Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
File:                     6c1KiX_FldVl32QzGdg49i4pNh4.mft (raw, json)
Hash identifier:          E6Hjb5vMbdoEaMeYvlenPx2s9KkC0Cn+vh0aveIB4sc=
Subject key identifier:   32:41:AD:FE:7F:2C:35:B4:16:D9:27:5C:8C:D3:DE:04:C2:16:D0:C0
Authority key identifier: E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E
Certificate issuer:       /CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
Certificate serial:       05AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
Manifest number:          05A7
Signing time:             Sat 14 Jun 2025 22:54:38 +0000
Manifest this update:     Sat 14 Jun 2025 22:54:37 +0000
Manifest next update:     Sat 21 Jun 2025 22:54:37 +0000
Files and hashes:         1: 6c1KiX_FldVl32QzGdg49i4pNh4.crl (hash: bBqE9zHHd6DdTJn15DRSgcPh+GpsF+jhAyR1RBe4qn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl
                          rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450 (0x5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91575E2, serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
        Validity
            Not Before: Jun 14 22:54:37 2025 GMT
            Not After : Jun 21 22:54:37 2025 GMT
        Subject: CN=684dfdad-39a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:e1:48:ff:ea:d3:bc:31:ec:ce:3f:d6:7a:
                    57:d1:63:16:c3:34:91:b1:84:76:6b:c8:e7:0a:f6:
                    e4:48:e1:1a:1c:bc:15:b4:f2:87:68:03:27:1c:ea:
                    a3:5b:70:68:06:7e:36:a1:e1:c0:b9:e9:02:70:77:
                    7f:ed:3c:e1:cf:2a:c1:06:e8:ef:96:37:87:be:4c:
                    01:cc:10:21:4c:38:94:e4:bf:11:a8:16:a7:fa:1f:
                    3e:8d:54:2f:14:d6:ce:9a:20:ee:e2:99:36:d0:ed:
                    75:52:53:d0:ce:7d:83:5b:07:ce:26:13:a4:4d:ad:
                    90:7e:7f:42:e0:78:02:54:7d:70:13:95:f4:26:39:
                    c6:fc:15:73:00:1f:f1:d5:e5:2d:dc:d4:b6:11:14:
                    5a:0d:0d:a5:bc:b0:bf:9a:67:be:92:c7:92:5c:83:
                    04:a3:49:95:31:1b:50:e2:f1:51:1d:f2:47:e4:33:
                    db:3a:f1:1e:df:3a:40:c7:9e:01:a3:c5:df:70:98:
                    3a:04:c0:d8:46:e9:d6:3e:ef:59:92:74:bb:dc:2f:
                    9a:e7:ce:83:6e:f0:0b:f2:19:30:87:41:3a:9c:65:
                    45:34:75:6c:a3:5e:c3:a6:73:1d:13:dd:db:5c:79:
                    ad:64:85:66:60:04:8a:3b:cc:e7:30:12:08:80:95:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:41:AD:FE:7F:2C:35:B4:16:D9:27:5C:8C:D3:DE:04:C2:16:D0:C0
            X509v3 Authority Key Identifier:
                keyid:E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c3:0b:1e:50:0f:e3:09:90:11:a7:c8:0d:88:65:6b:9b:15:
         e6:44:30:bd:7d:49:54:6a:39:10:e1:95:9b:01:4a:d8:60:df:
         2d:ea:8f:2d:a6:de:48:71:84:05:4c:d7:c5:d9:d6:fc:7d:cc:
         03:5c:64:12:11:3e:f1:05:48:a5:f0:a1:fa:52:a6:36:23:fc:
         28:13:51:f0:50:6f:06:3d:07:f3:d5:15:80:91:f6:e1:75:51:
         96:57:90:14:f8:56:d6:c2:d6:b6:45:3c:17:f1:81:24:aa:f2:
         c4:52:0f:5e:27:5a:1e:47:be:7b:b0:4a:ee:ea:50:00:8f:4f:
         92:c3:b6:5d:4b:c4:4f:4a:f7:96:48:11:65:91:c6:57:e4:53:
         4f:3f:2a:cc:e2:bc:05:83:63:ec:11:6a:09:75:b6:66:92:40:
         22:8e:1e:f3:64:f8:57:14:16:8b:1f:19:70:1b:37:8d:04:23:
         86:45:d8:13:5f:88:d0:aa:db:a6:8d:fe:44:0c:d9:c2:0b:aa:
         d4:81:fd:a8:34:06:44:99:eb:49:3a:69:a0:37:8f:f4:75:88:
         39:f7:2f:c4:0e:71:85:f0:70:6a:51:f5:e9:82:47:7a:b5:e6:
         d8:1f:42:52:42:84:df:07:17:53:57:ff:38:51:5b:44:0d:b8:
         db:8a:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:40:37 2025 by rpki-client