Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
File:                     2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json)
Hash identifier:          LmwCYsN5MqlZKPp4ZyG7qv/HiVSCAtBquqzgdec5Fv4=
Subject key identifier:   A6:96:58:6D:C1:E7:A5:3E:02:1D:71:08:DB:92:7D:39:CD:0C:12:39
Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03
Certificate issuer:       /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
Manifest number:          C6
Signing time:             Fri 13 Jun 2025 04:44:39 +0000
Manifest this update:     Fri 13 Jun 2025 04:44:39 +0000
Manifest next update:     Fri 20 Jun 2025 04:44:39 +0000
Files and hashes:         1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: 6MvOmWIQqnkbSIx/gGoU7FRlnzj6hUinuMBsL/uecvI=)
                          2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: JB0KjJ0CYggpPTh2yx0KHgkWZKP0lJUbgO7Q4giWozY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl
                          rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192698, serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
        Validity
            Not Before: Jun 13 04:44:39 2025 GMT
            Not After : Jun 20 04:44:39 2025 GMT
        Subject: CN=684bacb7-5d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:06:1f:ac:09:d5:b6:44:2c:74:b6:26:1a:
                    a7:b8:fa:8e:2e:a5:57:bf:7d:6f:e0:74:16:a0:b1:
                    57:79:f5:1b:2f:04:a9:98:66:b7:4a:fa:2d:34:34:
                    b2:55:f3:48:a3:4a:f1:ab:58:39:95:db:50:1b:e5:
                    c0:e6:37:91:59:6f:ae:4d:36:c0:47:3d:4b:d0:de:
                    ef:76:97:51:39:5e:4b:7e:a9:c5:9d:29:97:10:93:
                    34:0d:01:89:4f:bd:82:8c:6c:61:02:51:a7:f0:23:
                    c1:ca:52:14:15:e7:69:08:a6:aa:8d:69:e7:56:05:
                    ba:ea:5a:bf:bd:f3:a4:c8:ea:ab:33:b4:c0:48:53:
                    86:e8:2c:da:19:c4:a1:1f:99:3b:61:01:1c:1d:0e:
                    36:96:5e:3e:26:4a:07:33:92:77:7e:9e:94:c4:4b:
                    4c:63:e2:d9:d0:60:0f:69:c4:12:79:1e:af:f6:b3:
                    0a:af:30:e3:a1:d8:b0:d7:90:85:de:59:4d:c1:4e:
                    f1:9a:f9:c1:16:7d:76:60:1d:0f:d0:4f:96:12:72:
                    b9:07:a7:85:53:34:51:ef:1a:67:73:63:cb:25:ed:
                    77:18:23:e0:67:7a:c8:15:6b:fa:bb:6c:56:43:1d:
                    67:ad:ea:e2:19:18:28:ad:ee:6e:da:05:01:ad:76:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:58:6D:C1:E7:A5:3E:02:1D:71:08:DB:92:7D:39:CD:0C:12:39
            X509v3 Authority Key Identifier:
                keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:d8:6b:52:b6:f8:6b:eb:4d:73:38:b5:74:df:04:a8:a2:
         83:29:27:c9:57:e2:99:6b:11:6c:87:24:ff:f0:a2:94:1d:85:
         50:84:4d:cb:4b:bb:a6:c3:d3:a0:aa:1c:70:1b:a8:25:51:37:
         10:24:2e:03:d9:36:6b:1f:f4:1f:fb:e7:b7:9a:99:b9:c2:2d:
         03:20:2c:33:64:07:93:90:6a:7d:3e:e8:f4:4e:7b:19:3c:a2:
         7d:76:72:72:b0:22:23:be:d4:71:19:24:69:97:9b:e9:1c:8e:
         f9:a1:a0:1e:66:3d:79:21:a9:28:68:ab:ce:49:38:5b:a4:7d:
         b9:93:d2:8a:4c:bd:0b:58:b0:6a:f9:77:9b:7d:d7:dd:1e:ab:
         53:34:ea:58:55:07:6e:34:06:96:35:73:8f:d5:73:5b:9c:bf:
         0a:af:6b:dd:f2:79:9c:05:47:b4:51:3e:32:bf:bb:a6:d8:6b:
         c5:34:ad:c7:f5:b4:74:34:7d:35:71:c2:7d:3a:91:ae:30:ef:
         06:6b:84:65:2a:78:69:11:64:f7:f0:44:c9:49:74:20:d7:0c:
         6d:f1:bc:4c:40:4b:82:db:d6:f4:70:83:ee:1b:49:ed:6e:68:
         31:d5:80:ae:85:36:c0:bc:4a:dd:8e:47:00:e6:f2:14:d2:20:
         b1:da:17:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:10:11 2025 by rpki-client