Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
File:                     6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json)
Hash identifier:          wqAv7rf0PUMjjwb031N8K9bAK7KUaz+PUdTJAWweLwE=
Subject key identifier:   CD:B5:F7:FA:13:2A:D3:09:5C:FA:91:D8:90:C6:C4:57:9D:8D:47:DA
Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
Certificate issuer:       /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Certificate serial:       0CAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
Manifest number:          0C94
Signing time:             Sun 10 Aug 2025 18:15:58 +0000
Manifest this update:     Sun 10 Aug 2025 18:15:58 +0000
Manifest next update:     Sun 17 Aug 2025 18:15:58 +0000
Files and hashes:         1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: KWKmX0wNO2A3MsxfD0dH4OuzTSIkqaCuIiqBPG7WDRs=)
                          2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: PKoIMzmjFW6opIpuPpXxT7JTsKk8w7rWTXfvOheNJEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl
                          rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3242 (0xcaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D5C1, serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
        Validity
            Not Before: Aug 10 18:15:58 2025 GMT
            Not After : Aug 17 18:15:58 2025 GMT
        Subject: CN=6898e1de-7ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:60:2a:4f:44:c7:06:53:8e:dc:95:a2:84:
                    0b:0e:53:0f:01:28:bb:4d:8e:47:f9:4b:84:dd:4c:
                    f4:7b:cf:70:99:50:7f:a2:22:19:e7:af:98:2c:c7:
                    af:fd:f4:c1:e6:10:73:13:bc:49:e7:60:23:d1:4b:
                    80:0c:a6:0e:c2:b1:54:30:37:97:e5:2c:ec:9a:b7:
                    ef:bf:7b:d0:42:81:79:68:03:bf:02:4d:87:dd:e7:
                    37:3b:f2:24:35:60:6f:37:9d:70:48:5b:f5:3d:0c:
                    84:10:6f:c1:e0:bc:33:3e:0a:37:ea:26:59:79:7c:
                    df:f3:86:c0:ea:4a:94:a0:37:b8:17:80:87:10:a1:
                    56:f8:3e:7e:10:fc:45:d7:87:bc:c9:24:5e:a2:f3:
                    a7:81:aa:36:2c:10:14:30:4d:7b:61:60:f4:c9:a3:
                    f9:b5:64:95:58:1e:e5:39:14:90:3a:e6:8d:fb:be:
                    9f:2f:9d:74:bd:f3:52:ad:30:a7:22:de:6d:6c:95:
                    32:b7:89:7c:8e:de:1a:1a:0c:cc:79:a9:84:69:05:
                    26:80:89:2b:0c:82:1f:bd:28:07:9a:3a:bf:c2:98:
                    b2:ec:49:56:70:ca:a4:fe:66:cb:61:15:0c:93:c5:
                    16:cb:7f:7d:d1:3c:87:43:2d:b1:7f:26:eb:dc:25:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:F7:FA:13:2A:D3:09:5C:FA:91:D8:90:C6:C4:57:9D:8D:47:DA
            X509v3 Authority Key Identifier:
                keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:83:64:e8:1d:44:b8:6b:65:e4:28:45:b8:30:ea:09:5b:d5:
         64:93:2b:e0:e8:ac:d5:77:ce:a2:17:da:e2:f3:9a:6b:a4:e9:
         d8:a6:5d:02:aa:2c:da:57:11:5e:c8:72:71:32:a4:0b:f9:7a:
         af:5c:49:99:5b:a8:83:64:6d:d9:69:78:77:ef:22:0e:ec:ea:
         51:9f:d3:17:db:9c:46:dc:22:e9:3c:95:a6:c8:3b:0e:c1:96:
         f1:38:af:a1:4e:a5:29:f2:35:44:98:e8:5b:ff:ac:55:d2:53:
         d4:21:67:c9:9d:46:92:fb:fb:90:fd:1f:49:c8:00:3b:bb:1b:
         f6:47:81:0a:62:0d:0e:54:eb:59:29:f7:c4:6c:bb:71:e7:2e:
         7f:ca:fb:66:04:c9:eb:7b:b1:f6:25:98:25:16:65:6c:58:23:
         db:f5:82:0a:8a:a9:b8:2a:20:30:ed:38:42:96:12:c9:92:57:
         7c:80:e0:32:7b:f9:fa:a8:2d:c0:43:7c:a8:2e:9a:f2:81:be:
         80:d6:1d:c9:17:b2:70:09:95:14:25:7f:a2:c7:86:3b:56:bf:
         cc:4c:84:d2:a6:60:3c:91:e0:2d:ab:aa:33:5e:c8:30:a8:5a:
         26:d2:30:b3:eb:5c:7a:33:8b:c6:cc:1f:f2:86:7a:83:fa:fe:
         80:a3:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:11:39 2025 by rpki-client