Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          VBllGRDzAlPO1+m8HizYDdlFzHBFAjfAeuBtQfFbyZM=
Subject key identifier:   5A:F1:AF:80:EA:1A:97:3B:09:02:BC:9E:0D:2D:BA:58:B6:01:AB:A0
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0AB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0A93
Signing time:             Tue 12 Aug 2025 19:50:48 +0000
Manifest this update:     Tue 12 Aug 2025 19:50:47 +0000
Manifest next update:     Tue 19 Aug 2025 19:50:47 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: A9ul4BVBCdlgfLLf+tXdaTLDVy6a37S9cjjH89Xfdls=)
                          2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=)
                          3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=)
                          4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 19:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2738 (0xab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: Aug 12 19:50:47 2025 GMT
            Not After : Aug 19 19:50:47 2025 GMT
        Subject: CN=689b9b17-4359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:03:57:fb:fe:a2:df:34:46:b5:86:d3:41:
                    43:4e:32:f4:7e:00:75:c5:0a:0d:b9:5f:8d:9d:1c:
                    9c:79:fd:2a:5d:5c:cc:1d:76:4d:15:67:df:8d:64:
                    19:06:6b:91:ec:ef:df:6a:64:f8:72:c1:5f:9b:d4:
                    70:c3:a1:73:76:65:4b:1c:32:0e:a5:73:d8:9f:bc:
                    27:8a:0c:b4:4c:c8:f3:fa:85:59:be:fe:2b:e8:cd:
                    71:b0:1b:bb:6a:90:46:f1:9f:ef:8f:6f:af:f0:13:
                    e8:53:61:f4:c4:20:d1:e1:00:16:85:16:4a:4c:c5:
                    67:ca:1b:d0:1c:4b:35:71:94:ca:b3:32:0e:77:82:
                    a5:08:c9:05:14:17:dc:55:72:8c:8b:5a:81:cd:a7:
                    96:2f:2e:b7:13:a7:24:68:2e:57:1d:e2:7a:e9:79:
                    f1:b4:1c:e2:4a:0a:c6:2d:bc:b7:0a:7c:71:a0:38:
                    6a:e7:a1:6f:2b:4f:e9:38:ef:42:32:5c:a5:30:e4:
                    9b:c0:e3:62:27:af:43:d2:07:00:7f:e5:51:7e:73:
                    54:0a:38:88:b9:87:4d:04:a4:dd:03:43:6a:78:37:
                    00:75:80:c8:8c:48:d1:08:41:70:a8:21:b1:af:1c:
                    80:fc:2a:2b:3d:c7:05:3e:ab:65:c3:ff:f0:ea:87:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F1:AF:80:EA:1A:97:3B:09:02:BC:9E:0D:2D:BA:58:B6:01:AB:A0
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cf:5d:fc:08:cc:e9:a0:55:21:98:e0:78:2a:bd:3e:85:58:
         87:ad:aa:ca:03:e0:26:6c:a5:60:41:46:b1:bd:e6:64:63:60:
         bb:f3:9e:1b:92:2b:37:1b:15:a4:85:d2:d1:a5:eb:8d:55:3f:
         67:ea:6f:0e:23:00:a8:b1:b6:e1:88:5e:b7:d0:48:72:aa:05:
         5d:82:70:66:27:30:c6:15:35:b7:2b:bb:37:3a:d4:37:67:1e:
         21:4a:3d:c7:45:8d:11:ee:08:71:fa:d3:ce:77:50:15:66:0b:
         7b:84:52:05:97:17:66:16:03:d9:fd:f6:de:28:c7:cd:37:fa:
         a3:30:be:3b:bc:5d:8d:20:69:59:3f:8e:87:80:33:ac:50:df:
         2a:7f:6c:d0:60:25:eb:1d:29:2a:73:99:d7:4f:91:61:a7:e5:
         29:62:bb:38:b2:f2:9e:e0:38:4b:c1:20:49:62:06:98:38:26:
         3a:26:b8:78:41:e8:05:eb:e4:44:63:e8:32:b4:05:13:ac:ae:
         2c:ee:ca:55:43:fa:7b:a6:c8:61:d4:d6:1f:8d:69:44:44:12:
         57:f5:a3:4f:a9:8e:e8:37:fe:a8:9b:63:e4:8a:70:4d:23:38:
         4d:73:8a:a6:1d:30:e5:cd:bd:7a:fe:ae:6d:27:fa:b9:ea:7d:
         14:ec:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:35:50 2025 by rpki-client