Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
File:                     g6pYiXoVH0rLc4TwtV8R7Z164X8.mft (raw, json)
Hash identifier:          5WGOKGk3kejlMOoKbNCRHTyRj9XklpN4HSy7y14nfWc=
Subject key identifier:   5A:D9:E6:40:E1:84:1C:84:7B:26:5C:12:02:73:30:17:5F:A7:F8:5C
Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Certificate issuer:       /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
Manifest number:          FF
Signing time:             Thu 19 Jun 2025 04:32:49 +0000
Manifest this update:     Thu 19 Jun 2025 04:32:49 +0000
Manifest next update:     Thu 26 Jun 2025 04:32:48 +0000
Files and hashes:         1: g6pYiXoVH0rLc4TwtV8R7Z164X8.crl (hash: GwIQxVDV8V1jtMoBr7yNIcPnZtKNPhuzXh3Ip7QauyQ=)
                          2: 1AD9E28ECA9411EE9062590AC4F9AE02.roa (hash: ReL28hF+/x2h0RKcTZEQ3GcIbkXQcDw6s6esZ8caJwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
                          rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 04:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
        Validity
            Not Before: Jun 19 04:32:49 2025 GMT
            Not After : Jun 26 04:32:48 2025 GMT
        Subject: CN=685392f1-951d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:dd:0a:ad:31:b6:bb:33:2e:b9:23:b9:4b:
                    ce:17:5c:96:a0:06:9c:05:41:57:1e:8f:11:d9:ae:
                    9c:56:80:c2:fc:e8:b2:1d:16:cf:ce:51:ff:60:4c:
                    5f:ca:1b:50:cf:62:12:74:69:cd:9a:bb:45:09:6f:
                    36:e2:a3:cb:ce:23:6d:c1:a9:ed:93:7d:0d:e5:3b:
                    fd:b8:15:0f:b5:29:fb:6d:89:da:33:a0:80:48:d2:
                    06:8e:32:49:26:1d:87:fe:dd:3f:07:1b:84:14:8e:
                    f2:83:78:b2:00:22:c4:7c:63:ef:6e:95:84:6e:b4:
                    94:d9:01:cd:f6:08:12:0b:12:dd:47:95:c6:c2:64:
                    65:ac:4c:55:4a:d4:db:f0:84:0f:6b:be:06:49:70:
                    19:9e:43:a1:b1:6f:1d:9a:de:5e:2b:03:c2:6c:15:
                    11:ad:f6:70:80:48:81:7e:b2:9a:43:bc:56:e6:9b:
                    b1:fd:d1:0a:c8:50:55:1a:65:b6:ad:b6:ba:77:8f:
                    ba:46:0d:c5:ab:1a:ed:07:c1:e4:e2:88:88:20:d3:
                    10:8a:53:e0:a8:3a:95:e2:28:e2:f5:c9:79:c2:b4:
                    62:73:4d:be:fe:53:6e:fb:68:cc:7b:b2:cf:1e:d3:
                    3b:f7:84:78:25:d9:dd:be:64:5e:bc:b1:02:b7:d5:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D9:E6:40:E1:84:1C:84:7B:26:5C:12:02:73:30:17:5F:A7:F8:5C
            X509v3 Authority Key Identifier:
                keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:23:14:a4:07:4c:ae:0b:d7:a2:9b:bc:12:e0:f6:1d:f1:f5:
         7f:1a:c0:d0:11:0c:d9:d7:13:51:74:c0:9b:f6:6c:f1:9a:48:
         6b:fc:ad:09:fc:89:4c:74:3b:df:a1:49:6f:d8:93:56:66:9e:
         7a:bd:ee:ca:91:d2:6e:8c:8c:04:ef:c3:09:54:f9:58:e7:3c:
         81:62:0d:e1:83:e5:cf:0d:1e:da:b1:b4:b2:7c:a8:c2:d0:58:
         91:7c:0b:f1:3a:4a:b9:4d:41:47:ce:54:6b:2f:bf:24:a6:9c:
         75:54:76:49:3a:70:0b:11:61:be:c3:c9:46:ca:cd:d8:4a:02:
         c8:4a:07:c5:5d:7b:69:64:4d:83:9a:cf:ec:bb:5e:ed:0f:a3:
         54:d8:f9:33:fd:99:68:b4:45:1d:54:79:85:93:c7:0e:bb:56:
         93:27:0b:61:ae:c8:f9:6d:71:dd:e2:7d:d7:7b:2a:6a:aa:ce:
         7d:a9:96:c9:29:b9:fa:9a:29:57:6a:f9:83:b3:27:f9:46:a8:
         b4:b4:31:a3:c2:f3:c8:61:d4:f4:ba:75:d2:aa:75:d2:06:0a:
         8d:fb:f2:23:cd:80:f7:10:4f:5d:fa:55:db:48:e7:87:37:66:
         93:ec:da:eb:8c:2c:e1:ce:79:38:68:0f:24:80:69:9b:e9:f1:
         0c:96:0d:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIzQUUxMTAvBgNVBAUTKDgzQUE1ODg5N0ExNTFGNEFDQjczODRGMEI1NUYxMUVE
OUQ3QUUxN0YwHhcNMjUwNjE5MDQzMjQ5WhcNMjUwNjI2MDQzMjQ4WjAYMRYwFAYD
VQQDEw02ODUzOTJmMS05NTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv2DdCq0xtrszLrkjuUvOF1yWoAacBUFXHo8R2a6cVoDC/OiyHRbPzlH/YExf
yhtQz2ISdGnNmrtFCW824qPLziNtwantk30N5Tv9uBUPtSn7bYnaM6CASNIGjjJJ
Jh2H/t0/BxuEFI7yg3iyACLEfGPvbpWEbrSU2QHN9ggSCxLdR5XGwmRlrExVStTb
8IQPa74GSXAZnkOhsW8dmt5eKwPCbBURrfZwgEiBfrKaQ7xW5pux/dEKyFBVGmW2
rba6d4+6Rg3FqxrtB8Hk4oiIINMQilPgqDqV4iji9cl5wrRic02+/lNu+2jMe7LP
HtM794R4JdndvmRevLECt9UKjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrZ5kDh
hByEeyZcEgJzMBdfp/hcMB8GA1UdIwQYMBaAFIOqWIl6FR9Ky3OE8LVfEe2deuF/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjNBRS9DMkQwNTRGNkNB
OTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9nNnBZaVhvVkgwckxjNFR3dFY4UjdaMTY0
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c2cFlpWG9WSDByTGM0VHd0VjhSN1oxNjRYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjNBRS9DMkQwNTRGNkNBOTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9nNnBZaVhvVkgw
ckxjNFR3dFY4UjdaMTY0WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoIxSkB0yuC9eim7wS4PYd8fV/GsDQEQzZ1xNRdMCb9mzxmkhr/K0J
/IlMdDvfoUlv2JNWZp56ve7KkdJujIwE78MJVPlY5zyBYg3hg+XPDR7asbSyfKjC
0FiRfAvxOkq5TUFHzlRrL78kppx1VHZJOnALEWG+w8lGys3YSgLISgfFXXtpZE2D
ms/su17tD6NU2Pkz/ZlotEUdVHmFk8cOu1aTJwthrsj5bXHd4n3Xeypqqs59qZbJ
Kbn6milXavmDsyf5Rqi0tDGjwvPIYdT0unXSqnXSBgqN+/IjzYD3EE9d+lXbSOeH
N2aT7NrrjCzhznk4aA8kgGmb6fEMlg3w
-----END CERTIFICATE-----
Generated at Fri Jun 20 00:02:36 2025 by rpki-client