Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
File:                     6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json)
Hash identifier:          Z3jgpFlo1IEowEtPEC7lmeXcdTZK6LQGLIsgbb//0DU=
Subject key identifier:   C9:EE:97:B3:DC:EF:F7:CC:3B:97:1B:44:33:B8:61:3E:5B:37:85:3A
Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30
Certificate issuer:       /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
Certificate serial:       0B02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
Manifest number:          0AF9
Signing time:             Tue 12 Aug 2025 19:36:46 +0000
Manifest this update:     Tue 12 Aug 2025 19:36:46 +0000
Manifest next update:     Tue 19 Aug 2025 19:36:46 +0000
Files and hashes:         1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: KKoV7X/SvzPAkXVrLnBLVMQOt+Pnw98nVWbSW1KB3kI=)
                          2: 0FFE5282122811F0AC9B4112C4F9AE02.roa (hash: qP7+uhy7LyLUv4jd3g7zWSe0a9FYblcgiMmuUDc4eAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl
                          rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 19:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2818 (0xb02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
        Validity
            Not Before: Aug 12 19:36:46 2025 GMT
            Not After : Aug 19 19:36:46 2025 GMT
        Subject: CN=689b97ce-6f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:0e:c0:f5:ef:39:f9:54:91:3e:ae:c4:83:
                    9a:e3:a0:99:99:11:3d:49:e2:0e:74:7e:09:d2:e3:
                    a7:35:6c:17:32:0c:1c:fa:92:d4:be:c8:dd:e5:09:
                    0b:2f:76:fd:41:42:ee:ac:3d:11:06:af:de:06:a0:
                    d8:fa:14:f6:77:07:ab:8c:fe:a8:42:9f:ed:2a:bd:
                    ac:95:ae:6d:7d:ec:16:b4:9d:06:88:97:d4:57:9e:
                    c0:cf:2c:e8:15:3c:6a:23:61:ef:4d:57:94:a9:66:
                    8b:c5:ee:13:e8:76:41:02:92:ba:fd:bb:09:b2:ac:
                    ca:51:a1:9b:b1:d4:75:e8:26:1c:fc:50:3d:47:85:
                    b7:52:bd:94:f4:88:4a:e2:dd:85:e0:96:15:53:fb:
                    f7:3a:62:3e:44:42:ac:b6:9c:a5:64:38:70:bd:5a:
                    77:29:ac:38:b2:ea:48:a0:56:35:08:9b:b2:f9:9d:
                    43:79:59:6e:25:04:6d:3f:30:68:e1:1e:cb:67:5f:
                    80:81:29:91:0f:c2:09:89:99:bd:9a:3f:58:ed:ae:
                    34:b5:5f:1a:64:60:70:91:d7:22:d9:18:ab:64:6e:
                    bf:5b:ad:8d:6f:cd:c3:41:b8:49:57:6d:04:fa:d2:
                    c8:31:d4:c3:e0:5e:80:fb:5b:6c:68:27:8b:bf:e1:
                    ef:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EE:97:B3:DC:EF:F7:CC:3B:97:1B:44:33:B8:61:3E:5B:37:85:3A
            X509v3 Authority Key Identifier:
                keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:7e:55:f4:de:91:15:5a:ee:c7:3c:1c:25:7b:c4:56:73:
         fc:dc:aa:0c:0e:29:b7:10:4c:90:b8:55:87:0d:19:44:eb:55:
         06:6a:f1:34:e9:52:e7:9e:f0:f5:fd:4d:5e:24:e2:f9:56:b0:
         57:e9:bc:ba:8a:63:fc:c0:1d:e0:b9:51:e0:8e:e1:ad:f2:c1:
         39:80:be:96:c1:e6:60:90:c2:d8:92:ff:f5:a5:6f:f3:63:85:
         ae:5e:80:98:f5:1a:ea:34:50:33:75:76:18:5d:23:3b:ae:5c:
         12:65:14:18:cc:c2:71:df:4c:3c:e0:85:4e:21:9f:f6:b1:2e:
         50:2a:9b:ca:91:b2:b9:31:e0:72:40:fd:bc:d7:d2:c0:56:55:
         86:d5:eb:a2:6a:be:e8:ba:d1:fb:fa:c2:b5:18:c0:ea:58:62:
         f6:b3:27:ac:b9:3b:64:bc:46:41:14:25:45:a1:6c:88:bd:4f:
         a3:ca:64:54:d5:9d:5c:09:d9:7d:42:92:b3:5e:3f:c0:f2:1e:
         5a:7a:b5:6a:52:dc:7b:6e:93:78:3e:2d:31:b9:46:c8:84:9e:
         4f:8d:d8:ee:69:a4:04:b7:8d:ec:b7:fe:04:86:56:e7:62:87:
         0e:94:d5:fa:55:71:dc:a5:d5:5a:9b:96:a6:16:9d:f4:77:4c:
         79:4e:7f:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3
NTM0QzQ3MzAwHhcNMjUwODEyMTkzNjQ2WhcNMjUwODE5MTkzNjQ2WjAYMRYwFAYD
VQQDEw02ODliOTdjZS02ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuykOwPXvOflUkT6uxIOa46CZmRE9SeIOdH4J0uOnNWwXMgwc+pLUvsjd5QkL
L3b9QULurD0RBq/eBqDY+hT2dwerjP6oQp/tKr2sla5tfewWtJ0GiJfUV57Azyzo
FTxqI2HvTVeUqWaLxe4T6HZBApK6/bsJsqzKUaGbsdR16CYc/FA9R4W3Ur2U9IhK
4t2F4JYVU/v3OmI+REKstpylZDhwvVp3Kaw4supIoFY1CJuy+Z1DeVluJQRtPzBo
4R7LZ1+AgSmRD8IJiZm9mj9Y7a40tV8aZGBwkdci2RirZG6/W62Nb83DQbhJV20E
+tLIMdTD4F6A+1tsaCeLv+HvfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnul7Pc
7/fMO5cbRDO4YT5bN4U6MB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE
NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTFCRS83MDA4NDc3RTRENjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4
TXhubkhJRWRoUVIxTk1SekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnHn5V9N6RFVruxzwcJXvEVnP83KoMDim3EEyQuFWHDRlE61UGavE0
6VLnnvD1/U1eJOL5VrBX6by6imP8wB3guVHgjuGt8sE5gL6WweZgkMLYkv/1pW/z
Y4WuXoCY9RrqNFAzdXYYXSM7rlwSZRQYzMJx30w84IVOIZ/2sS5QKpvKkbK5MeBy
QP2819LAVlWG1euiar7outH7+sK1GMDqWGL2syesuTtkvEZBFCVFoWyIvU+jymRU
1Z1cCdl9QpKzXj/A8h5aerVqUtx7bpN4Pi0xuUbIhJ5PjdjuaaQEt43st/4Ehlbn
YocOlNX6VXHcpdVam5amFp30d0x5Tn/h
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:59:27 2025 by rpki-client