Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File:                     6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier:          eLQd/tOoucT8YDTaievDwYKWqTxlpbk1ZNmP/6gYlOo=
Subject key identifier:   F6:8B:47:73:E5:F4:21:70:50:72:E3:56:95:B2:A7:B7:11:C2:08:42
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer:       /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number:          01FD
Signing time:             Sat 09 Aug 2025 02:43:29 +0000
Manifest this update:     Sat 09 Aug 2025 02:43:29 +0000
Manifest next update:     Sat 16 Aug 2025 02:43:29 +0000
Files and hashes:         1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: rQnzFDT47zX6VQH3r+v564NMKh4N2Zg/65GBOA+V9G0=)
                          2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: qDl9A66XUfdxXb2Z9BDWMcaLCM85XHiGpfBrshr3vQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
                          rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
        Validity
            Not Before: Aug  9 02:43:29 2025 GMT
            Not After : Aug 16 02:43:29 2025 GMT
        Subject: CN=6896b5d1-866a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:8a:f2:46:47:82:3c:f9:0c:cb:3c:a6:72:
                    9e:14:66:49:7d:75:47:4e:f4:53:e6:70:09:e5:1f:
                    9a:62:e9:2d:03:45:d6:57:ff:c7:97:38:40:df:20:
                    0f:71:8c:49:d8:c9:15:03:b1:27:e4:ef:bb:b4:84:
                    8d:3e:1c:09:ae:bc:38:d9:1c:13:d4:04:39:c4:2d:
                    8a:62:61:f8:de:20:0e:91:3a:f1:6d:37:1b:b6:75:
                    9d:8d:fe:33:5d:77:e9:79:e0:6d:0f:3f:ca:e9:f1:
                    4d:42:57:fe:28:86:6d:d4:21:c8:5a:6f:04:7d:36:
                    bf:c8:3c:cd:f8:fb:b7:31:a6:6b:c5:73:28:9c:34:
                    e7:f9:20:ac:d9:c9:d5:84:53:b5:52:d0:45:86:11:
                    1b:98:3d:81:5b:0a:e9:29:07:49:08:b3:6a:ed:47:
                    7e:04:0c:84:38:94:a9:71:60:a2:61:ac:c5:8b:81:
                    68:7e:1e:9a:a3:aa:b4:41:17:ae:4d:22:e8:26:20:
                    8b:d5:8d:b8:c7:0b:65:09:cd:b6:3a:cf:d5:05:86:
                    81:74:03:1f:fe:be:ed:20:20:82:e0:6e:db:7b:13:
                    8b:82:fe:81:f7:8d:3e:af:43:a4:b4:5a:d7:c3:c5:
                    98:a1:9b:8a:56:1b:1d:5c:96:0f:dd:7b:cc:54:77:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:47:73:E5:F4:21:70:50:72:E3:56:95:B2:A7:B7:11:C2:08:42
            X509v3 Authority Key Identifier:
                keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:27:20:8d:28:82:18:bb:fc:33:4b:cd:f3:f0:a1:71:ee:
         38:71:81:28:62:aa:bf:d7:10:a5:a9:0c:4c:b2:64:02:3d:9a:
         51:f0:84:d2:68:5d:d3:ce:01:b1:de:8e:ec:ae:26:ee:3d:7a:
         a5:0f:77:f1:bc:3b:b9:b3:18:11:f5:a7:cb:0b:f9:b2:8a:76:
         75:44:b4:bc:41:5f:fb:cf:17:e5:7c:3c:a9:2a:23:8b:3d:85:
         d9:88:2a:3b:fc:d0:b1:9e:39:a9:0e:82:c3:c5:27:47:a2:c1:
         f8:0c:c5:fd:8f:66:3d:0c:73:95:ef:fe:b6:9a:30:15:d0:19:
         ef:f5:1e:f2:5b:ec:cd:8c:bb:04:11:50:58:49:af:f0:e1:18:
         7c:0a:63:44:1c:7d:fc:91:2a:67:2b:07:c8:6b:63:4f:8d:09:
         5a:43:4e:03:ee:8f:87:92:bc:19:72:2d:99:aa:2a:cc:5e:c1:
         a8:03:dc:a0:e9:c2:29:8a:ce:1b:c9:de:f1:a0:2b:b2:9d:8f:
         9e:fd:e8:aa:65:22:e1:02:a7:56:ad:69:df:51:c4:d0:29:db:
         9a:35:8a:04:1e:5e:da:8a:21:d7:d7:ec:1c:ed:7e:2b:0e:d4:
         c6:e5:c5:4c:9a:dc:7a:67:49:ca:01:2c:6f:95:0f:1e:b4:f1:
         35:02:40:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz
RkQyNUI5QzEwHhcNMjUwODA5MDI0MzI5WhcNMjUwODE2MDI0MzI5WjAYMRYwFAYD
VQQDEw02ODk2YjVkMS04NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+yK8kZHgjz5DMs8pnKeFGZJfXVHTvRT5nAJ5R+aYuktA0XWV//HlzhA3yAP
cYxJ2MkVA7En5O+7tISNPhwJrrw42RwT1AQ5xC2KYmH43iAOkTrxbTcbtnWdjf4z
XXfpeeBtDz/K6fFNQlf+KIZt1CHIWm8EfTa/yDzN+Pu3MaZrxXMonDTn+SCs2cnV
hFO1UtBFhhEbmD2BWwrpKQdJCLNq7Ud+BAyEOJSpcWCiYazFi4Fofh6ao6q0QReu
TSLoJiCL1Y24xwtlCc22Os/VBYaBdAMf/r7tICCC4G7bexOLgv6B940+r0OktFrX
w8WYoZuKVhsdXJYP3XvMVHfjRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaLR3Pl
9CFwUHLjVpWyp7cRwghCMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2
MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03
aHZQQll1eWYwMjBfMGx1Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO7icgjSiCGLv8M0vN8/Chce44cYEoYqq/1xClqQxMsmQCPZpR8ITS
aF3TzgGx3o7sribuPXqlD3fxvDu5sxgR9afLC/myinZ1RLS8QV/7zxflfDypKiOL
PYXZiCo7/NCxnjmpDoLDxSdHosH4DMX9j2Y9DHOV7/62mjAV0Bnv9R7yW+zNjLsE
EVBYSa/w4Rh8CmNEHH38kSpnKwfIa2NPjQlaQ04D7o+HkrwZci2ZqirMXsGoA9yg
6cIpis4byd7xoCuynY+e/eiqZSLhAqdWrWnfUcTQKduaNYoEHl7aiiHX1+wc7X4r
DtTG5cVMmtx6Z0nKASxvlQ8etPE1AkDr
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:56:30 2025 by rpki-client