Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
File:                     a6pcUguOS_VkxLv0bh8xa9RfoDc.mft (raw, json)
Hash identifier:          2QFx4NrwWSS4fh/ARU3rzncxJNCxsnqjy0c1FYlaOqc=
Subject key identifier:   C9:0C:66:1B:EB:28:AC:76:C8:FD:28:82:7A:67:B2:99:FC:34:8B:9A
Authority key identifier: 6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37
Certificate issuer:       /CN=A9144463/serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
Manifest number:          025F
Signing time:             Fri 25 Apr 2025 01:33:57 +0000
Manifest this update:     Fri 25 Apr 2025 01:33:56 +0000
Manifest next update:     Fri 02 May 2025 01:33:56 +0000
Files and hashes:         1: a6pcUguOS_VkxLv0bh8xa9RfoDc.crl (hash: Pkf0Q1zMbTNBng7uLmVtX6Ku0AcHxZt6pYwvBgEQeC8=)
                          2: 5B9A1DA0114211ED957E085DC4F9AE02.roa (hash: AeJZ7ukdYWaHFVb/G2XrVYPGgRINb8DYT1Z4AfpetOI=)
                          3: 3E6091DA139811EDB1D7223FC4F9AE02.roa (hash: pPqfy6MrMQAhBR4En++nqCHYyx2R/69ReVZ+i2NT/No=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl
                          rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144463, serialNumber=6BAA5C520B8E4BF564C4BBF46E1F316BD45FA037
        Validity
            Not Before: Apr 25 01:33:56 2025 GMT
            Not After : May  2 01:33:56 2025 GMT
        Subject: CN=680ae684-297e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:0b:f2:da:43:e1:39:9f:02:e1:0f:28:6a:
                    0f:5d:66:f3:d3:ac:2d:2e:ea:89:c5:10:21:75:e9:
                    a4:e8:e7:21:15:7a:d1:6a:ac:8a:82:8e:84:c7:02:
                    b9:73:ef:f7:60:f9:01:ee:2e:25:17:22:2e:b6:4d:
                    fc:04:e9:92:8d:b2:15:c1:02:38:73:98:73:7b:e4:
                    d1:02:dc:f9:6a:bc:01:12:bc:3a:3e:e6:d7:0b:0d:
                    cb:da:e2:a1:f8:39:5b:a8:3d:18:d0:d1:b9:ad:9e:
                    f9:f7:8a:d8:1e:f4:99:bb:99:b7:f8:e7:1a:bb:b9:
                    1f:01:b2:ac:2c:77:96:11:2b:fb:8d:1b:57:93:30:
                    54:40:e3:bb:da:57:7f:00:01:40:01:21:68:c5:5f:
                    9d:d1:4f:01:91:f4:6f:f5:1c:88:05:51:f4:4d:73:
                    b5:00:8a:83:7e:23:f6:78:3c:93:53:2d:37:67:d7:
                    3b:42:83:30:e6:4f:70:f1:87:3d:df:8d:00:47:09:
                    1a:15:39:c9:d9:47:6d:2b:8a:14:32:31:40:92:95:
                    a0:f7:1d:e1:ac:7c:69:36:30:b9:ff:21:d9:07:cf:
                    ac:b5:6e:a1:0d:79:2c:0a:94:61:39:c7:a2:20:a1:
                    a0:72:ff:1f:51:48:7d:41:bf:69:09:ed:6f:cd:ac:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:66:1B:EB:28:AC:76:C8:FD:28:82:7A:67:B2:99:FC:34:8B:9A
            X509v3 Authority Key Identifier:
                keyid:6B:AA:5C:52:0B:8E:4B:F5:64:C4:BB:F4:6E:1F:31:6B:D4:5F:A0:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6pcUguOS_VkxLv0bh8xa9RfoDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144463/8BF5A5D4113611ED8F0AB712C4F9AE02/a6pcUguOS_VkxLv0bh8xa9RfoDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:34:f1:b8:13:23:41:f9:37:cc:88:d2:a3:6d:96:f7:dc:4c:
         8b:05:fa:c1:e1:7d:04:3d:c0:8e:fa:20:4d:2a:4d:3a:a3:ce:
         a7:25:92:24:a0:60:db:46:c2:d6:4d:1a:8f:8c:5a:2f:f0:38:
         fb:af:57:21:38:1c:00:6f:f3:d3:e0:12:67:83:9a:e1:b8:48:
         76:f8:9b:b4:68:94:40:f6:35:32:2e:41:38:7a:84:e9:6c:80:
         c9:c5:93:0d:86:0b:b1:ae:29:0f:0d:b5:65:45:09:91:9a:e2:
         d9:56:ec:d1:de:d9:5c:1c:2b:ff:df:00:1f:64:16:81:9c:45:
         ac:25:79:29:76:a5:90:d1:bf:c0:75:72:0b:21:51:3c:03:de:
         69:ea:19:f2:8b:72:a5:53:ba:e7:bb:a1:65:85:d1:bd:86:60:
         b3:c2:4b:83:ed:be:89:bb:08:7d:14:84:91:bd:38:15:c6:be:
         32:e3:74:08:a2:d4:68:57:6e:c0:cd:86:00:4e:be:ae:c1:69:
         d2:3f:63:af:9a:e9:14:a2:1f:a0:4b:16:d2:3a:66:32:1a:c4:
         ae:1e:8e:4e:9d:34:a9:b1:f2:45:85:e4:fa:ba:ee:71:df:2d:
         22:e3:67:2b:86:be:b4:4e:9e:1e:4f:62:89:01:ee:16:cf:2c:
         d3:95:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:15:11 2025 by rpki-client