Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
File:                     6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json)
Hash identifier:          V/gqn3q6L/sWlnxPG3cCBemkXpozoZQAJ7ix+1cjwWg=
Subject key identifier:   67:C1:91:04:38:38:D3:D5:E0:B4:C9:0B:99:30:D2:05:95:13:12:BF
Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
Certificate issuer:       /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
Certificate serial:       1159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
Manifest number:          114C
Signing time:             Wed 06 Aug 2025 17:22:30 +0000
Manifest this update:     Wed 06 Aug 2025 17:22:30 +0000
Manifest next update:     Wed 13 Aug 2025 17:22:30 +0000
Files and hashes:         1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: v+8su75GSYtSjz49FcCKFtGt60+fZelY754TmKXoRXs=)
                          2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl
                          rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 17:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4441 (0x1159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
        Validity
            Not Before: Aug  6 17:22:30 2025 GMT
            Not After : Aug 13 17:22:30 2025 GMT
        Subject: CN=68938f56-67a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:38:f1:37:ce:22:2b:10:8d:c1:f2:b1:c5:
                    0d:a1:8f:00:10:f5:c8:c8:66:1a:f7:0d:a5:28:66:
                    a7:10:ca:fa:3d:91:29:57:f8:50:d7:05:f5:bb:bf:
                    c7:34:95:41:b5:6b:fa:5b:0f:91:ad:3f:5a:ee:3f:
                    23:c2:1e:c8:b7:55:84:c6:7f:dc:92:4d:1f:fd:7a:
                    41:cc:b4:01:40:11:81:76:6d:53:ca:c6:c6:3b:05:
                    81:28:35:f4:67:18:55:77:2b:c5:07:09:fa:13:67:
                    0a:de:88:69:f5:d3:e7:0c:43:81:2c:c9:ac:ab:02:
                    10:bb:c7:6d:e5:75:c1:9d:8a:d8:e8:16:c2:f3:bf:
                    6a:4e:7f:7d:1c:d5:16:fe:83:73:44:53:97:40:6e:
                    8e:39:a1:5e:36:8e:da:a1:4e:71:10:d5:56:2b:b2:
                    64:cb:fd:7b:09:ee:b8:99:5e:ef:cd:9d:71:57:e8:
                    b5:ed:c8:b0:2b:1d:66:a6:97:db:f4:e0:dd:34:9b:
                    fc:35:7c:5a:46:c0:37:92:a6:5f:f7:eb:19:79:62:
                    14:a5:96:3b:e0:e3:aa:c5:5b:7b:db:04:05:64:be:
                    ec:db:86:67:6a:8f:98:0a:31:df:c3:50:a4:11:29:
                    3f:c7:b6:6b:9f:a2:f2:21:af:1c:e2:30:1b:88:df:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:91:04:38:38:D3:D5:E0:B4:C9:0B:99:30:D2:05:95:13:12:BF
            X509v3 Authority Key Identifier:
                keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f3:5a:4b:52:4c:c8:86:a2:84:0f:5f:aa:80:a9:b9:d5:56:
         c3:3d:77:b9:1b:cc:07:07:a7:b5:50:c3:d2:78:48:2c:d1:80:
         8d:e5:b3:ae:2c:80:48:13:ef:47:ad:18:a1:0a:9c:38:47:5c:
         79:fb:cb:cb:1c:66:ad:6a:c0:07:b2:0d:97:24:b6:af:f1:25:
         9b:29:14:23:f0:35:48:dd:7d:4c:d3:9a:8e:f5:21:ab:db:ac:
         db:1e:fc:08:92:2b:e8:38:06:4a:67:9c:64:9d:4c:6a:5b:2b:
         8a:fd:23:c9:da:91:a5:ec:50:bd:67:56:93:7b:37:af:c1:1f:
         f4:f5:e7:ec:32:d8:51:1c:e9:c4:92:62:bb:0d:16:91:8f:f8:
         fc:a4:c6:34:0f:21:fc:29:04:6c:e8:94:f1:f1:05:46:64:1f:
         e5:8c:8b:49:b9:5c:5b:d6:2a:08:2e:e5:95:cd:c4:af:d8:76:
         e9:56:3a:c5:f3:06:ee:ae:e6:26:98:ef:d3:64:cd:00:50:b0:
         e6:cf:5b:6c:cf:f6:b2:37:24:39:67:72:fc:cb:d9:10:1d:a8:
         02:27:85:78:a9:c6:29:66:cc:4c:7b:c8:5a:7e:73:21:fe:12:
         25:e6:a8:af:8b:72:48:d0:ed:a4:89:02:18:39:12:8a:9e:96:
         37:a7:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:44 2025 by rpki-client