Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
File:                     06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json)
Hash identifier:          csgM6TjhAmcxSadUNilpxGhumoyv1tSm+x7ta11ZEq0=
Subject key identifier:   08:EF:0B:48:78:06:43:61:07:F1:53:54:BF:B8:1D:AC:25:DC:B1:F1
Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
Certificate issuer:       /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Certificate serial:       08F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
Manifest number:          08EE
Signing time:             Sat 14 Jun 2025 20:12:08 +0000
Manifest this update:     Sat 14 Jun 2025 20:12:08 +0000
Manifest next update:     Sat 21 Jun 2025 20:12:08 +0000
Files and hashes:         1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: ClA3YrImL58hki4dTcDVjiqpXZN6Kv06M8vbS0x9e08=)
                          2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: eiGSH0P7OA/wuySnx+L4WnNP4YI49fVfK6qem5HgBnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
                          rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914331D, serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
        Validity
            Not Before: Jun 14 20:12:08 2025 GMT
            Not After : Jun 21 20:12:08 2025 GMT
        Subject: CN=684dd798-876e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:56:52:4f:c4:87:63:57:b7:c2:c5:b1:d3:
                    9b:8f:cb:b2:92:80:36:e4:a4:37:8e:63:9c:c0:f5:
                    05:e4:0b:32:52:66:2c:da:f1:25:ab:cb:c4:df:ca:
                    65:b3:59:1d:64:11:90:44:35:8d:53:eb:c1:95:33:
                    9f:a3:a8:7d:a3:33:48:45:d3:63:a1:37:8a:3e:ce:
                    b5:1a:75:f3:0f:22:19:a0:3d:6f:26:74:d2:38:9b:
                    c8:0f:fe:73:1d:4e:fe:32:98:52:f8:35:2d:b4:25:
                    ef:f6:4e:9b:c0:b4:f0:bd:51:5f:de:9e:9e:5d:20:
                    0a:f1:4c:c0:b9:81:3a:fa:0b:c3:90:d2:78:09:e7:
                    c0:6a:51:f6:af:8b:18:a9:a2:fc:09:1a:f4:b7:c7:
                    3b:8e:6f:15:4c:4b:1f:9a:26:d8:5f:0b:d3:28:2c:
                    f1:71:71:8e:6a:bb:69:45:81:81:9d:18:77:34:ca:
                    0b:46:74:b1:68:aa:95:3c:dd:c7:2f:c1:31:f6:63:
                    cf:cd:18:19:6c:f6:7e:36:4e:ac:ca:84:f1:c4:04:
                    a3:62:eb:4d:9d:43:da:0e:5a:c7:91:f1:f7:c3:e7:
                    f8:d5:02:f0:30:2e:43:48:f0:79:79:fd:f2:87:0a:
                    8b:bc:2b:6a:09:b7:14:42:31:6f:1a:cb:72:4e:99:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EF:0B:48:78:06:43:61:07:F1:53:54:BF:B8:1D:AC:25:DC:B1:F1
            X509v3 Authority Key Identifier:
                keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:da:fb:c0:10:ab:8a:b9:f5:44:a5:f0:54:98:2b:cf:a6:08:
         75:5d:7d:57:01:da:b5:0d:52:25:c6:c4:03:be:d2:59:e6:21:
         43:20:01:79:be:49:b0:83:50:04:65:82:36:9b:10:2b:8b:4d:
         53:08:c1:d8:10:50:d5:5e:85:f9:1b:80:a1:16:fb:0e:fb:ba:
         41:10:82:a7:44:c3:33:a7:e0:a4:9e:0a:02:e9:3a:40:27:29:
         c8:56:8a:ef:48:af:50:a4:8f:e3:33:2a:5b:73:65:40:4d:e2:
         ac:eb:ba:ed:17:57:60:8e:28:20:58:c0:1c:5c:8f:5e:de:2a:
         59:10:2b:02:aa:e5:eb:90:5e:bf:1b:5d:6a:c4:99:1d:6d:a3:
         e0:c0:17:82:64:62:98:db:fe:fa:c7:d3:76:08:e6:04:08:95:
         15:ce:41:53:74:a0:c3:1c:fb:ea:1d:9b:90:2a:2b:34:62:ad:
         bb:c2:28:fa:e8:11:8c:ac:5a:10:37:6f:e2:4a:fd:8d:64:29:
         1c:83:8e:73:6e:89:b2:8f:ef:58:9f:e3:24:53:2b:93:7b:e8:
         f1:ed:e8:cd:86:6a:da:99:ee:b5:a2:fb:c7:4e:62:67:bd:9a:
         7d:86:0f:d4:86:8a:d0:fc:48:1b:ff:8a:ff:af:dc:60:19:ef:
         29:f9:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:29:17 2025 by rpki-client