Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File:                     6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier:          vR5GwAbqiFcJJc4vpNup1KTeV4bSMAGZHzzgim3Oyvw=
Subject key identifier:   5B:8F:6A:0E:A8:32:AA:D6:66:4D:EB:0F:69:D2:D1:AB:34:7F:7A:E2
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer:       /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial:       0AD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number:          0ABC
Signing time:             Fri 08 Aug 2025 19:48:24 +0000
Manifest this update:     Fri 08 Aug 2025 19:48:23 +0000
Manifest next update:     Fri 15 Aug 2025 19:48:23 +0000
Files and hashes:         1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: 7Xrhnor9+MkRIjrt+XxzxYzP9qWS6gdZflbIkQafZtQ=)
                          2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=)
                          3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=)
                          4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
        Validity
            Not Before: Aug  8 19:48:23 2025 GMT
            Not After : Aug 15 19:48:23 2025 GMT
        Subject: CN=68965488-983b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:28:1d:89:2a:ae:a8:12:54:77:96:49:1e:
                    6d:ef:d2:00:2a:3a:4c:29:58:43:29:2f:8a:47:5c:
                    a7:a6:eb:98:bf:25:d7:ac:38:3a:e3:db:d0:b4:c1:
                    88:39:1c:1e:b7:0d:1b:82:48:2b:6e:ce:6d:31:3a:
                    a7:fd:97:e1:dc:69:6a:0a:85:28:96:ab:a3:c9:0c:
                    f3:90:d0:26:9f:8d:74:44:3e:6a:2f:05:e7:50:1f:
                    ce:a1:89:fa:25:da:2d:81:f7:83:c5:e6:87:86:fa:
                    ae:75:55:22:d1:b1:d2:7f:a0:8c:f4:65:8b:6f:22:
                    5d:3d:a7:89:c1:08:58:76:55:c0:db:af:1c:43:e4:
                    44:38:80:81:69:54:26:2e:21:28:02:ce:4f:2e:98:
                    1a:29:2f:a5:bc:60:08:e9:85:2c:2e:20:54:b6:81:
                    91:5a:3d:ce:f2:38:7f:8d:76:f1:3a:74:8a:a3:25:
                    85:a8:5b:9f:32:4a:32:0a:5a:14:c0:cb:38:2c:50:
                    d9:fe:13:a6:d3:46:a1:4d:69:82:1d:81:6f:e4:bc:
                    24:75:47:db:6f:b2:f9:50:b1:f8:c6:fb:95:0e:93:
                    ba:c1:50:e6:49:04:cb:82:1b:91:8f:53:91:da:08:
                    91:2e:de:46:26:00:96:6b:cb:34:d0:93:5c:9d:b0:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:6A:0E:A8:32:AA:D6:66:4D:EB:0F:69:D2:D1:AB:34:7F:7A:E2
            X509v3 Authority Key Identifier:
                keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e0:7f:6b:46:33:2c:08:4e:1b:8e:8c:71:e2:1e:e1:90:f4:
         36:00:06:56:74:20:89:7b:e5:4d:0f:c8:83:17:92:e2:b9:c7:
         45:9a:13:af:43:a7:7c:da:35:41:9f:72:3a:ce:1e:06:f3:02:
         d8:ca:bc:69:b3:a6:3f:ed:13:c6:f4:cf:7a:83:83:f2:82:fd:
         4e:b0:50:a8:41:ac:64:7f:45:73:d0:81:f2:29:43:15:2a:76:
         0d:7a:71:c2:40:2b:1f:6e:f6:c3:20:98:5d:6d:35:7b:9d:36:
         b6:27:6e:f4:1c:fa:2e:ad:64:d0:1c:b9:c3:fd:0a:11:57:3b:
         da:18:f9:ea:c2:b4:96:49:bf:6d:9a:4c:1a:0d:74:2a:e7:a4:
         fd:39:0f:03:09:5b:47:69:3c:f9:e7:93:2d:35:64:e0:65:17:
         5e:b9:16:59:0a:26:16:39:f2:95:86:bc:c1:4f:85:9c:d6:dc:
         b7:61:af:bb:08:02:e1:f8:da:b1:1b:df:52:e5:74:81:2b:7a:
         ae:1e:2e:88:00:d5:1f:51:80:c3:aa:5c:09:67:51:2c:f4:6e:
         08:e1:75:7d:13:9f:c0:60:6b:cd:81:ad:bc:e0:e2:e9:63:2f:
         0d:ea:57:55:c2:b3:94:80:f1:ae:a7:6e:ac:d1:9d:34:d6:46:
         8a:a6:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:50 2025 by rpki-client