Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
File:                     T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft (raw, json)
Hash identifier:          InZEYksVE5T/OVCJScjiyEwF4VzO3NIZuKYnBzlg37Y=
Subject key identifier:   30:9D:AB:81:AE:89:99:39:69:0E:62:5F:2F:C4:EA:BE:18:D1:B7:A6
Authority key identifier: 4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
Certificate issuer:       /CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
Manifest number:          01C8
Signing time:             Tue 17 Jun 2025 02:11:22 +0000
Manifest this update:     Tue 17 Jun 2025 02:11:21 +0000
Manifest next update:     Tue 24 Jun 2025 02:11:21 +0000
Files and hashes:         1: T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl (hash: Mu5c+cudTM4FvEBcu/i+dSk4/JzeGOqk/pmF46xJzQk=)
                          2: 0BD8AF96D41A11EF804F7049C4F9AE02.roa (hash: CbsMaT+1o+zoMcHzdBRqNGnxnAlCq5uF3XIGjN5ZkQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl
                          rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 02:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916548C, serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
        Validity
            Not Before: Jun 17 02:11:21 2025 GMT
            Not After : Jun 24 02:11:21 2025 GMT
        Subject: CN=6850cec9-fa22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:70:a3:2f:c7:21:4d:4f:c8:73:bc:e6:b6:
                    30:3b:96:50:99:51:2e:a8:a2:99:82:3d:26:db:f7:
                    df:a8:c1:79:d6:75:dd:08:15:37:87:1e:5e:26:f3:
                    84:54:91:23:55:b8:83:35:5b:b6:77:24:e1:32:ae:
                    74:16:fa:de:43:56:25:28:4c:0b:4a:4c:24:2a:85:
                    5f:10:e3:b8:12:ab:5b:5b:34:bc:85:53:17:83:bf:
                    60:10:c2:34:83:8e:6e:df:c0:5f:aa:f5:e8:13:9d:
                    5b:23:7a:a4:56:05:42:15:e3:1f:5a:34:16:46:c8:
                    38:44:25:6d:77:1f:8c:3d:ac:69:ec:44:69:98:b4:
                    88:b8:e8:e4:f3:a9:97:04:7d:65:45:02:8f:ee:1e:
                    4b:1b:11:fb:0e:1f:3d:42:60:55:9e:a5:c1:85:8e:
                    9f:7e:10:c8:78:37:50:8d:5f:cf:bf:b5:46:70:e6:
                    de:69:76:d5:34:41:fd:d7:f7:74:d8:45:79:7c:38:
                    1e:0a:f2:9a:fd:6e:05:d3:38:29:0d:5d:ae:a4:3f:
                    49:d4:e0:8e:87:d3:ac:e1:10:7f:06:d6:04:47:0d:
                    88:ff:f9:8d:e5:07:8b:89:0d:0d:06:7c:2d:a4:be:
                    00:b0:81:97:81:48:6f:20:f9:9b:98:f6:ce:5d:0f:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9D:AB:81:AE:89:99:39:69:0E:62:5F:2F:C4:EA:BE:18:D1:B7:A6
            X509v3 Authority Key Identifier:
                keyid:4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:a5:9a:35:a6:2d:98:db:3a:e8:2e:9f:c6:67:47:cc:d8:
         3c:f6:57:2a:7b:a7:58:2e:41:13:96:12:3d:bd:7e:4f:c9:b1:
         c1:6c:0e:98:cc:e8:e1:ca:02:66:bb:17:18:29:81:f8:6a:ea:
         e5:b8:79:ec:5b:12:30:18:90:00:f0:b7:b2:7b:03:2c:c5:eb:
         f5:26:5e:50:65:20:64:5a:c0:ea:b9:00:18:4d:8c:24:0e:bf:
         94:96:59:98:8b:d5:b4:c4:9a:4a:e7:58:38:22:97:6f:75:25:
         9d:32:09:11:9c:56:54:29:6e:cd:42:48:66:a5:04:94:b6:94:
         5c:d2:2f:ff:33:69:1b:8c:b3:84:eb:57:41:6c:25:3b:61:54:
         ae:61:42:a8:0e:c2:d5:a4:b7:d6:1d:7e:37:00:ce:c9:86:b2:
         84:c8:f1:78:77:1d:83:b9:bb:9d:43:b9:6c:2f:16:ca:79:7f:
         0a:79:1e:83:de:fe:19:b1:14:99:b4:5b:a0:6c:8b:10:06:2b:
         6b:94:67:68:c8:e1:b6:83:2a:8c:b9:c7:33:d1:d8:8e:4a:ee:
         7a:04:12:10:fc:94:7a:fe:6f:55:fe:e9:8d:71:ad:50:63:1f:
         3b:02:08:cd:91:60:4a:f6:1f:08:86:54:c9:7b:b3:d9:95:a4:
         27:6c:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:26:16 2025 by rpki-client