Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
File:                     6mEYPX8HHa7UVWQxG4oadb3OcNY.mft (raw, json)
Hash identifier:          A/FTJbTcPfexFHLI5VZnnNA7MB0i4QlzaucSw+CUwaI=
Subject key identifier:   2A:BC:73:BA:1E:0E:C5:B9:BC:FC:5A:AE:06:EE:1F:84:20:B9:36:6F
Authority key identifier: EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6
Certificate issuer:       /CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
Manifest number:          B3
Signing time:             Fri 13 Jun 2025 04:57:25 +0000
Manifest this update:     Fri 13 Jun 2025 04:57:25 +0000
Manifest next update:     Fri 20 Jun 2025 04:57:25 +0000
Files and hashes:         1: 6mEYPX8HHa7UVWQxG4oadb3OcNY.crl (hash: RoJwDzDm9qMSOqX/YpceIM/4I+Oxi1DfUBT3YaEukak=)
                          2: CB54BF04390611EF93BAC362C4F9AE02.roa (hash: SBPg4qf1Hpdi+0DWgBFMwDlSC1uKF+MPsUyay046sq4=)
                          3: 5AFDCA16390611EF9290C361C4F9AE02.roa (hash: SumhTWc+8flvVqGSUtlnNECtrOpr5Ex0r4tAHN1aP0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl
                          rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91874B6, serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
        Validity
            Not Before: Jun 13 04:57:25 2025 GMT
            Not After : Jun 20 04:57:25 2025 GMT
        Subject: CN=684bafb5-7d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:36:80:15:78:9f:89:81:21:0c:44:ab:71:
                    29:eb:d8:21:c6:4b:19:45:5c:5f:00:1e:f8:6b:51:
                    91:3c:41:26:14:a1:98:71:45:93:b7:40:43:e4:be:
                    27:59:48:55:dd:2a:b4:00:c3:09:bd:59:a8:86:d2:
                    eb:39:dc:a5:b8:da:9e:13:4c:a4:a7:85:f4:e3:17:
                    8e:dc:0c:ac:9e:69:67:5e:ae:9b:83:ff:5b:2c:61:
                    31:b0:68:3e:6f:4d:c3:eb:1f:a2:7c:81:c2:4a:4f:
                    fb:03:5d:7b:da:8f:3b:39:28:60:c2:0c:be:ea:9c:
                    34:24:ec:fe:4b:11:fb:d8:b7:cb:b5:3c:f4:95:d5:
                    90:71:d1:e8:88:5e:77:a7:22:82:1d:68:75:59:2c:
                    0c:72:c4:42:d4:47:bc:66:29:60:1d:29:b8:b2:31:
                    61:97:ac:3c:8c:9b:5a:d4:30:c3:eb:79:ca:8f:03:
                    43:c5:1e:8e:c9:37:01:bf:82:e5:c5:04:f8:16:5a:
                    8d:49:24:c9:e5:f2:82:1e:a2:6c:47:b4:9d:1b:15:
                    e1:67:98:35:43:14:e2:a2:f5:d0:f9:a1:55:86:e8:
                    60:b3:07:85:83:2e:0d:2c:43:91:ea:ae:d9:06:4f:
                    c7:4f:c5:86:8d:fc:75:b0:3e:6b:40:b7:e1:48:8e:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BC:73:BA:1E:0E:C5:B9:BC:FC:5A:AE:06:EE:1F:84:20:B9:36:6F
            X509v3 Authority Key Identifier:
                keyid:EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:a9:bb:38:f6:cf:25:6f:00:1e:ac:e0:4c:10:f0:a2:34:c4:
         93:c6:0c:f4:a0:d7:bc:a6:cf:ed:b5:f8:c0:10:76:84:3e:9e:
         32:ce:04:e0:d9:e9:8d:e9:fc:96:e3:64:d4:0f:8f:ac:dd:74:
         d2:95:5d:f4:10:61:52:be:f3:b1:b9:c4:66:ca:9a:8a:3d:95:
         9e:b3:7a:e3:f2:b9:b9:62:a1:77:fa:47:26:ed:d2:b3:c6:31:
         3b:15:31:d8:8b:51:3a:08:08:0b:98:64:28:7b:65:a4:4f:08:
         91:3c:86:8f:9a:77:c5:e8:22:00:cd:b9:98:61:ed:f9:bc:49:
         b0:83:c5:f8:5f:ca:b6:b3:42:bd:a2:8c:4d:90:18:26:38:9e:
         13:92:ab:07:4b:18:b4:01:09:09:e3:3a:6c:a4:70:73:6b:a4:
         d2:8c:62:30:0e:a0:b1:0c:81:d0:bd:5c:e9:f8:b3:ff:28:c3:
         f7:36:9a:da:e0:c8:fe:24:a3:9a:2a:ab:a5:27:66:8b:a1:6a:
         3a:77:9e:31:7e:30:e4:4c:5c:ed:f7:5d:3c:4c:9e:d4:85:61:
         26:c7:bc:73:74:09:58:1d:86:c0:9d:bf:16:48:15:1d:3a:24:
         bf:d9:85:f7:74:64:95:db:57:f4:a3:5c:54:ec:2e:d1:bf:3b:
         69:ca:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:59:13 2025 by rpki-client