e:bb:c1:4b:65:
                    5e:30:76:70:23:89:0c:06:76:f1:dd:92:4c:b7:79:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:13:46:9C:AB:F4:9D:89:7E:38:49:62:6D:53:44:15:AB:87:50:1A
            X509v3 Authority Key Identifier:
                keyid:EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:94:0b:01:87:c3:e3:f9:47:a0:43:7c:2d:48:54:8f:8d:68:
         2d:12:af:7d:50:09:2c:df:11:bc:37:10:51:63:5c:e2:37:a2:
         d1:dd:d6:04:3a:e9:e1:fc:fd:ae:ed:08:da:1d:be:31:fe:d5:
         67:aa:71:3c:69:08:30:b0:4b:d0:99:cd:6f:18:02:6a:60:c9:
         93:e2:17:01:04:a5:ae:93:d7:04:3f:a7:0a:f6:bc:d0:17:33:
         aa:94:fe:1a:8d:98:ce:d3:88:ad:5a:2e:72:e3:95:c9:a6:cb:
         37:78:b7:3e:da:23:f6:1c:f3:f9:5b:14:e3:a0:5f:24:8b:9e:
         5d:16:f6:c4:b2:b2:f3:8f:8d:fa:0a:0d:7f:ef:65:f6:2d:f5:
         61:c1:41:50:1d:5a:a4:7e:54:04:34:15:d1:df:9c:09:15:c3:
         51:a8:cb:88:41:67:df:fe:ce:f7:28:11:91:b1:b5:41:b6:a8:
         f1:a6:0b:30:e3:fc:45:6f:2e:ba:17:30:15:e2:c7:40:0f:ec:
         f8:ca:e0:66:5d:e1:89:ba:a5:c1:19:60:3a:85:15:4e:43:1a:
         76:21:7a:a9:af:bd:12:ab:9d:ae:10:40:d7:77:01:02:a7:82:
         de:b3:25:3d:15:d2:bb:bb:c8:d3:57:d0:15:8a:e1:a6:45:d3:
         12:7f:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:38 2025 by rpki-client