Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
File:                     C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json)
Hash identifier:          PIYprqfoNHcOdCOrausFLkBYVUxj6n5UXhJ4b/aE4Dw=
Subject key identifier:   EB:30:12:93:81:4D:D0:A8:BD:98:16:8D:01:0B:EC:57:FB:20:F0:16
Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86
Certificate issuer:       /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
Manifest number:          01A7
Signing time:             Sat 09 Aug 2025 03:37:15 +0000
Manifest this update:     Sat 09 Aug 2025 03:37:15 +0000
Manifest next update:     Sat 16 Aug 2025 03:37:15 +0000
Files and hashes:         1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: jv0G8a4m2+65wgdUUVKJwSSJ/B7hOzCXg5rVbtna4PY=)
                          2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: hIzR8zQHF9iXKmM1Y26mLPHbXqodEuNcMXt0RS8n034=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl
                          rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
        Validity
            Not Before: Aug  9 03:37:15 2025 GMT
            Not After : Aug 16 03:37:15 2025 GMT
        Subject: CN=6896c26b-873a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:7e:61:c9:f3:f1:df:46:e7:e0:10:3c:70:
                    8d:55:26:9d:3e:8f:e6:25:47:9b:77:bd:d4:89:22:
                    ed:1a:fe:60:95:34:5c:83:1f:76:9f:55:28:99:02:
                    4b:45:8c:00:df:29:7b:06:4e:da:95:7e:2b:8c:1b:
                    2a:ea:00:9e:1b:8a:50:6d:b2:9d:37:3c:f6:38:39:
                    67:89:56:c6:8e:06:1b:de:44:0e:a8:7f:0c:7d:ff:
                    e2:8c:48:34:15:d3:e9:34:d3:a6:32:d4:e8:55:6c:
                    0f:1c:b2:6d:df:52:54:0e:e8:36:49:3e:98:85:77:
                    4d:c2:4a:ad:7e:bd:d0:b6:c7:cd:3e:7e:fa:d1:e2:
                    0d:da:b2:b5:c0:f9:f7:a9:db:09:f1:eb:90:fc:46:
                    e1:54:d3:59:e3:a1:ce:af:13:21:35:32:2f:fe:9f:
                    5c:d5:a4:62:69:11:50:e7:35:e4:26:2f:e4:12:10:
                    11:dc:f3:e5:e1:ab:fd:11:58:ba:5e:78:3d:34:82:
                    c8:91:cb:6a:45:ce:19:19:6c:cc:63:fb:b9:ac:5c:
                    64:da:2b:7e:30:ff:03:5e:06:64:3e:ae:72:ea:a7:
                    99:f2:bf:a8:7a:22:6e:37:93:7c:dd:3f:16:f5:89:
                    bb:4e:62:b9:20:89:94:f0:a2:b6:2d:d8:13:c3:ad:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:30:12:93:81:4D:D0:A8:BD:98:16:8D:01:0B:EC:57:FB:20:F0:16
            X509v3 Authority Key Identifier:
                keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:06:91:45:bd:b7:92:60:63:b6:e7:0f:d8:a7:b9:b8:79:d7:
         4b:51:ec:f8:45:9a:cd:eb:16:6e:5b:95:88:17:33:8d:82:fd:
         81:52:74:7c:a9:06:62:5e:a3:63:49:ee:96:c3:83:37:f2:3e:
         e4:6d:15:0f:a6:4c:2a:ee:27:ee:1f:16:54:67:27:f3:9a:b6:
         7b:9f:e0:3b:4b:76:5b:2a:14:a9:ca:05:63:62:25:df:16:88:
         b9:30:e9:de:99:ca:d4:b6:d5:99:7a:92:92:07:bb:63:7b:e3:
         61:0b:47:bb:22:de:d0:e7:ae:f9:24:c2:10:97:72:88:33:17:
         c2:30:ff:96:12:a3:f7:bb:0e:30:43:2e:2e:bd:0d:a2:c5:97:
         98:91:d2:98:e3:cb:6f:7c:26:47:2b:53:50:c9:e7:1e:4b:d9:
         a8:7a:fd:bc:09:f4:13:9b:84:7c:16:86:e9:62:e9:bc:a6:02:
         a6:be:78:07:24:66:99:41:00:ad:63:84:5c:c8:9c:b6:28:43:
         9e:06:6f:93:78:eb:cb:b2:ea:a4:04:07:6d:5e:d1:57:7c:6f:
         c8:51:64:c0:2e:b9:ac:49:11:0a:30:a1:7f:af:97:7d:bb:01:
         b7:8d:53:08:11:62:d5:e2:89:cb:b2:0d:70:82:f0:dd:5b:35:
         0a:60:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:12 2025 by rpki-client