Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
File:                     6BH2N9bdhj5cdPMuKbziePqyWPc.mft (raw, json)
Hash identifier:          JGUUQMrHdPxCJkTP4fRb2O+yt/D8tMZDmM1BdlnI+SQ=
Subject key identifier:   B7:DC:B6:46:0F:AA:30:0F:7A:F0:17:C9:0D:01:6B:16:6C:48:95:46
Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
Certificate issuer:       /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Certificate serial:       02B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
Manifest number:          02AC
Signing time:             Sun 15 Jun 2025 01:11:42 +0000
Manifest this update:     Sun 15 Jun 2025 01:11:42 +0000
Manifest next update:     Sun 22 Jun 2025 01:11:42 +0000
Files and hashes:         1: 6BH2N9bdhj5cdPMuKbziePqyWPc.crl (hash: MWS8rtRpm+eHrJaHE6F9J4mOM6JPI2psJ/VvQKsaUAc=)
                          2: 96BC85E8145711EF8ED9C174C4F9AE02.roa (hash: r9L4CmzavsqqBK92JPFfdFnoYkrBESFuwdtJEjg40XU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
                          rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
        Validity
            Not Before: Jun 15 01:11:42 2025 GMT
            Not After : Jun 22 01:11:42 2025 GMT
        Subject: CN=684e1dce-ad6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:23:7e:05:21:b9:78:65:ae:f9:7a:8b:3c:
                    85:5f:a9:4d:c7:d4:3f:ca:b1:e6:ad:e2:c6:d4:d2:
                    08:53:2c:f4:88:87:b5:bb:47:16:0b:25:87:32:34:
                    4a:b8:2d:23:a6:2a:ab:69:66:9b:59:cd:25:43:12:
                    98:a4:00:6b:e0:a6:d7:79:3b:c1:46:4d:8e:53:6f:
                    7d:db:99:b5:78:2d:ee:d3:26:81:72:4b:7f:b2:ed:
                    59:19:9a:a1:b5:d5:a1:a2:1e:71:5d:8c:11:ca:82:
                    9d:15:44:71:b7:00:45:b4:2f:27:5f:fb:27:dc:88:
                    a0:28:15:d1:ea:1c:99:b5:d4:37:e8:65:37:06:84:
                    b3:0d:91:04:7e:8e:01:1e:cd:36:a0:ae:32:6a:06:
                    48:bb:12:02:fc:70:70:92:76:b2:f7:d7:be:7a:62:
                    df:5e:83:f5:d3:30:b7:bd:e2:3c:ba:bb:ed:27:f9:
                    6e:3a:d2:22:23:ac:37:72:58:0c:d6:66:ab:9a:79:
                    c0:61:d5:f7:a1:ac:69:20:83:d3:95:42:c5:04:8f:
                    6c:8a:d7:77:70:79:9c:dc:5e:b8:bc:c6:77:26:b4:
                    15:5a:37:f0:b2:a2:27:4e:51:e0:ee:0e:49:14:a4:
                    7f:12:bf:f8:52:0c:4f:be:fb:a1:07:dd:c8:32:37:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DC:B6:46:0F:AA:30:0F:7A:F0:17:C9:0D:01:6B:16:6C:48:95:46
            X509v3 Authority Key Identifier:
                keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:cd:57:a7:2b:90:45:85:a3:fc:ad:c9:23:5c:da:76:0d:
         ed:fa:10:04:18:d4:4c:1b:a1:f1:b9:d1:76:f8:96:1f:9a:ab:
         be:b8:4d:a9:67:ad:d6:4d:0d:f6:17:35:58:06:77:8a:44:be:
         70:3d:67:02:6f:54:33:4d:a8:11:76:fd:43:ce:06:57:25:e1:
         8b:00:b9:62:89:83:65:fb:70:3b:b7:8d:0b:51:0f:e7:2a:d3:
         29:bb:87:d9:15:46:01:bb:5e:bb:ad:71:f5:33:c5:73:5d:d4:
         28:42:7b:b0:57:d3:ac:fd:aa:b8:87:b1:ae:ff:cb:0e:0f:c1:
         7e:c9:07:49:8a:e3:e9:67:83:b1:bb:05:c1:55:46:63:35:33:
         7b:f8:f1:24:1e:5d:52:ad:98:69:46:29:22:a1:ac:46:4e:71:
         08:ac:20:1d:cd:80:0d:b3:4c:36:31:51:d7:94:6c:c0:76:62:
         0a:c5:c4:dd:c8:f0:b1:3e:3d:36:58:9b:24:c7:f1:be:07:33:
         c5:55:c5:15:b0:22:82:47:75:9d:74:28:19:8b:a5:48:e4:c1:
         26:1e:8b:fe:be:1c:25:5c:87:01:b9:f9:f4:1c:6a:dd:9b:86:
         89:42:ee:6f:d1:dc:92:16:13:00:64:47:86:5a:3b:f9:92:58:
         4e:87:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:30:49 2025 by rpki-client