Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
File:                     6zyPJLutyUE0hx1uX9C3xYtJ08k.mft (raw, json)
Hash identifier:          INkGw4terY5vRtCSqXgZPi9QdWMO/pal7cZXjMhIoxI=
Subject key identifier:   92:93:46:9E:9B:A2:41:5B:59:F5:DA:9A:77:D4:9E:BE:E4:72:C2:07
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Certificate issuer:       /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
Manifest number:          C2
Signing time:             Mon 11 Aug 2025 06:09:26 +0000
Manifest this update:     Mon 11 Aug 2025 06:09:26 +0000
Manifest next update:     Mon 18 Aug 2025 06:09:26 +0000
Files and hashes:         1: 6zyPJLutyUE0hx1uX9C3xYtJ08k.crl (hash: 2Z4jR2jl8HVfqyTQOBhGE/M2wZgmB2yOG4UUeaUiG0o=)
                          2: 866314EE5FCC11EF8416052EC4F9AE02.roa (hash: msL/KENDVWQUMvYyaW7j5WzxEJ6sxahQk+kZqFtRzK0=)
                          3: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (hash: 47ro9pNe8tomss9aZ4VtGmmUiA4dH1RHfELIkfLkMBU=)
                          4: 78C65D926B0B11EFBFE25881C4F9AE02.roa (hash: jdwllMTCFqVjmHB+vWxuk6uDQD76msFkVq9++d9B8Cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
        Validity
            Not Before: Aug 11 06:09:26 2025 GMT
            Not After : Aug 18 06:09:26 2025 GMT
        Subject: CN=68998916-9a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:a2:08:f2:dd:a0:7b:d5:56:08:c6:58:10:
                    6f:4f:08:3b:a6:c4:81:88:c8:d2:d9:88:b1:10:ae:
                    95:eb:fe:ae:15:72:fc:f4:fb:16:53:7c:29:e7:a1:
                    f4:d8:d6:48:3b:ea:44:23:39:3a:17:03:09:68:44:
                    e4:bd:06:80:87:8c:fa:44:29:ad:31:04:7e:ca:ed:
                    bf:91:3d:4d:8c:a4:45:53:f7:75:23:9b:f6:c2:cd:
                    69:e5:a6:5e:17:77:76:16:15:99:d5:ef:b1:9e:bc:
                    7d:81:18:cb:a6:a2:e7:b0:e8:b8:2a:ea:a2:0d:0f:
                    48:02:b0:a5:cb:c3:f7:72:55:c5:35:56:83:32:52:
                    8f:44:42:14:65:4f:5b:4e:92:f5:89:75:95:78:e7:
                    0f:f5:63:19:c3:d6:43:49:df:61:48:62:6b:29:25:
                    da:24:e0:72:98:c1:92:5f:34:de:b8:07:7f:58:6e:
                    80:80:35:ed:0c:0f:46:2c:87:8c:c7:3a:03:bc:6c:
                    0f:b5:5d:f0:86:29:0e:63:7e:43:de:37:4c:52:ea:
                    97:8b:f8:b0:38:e3:01:c5:bf:16:72:15:9b:b8:39:
                    fb:d0:e1:88:e7:ce:4a:9f:97:d1:08:7a:fe:60:05:
                    c8:ba:5e:1c:e5:58:c6:8a:f0:0b:89:13:7a:03:02:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:46:9E:9B:A2:41:5B:59:F5:DA:9A:77:D4:9E:BE:E4:72:C2:07
            X509v3 Authority Key Identifier:
                keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e1:6d:bb:30:39:32:b5:7d:4a:be:b7:6a:5a:44:d1:0a:9e:
         48:37:c4:ae:6a:56:12:eb:c7:6f:73:cf:86:93:6e:1e:43:55:
         e7:de:9c:a9:7e:a3:34:35:4e:93:9e:74:89:20:27:9b:5e:2e:
         31:e1:78:7a:03:a2:57:59:d9:f4:36:50:41:06:f0:45:14:49:
         0a:7a:34:58:db:b8:a3:0d:11:9f:98:48:ac:8e:af:8f:23:07:
         c1:a1:0f:93:89:95:6e:10:d0:ca:d8:f8:58:6d:6a:c0:cd:17:
         8b:69:d9:5f:47:54:ba:87:fb:d6:74:50:6c:95:bc:0d:a9:da:
         bd:4e:76:c8:6e:f7:fd:15:bb:34:66:eb:2a:e4:52:65:e2:0d:
         7d:50:35:bc:2e:02:ee:9a:4a:34:74:28:4a:c6:4a:02:22:7d:
         a8:26:44:09:62:54:d2:6d:63:9a:02:db:0d:c9:92:01:9c:a5:
         27:2a:38:ab:c1:d8:b9:b2:97:c9:64:51:68:f8:1f:9d:1d:a4:
         0c:65:79:bd:24:c0:cb:19:81:a3:f6:49:6c:6a:14:ff:b5:8f:
         d1:60:6c:fb:91:b0:9e:a6:9e:c1:5e:00:c2:88:90:e4:36:3a:
         5d:86:2f:5c:43:a2:d9:cf:ad:08:00:ce:ee:11:61:cf:89:84:
         bf:80:d5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:09:11 2025 by rpki-client