Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
File:                     J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft (raw, json)
Hash identifier:          46DNO2gDOTa0Ha+HGxLrUQf/c3leQ5rsv8SSFT5dN/4=
Subject key identifier:   85:E2:4E:4C:75:E6:7D:AC:B0:D0:E2:12:46:96:90:1A:C9:82:8F:7F
Authority key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95
Certificate issuer:       /CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
Manifest number:          01E6
Signing time:             Thu 19 Jun 2025 02:02:36 +0000
Manifest this update:     Thu 19 Jun 2025 02:02:36 +0000
Manifest next update:     Thu 26 Jun 2025 02:02:36 +0000
Files and hashes:         1: J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl (hash: vnrmTTWbIkqiUo8GvxDnIrSSE+Pb4M27WYwn1C47g2s=)
                          2: 35C34054633911ED97F86846C4F9AE02.roa (hash: j9opGfbttUeCxSnD6dInpPsqFcL3+tDfpef/BimCS4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl
                          rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F55C, serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
        Validity
            Not Before: Jun 19 02:02:36 2025 GMT
            Not After : Jun 26 02:02:36 2025 GMT
        Subject: CN=68536fbc-0418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d3:81:91:9d:27:33:cb:8d:31:62:eb:bc:68:
                    21:39:20:50:b0:2d:be:fc:6e:cb:83:82:2f:73:9b:
                    a8:08:86:b0:9a:7a:ac:9b:f5:ff:7f:4f:b0:c6:cb:
                    f4:a8:2a:fa:6b:be:51:b8:14:62:3d:d6:74:fe:d2:
                    cf:89:2f:69:93:55:96:ca:ab:be:98:5c:12:56:f9:
                    30:4c:22:58:86:a0:ea:e5:f1:1a:2d:3f:56:35:9c:
                    08:64:15:f1:18:75:4e:09:3a:5e:48:4d:27:b2:db:
                    3b:d5:72:7e:0e:73:d2:6b:4b:b5:0f:4c:1f:28:a0:
                    d0:ed:a7:df:81:1f:94:7d:5d:b4:a3:2c:ac:c1:50:
                    45:f5:d9:93:36:3a:62:e7:37:cd:fe:37:56:21:64:
                    27:cf:dd:cc:34:8d:f5:b4:55:64:85:3c:69:86:fa:
                    63:2d:e4:fd:0c:97:9c:90:86:28:ea:ef:47:a4:d5:
                    69:2c:87:b6:b0:1e:f1:58:aa:a6:ca:68:3d:7e:3e:
                    c6:17:c6:f8:da:8e:92:6f:14:59:88:88:12:a5:50:
                    df:14:08:45:e5:cd:6d:37:69:62:63:e0:24:4e:cc:
                    53:01:8e:bb:e5:71:d6:97:38:5c:55:46:e8:09:0d:
                    02:9f:8f:a1:cc:86:70:10:09:97:90:82:08:60:c0:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E2:4E:4C:75:E6:7D:AC:B0:D0:E2:12:46:96:90:1A:C9:82:8F:7F
            X509v3 Authority Key Identifier:
                keyid:27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:5e:d6:e3:05:ad:b5:b7:3a:22:59:22:80:4a:39:39:8a:bb:
         e0:d2:ec:62:ed:02:c5:16:13:82:97:79:8d:b3:7d:97:fb:fb:
         ed:d1:be:3c:50:ca:14:15:3d:19:b5:46:d9:db:6f:fe:5a:36:
         db:7d:52:84:b8:fc:68:40:7c:1e:09:0f:ca:ef:e7:72:73:8f:
         83:36:58:10:6d:e0:bd:31:41:31:a7:9b:45:22:30:eb:79:2a:
         a8:4a:f5:76:24:f0:07:22:d0:a6:ed:5b:cd:b8:80:6b:b3:3e:
         ea:a5:bb:32:5a:47:d3:bc:e5:7f:51:1d:68:b2:f3:ed:af:79:
         2d:79:03:4c:ce:2f:e9:81:12:0d:32:07:8d:f1:b1:b5:79:4b:
         2b:93:bc:a5:db:f2:eb:6d:d6:8b:16:6e:d8:fb:75:e2:8c:31:
         ac:ae:10:bd:a2:85:bc:f1:bc:83:31:47:94:0a:d7:08:ea:77:
         c8:4d:f2:27:6d:d9:ea:79:b4:71:1f:49:d5:8f:65:4a:46:d8:
         6b:03:80:ef:71:32:50:a7:60:ea:ef:cc:91:30:08:d3:bd:90:
         2f:8b:8d:c8:d0:42:d7:5e:98:90:75:62:b3:ad:45:f6:2c:f4:
         e0:e1:01:09:3d:77:f4:9c:d1:24:f8:b5:f0:4f:9b:e6:cd:ff:
         4f:9b:a3:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY1NUMxMTAvBgNVBAUTKDI3REEwMDU0Q0ZCQUIzRTNEQjA2M0ZDMjNEMzM1QjM3
Qjg5RTQxOTUwHhcNMjUwNjE5MDIwMjM2WhcNMjUwNjI2MDIwMjM2WjAYMRYwFAYD
VQQDEw02ODUzNmZiYy0wNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA49OBkZ0nM8uNMWLrvGghOSBQsC2+/G7Lg4Ivc5uoCIawmnqsm/X/f0+wxsv0
qCr6a75RuBRiPdZ0/tLPiS9pk1WWyqu+mFwSVvkwTCJYhqDq5fEaLT9WNZwIZBXx
GHVOCTpeSE0nsts71XJ+DnPSa0u1D0wfKKDQ7affgR+UfV20oyyswVBF9dmTNjpi
5zfN/jdWIWQnz93MNI31tFVkhTxphvpjLeT9DJeckIYo6u9HpNVpLIe2sB7xWKqm
ymg9fj7GF8b42o6SbxRZiIgSpVDfFAhF5c1tN2liY+AkTsxTAY675XHWlzhcVUbo
CQ0Cn4+hzIZwEAmXkIIIYMABWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXiTkx1
5n2ssNDiEkaWkBrJgo9/MB8GA1UdIwQYMBaAFCfaAFTPurPj2wY/wj0zWze4nkGV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU1Qy8zNDk4MDBCRTYz
MzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMtUGJCal9DUFROYk43aWVR
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o5b0FWTS02cy1QYkJqX0NQVE5iTjdpZVFaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjU1Qy8zNDk4MDBCRTYzMzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMt
UGJCal9DUFROYk43aWVRWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDaXtbjBa21tzoiWSKASjk5irvg0uxi7QLFFhOCl3mNs32X+/vt0b48
UMoUFT0ZtUbZ22/+WjbbfVKEuPxoQHweCQ/K7+dyc4+DNlgQbeC9MUExp5tFIjDr
eSqoSvV2JPAHItCm7VvNuIBrsz7qpbsyWkfTvOV/UR1osvPtr3kteQNMzi/pgRIN
MgeN8bG1eUsrk7yl2/LrbdaLFm7Y+3XijDGsrhC9ooW88byDMUeUCtcI6nfITfIn
bdnqebRxH0nVj2VKRthrA4DvcTJQp2Dq78yRMAjTvZAvi43I0ELXXpiQdWKzrUX2
LPTg4QEJPXf0nNEk+LXwT5vmzf9Pm6MD
-----END CERTIFICATE-----
Generated at Fri Jun 20 15:21:56 2025 by rpki-client