Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
File:                     6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json)
Hash identifier:          WZpJvJrM1BS1Ejpeo+2iZoKmh8aXHEPVuh04Z77x0dw=
Subject key identifier:   41:7E:63:CB:95:F8:46:B9:32:F6:EB:3E:CC:F6:7D:BF:76:6D:38:CE
Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
Certificate issuer:       /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
Manifest number:          B6
Signing time:             Thu 07 Aug 2025 06:35:00 +0000
Manifest this update:     Thu 07 Aug 2025 06:34:59 +0000
Manifest next update:     Thu 14 Aug 2025 06:34:59 +0000
Files and hashes:         1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: rf+VcmxYPzw1cEYbCJ0yEQ1fC472Ogo3yMvWj3xQqpM=)
                          2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W86JdspaifMIg33JDT0CjRhdsWrcUOOO2qpo/ordp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl
                          rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
        Validity
            Not Before: Aug  7 06:34:59 2025 GMT
            Not After : Aug 14 06:34:59 2025 GMT
        Subject: CN=68944914-7473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:e5:83:ff:fa:e6:e7:c5:e2:17:1f:64:9c:
                    3d:92:95:61:7e:28:9c:43:87:f2:2a:15:46:2b:03:
                    7e:f0:e8:22:8b:77:d8:49:1e:15:f3:e1:63:78:ac:
                    dc:82:f5:5f:f4:42:70:c7:5c:94:84:f5:d8:2b:e7:
                    01:19:3f:31:02:8c:47:1b:6e:53:87:02:f9:f9:5e:
                    4a:d8:c1:8f:f3:43:a9:6f:f2:b8:2e:b9:84:87:4c:
                    48:a2:6f:33:23:2d:d4:35:95:36:34:c9:2d:3f:81:
                    7d:d8:40:84:2b:1e:9e:e1:7c:1b:8e:99:29:fd:32:
                    a6:fc:6a:5b:4f:4f:67:7e:df:1c:ce:63:89:7f:0a:
                    73:1e:eb:c7:d3:e9:e4:5a:3f:9e:b5:35:2e:a6:63:
                    8b:26:7c:b1:de:cf:e1:ee:7a:3e:ba:c2:6a:e1:90:
                    ac:f4:dd:cb:67:81:55:26:e8:50:71:16:1f:65:88:
                    d8:75:56:28:3a:c2:f7:66:40:22:5f:8c:22:47:b0:
                    4f:4f:db:5f:64:b6:eb:fd:b3:45:99:a9:a4:37:7e:
                    aa:16:95:b5:e1:b0:24:64:7a:bf:4d:e5:64:31:70:
                    c2:f6:29:d5:50:4f:c7:0e:2f:06:3f:1d:4d:83:3b:
                    53:1f:94:b8:11:6b:78:10:a6:d4:73:87:0b:aa:2c:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7E:63:CB:95:F8:46:B9:32:F6:EB:3E:CC:F6:7D:BF:76:6D:38:CE
            X509v3 Authority Key Identifier:
                keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a7:f0:a9:c1:89:be:4b:f7:9e:f2:a5:ec:68:67:56:3a:17:
         b9:79:b6:6c:59:a5:d9:6f:de:55:b0:98:b1:d9:bd:86:58:a0:
         41:aa:32:e1:3b:50:a6:1a:9f:3a:30:be:c3:bb:e6:53:a0:2d:
         f3:6e:26:c9:d3:bd:2a:e8:43:f5:bd:60:38:46:34:a8:77:d2:
         77:dc:d3:e6:a5:43:e9:c5:f0:b8:d0:b0:4f:a8:43:b8:43:97:
         29:29:67:7b:78:ab:7f:9d:80:5d:2f:4c:95:83:f2:53:f8:51:
         56:67:14:24:e8:e5:cd:ab:56:f2:e8:af:62:f1:ac:b7:a7:4b:
         9f:09:b9:0b:a2:78:19:df:d6:b0:97:e5:a1:c0:22:b1:ca:f5:
         17:30:b8:2d:15:4b:af:13:84:13:1a:0e:d4:d4:6c:32:c9:11:
         a2:22:a4:b3:09:10:06:06:2c:3e:bb:ea:4b:f8:1c:c3:c5:01:
         fc:98:56:70:ec:85:e1:ec:ea:d7:0c:fe:10:67:de:dd:04:ef:
         c3:34:86:e0:0c:bd:8f:71:ac:8e:ae:2f:74:27:0b:81:b9:2e:
         6e:1f:5e:8a:be:5b:5d:6c:0d:86:1a:ea:38:57:8c:ce:2c:be:
         6c:c3:4e:b4:87:a6:b2:83:48:eb:62:f6:4d:20:bc:de:ed:1f:
         26:68:e0:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdFMTIxMTAvBgNVBAUTKEU5QjdCM0VEMzE3M0RFNDBGRTRDMUZFNkQ4RkU0MkI5
Q0JFOUM4MzMwHhcNMjUwODA3MDYzNDU5WhcNMjUwODE0MDYzNDU5WjAYMRYwFAYD
VQQDEw02ODk0NDkxNC03NDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/jlg//65ufF4hcfZJw9kpVhfiicQ4fyKhVGKwN+8Ogii3fYSR4V8+FjeKzc
gvVf9EJwx1yUhPXYK+cBGT8xAoxHG25ThwL5+V5K2MGP80Opb/K4LrmEh0xIom8z
Iy3UNZU2NMktP4F92ECEKx6e4Xwbjpkp/TKm/GpbT09nft8czmOJfwpzHuvH0+nk
Wj+etTUupmOLJnyx3s/h7no+usJq4ZCs9N3LZ4FVJuhQcRYfZYjYdVYoOsL3ZkAi
X4wiR7BPT9tfZLbr/bNFmamkN36qFpW14bAkZHq/TeVkMXDC9inVUE/HDi8GPx1N
gztTH5S4EWt4EKbUc4cLqixQpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF+Y8uV
+Ea5MvbrPsz2fb92bTjOMB8GA1UdIwQYMBaAFOm3s+0xc95A/kwf5tj+QrnL6cgz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0UxMi9DNzI4MEYzNDVG
OUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNrRC1UQl9tMlA1Q3VjdnB5
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZiZXo3VEZ6M2tELVRCX20yUDVDdWN2cHlETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0UxMi9DNzI4MEYzNDVGOUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNr
RC1UQl9tMlA1Q3VjdnB5RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9p/CpwYm+S/ee8qXsaGdWOhe5ebZsWaXZb95VsJix2b2GWKBBqjLh
O1CmGp86ML7Du+ZToC3zbibJ070q6EP1vWA4RjSod9J33NPmpUPpxfC40LBPqEO4
Q5cpKWd7eKt/nYBdL0yVg/JT+FFWZxQk6OXNq1by6K9i8ay3p0ufCbkLongZ39aw
l+WhwCKxyvUXMLgtFUuvE4QTGg7U1GwyyRGiIqSzCRAGBiw+u+pL+BzDxQH8mFZw
7IXh7OrXDP4QZ97dBO/DNIbgDL2PcayOri90JwuBuS5uH16KvltdbA2GGuo4V4zO
LL5sw060h6ayg0jrYvZNILze7R8maOBu
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:52 2025 by rpki-client