Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft
File:                     6qgUe81-WERO-2P8KsfVqRy_oCE.mft (raw, json)
Hash identifier:          YfYQvMZH5F+6chbFlmdzlREJp+BHYV055AkI3lijopQ=
Subject key identifier:   EC:57:11:CD:3D:17:D3:95:6D:9F:F3:EA:79:3D:21:13:55:1F:41:66
Authority key identifier: EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21
Certificate issuer:       /CN=A91D22E7/serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft
Manifest number:          21
Signing time:             Mon 11 Aug 2025 08:08:17 +0000
Manifest this update:     Mon 11 Aug 2025 08:08:16 +0000
Manifest next update:     Mon 18 Aug 2025 08:08:16 +0000
Files and hashes:         1: 6qgUe81-WERO-2P8KsfVqRy_oCE.crl (hash: 5PjL6W+Yj9ri7tI8W2CkJLlmnm/A/7hgQEvUxTuJikM=)
                          2: 9EA99558465511F08EDD9E3EC4F9AE02.roa (hash: cWoNQ8oC/1Wsplva0paV3Wc+NwujWAt5ZzODK9sNbiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl
                          rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 08:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D22E7, serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021
        Validity
            Not Before: Aug 11 08:08:16 2025 GMT
            Not After : Aug 18 08:08:16 2025 GMT
        Subject: CN=6899a4f0-e270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:89:40:11:df:7e:2a:3f:62:df:18:52:b8:57:
                    ad:73:cf:b4:c5:e3:5c:50:b0:60:00:58:3c:c6:c7:
                    e1:19:98:69:59:7a:7d:38:dc:68:74:37:7a:9c:d5:
                    68:e1:7d:84:c4:e9:96:71:b2:ae:57:9e:2b:a2:d7:
                    d2:c8:89:e2:90:31:d4:0a:81:2d:f1:21:41:4e:e9:
                    4a:a7:bb:bd:00:fd:78:3e:6f:1b:05:e9:a3:db:31:
                    d1:e1:a1:c9:4f:10:79:a4:24:82:fa:c6:3e:d7:f5:
                    0b:05:22:96:bc:c4:7a:13:10:c3:66:c6:2c:e1:e7:
                    b9:f6:97:3f:ff:0a:a3:58:78:b0:1f:b6:e5:60:2a:
                    f1:b3:9e:39:f1:ac:b1:76:d6:c7:52:e6:cc:92:cb:
                    9e:bf:ff:3f:f5:5a:8c:76:46:60:d6:aa:02:66:9f:
                    77:f2:f5:d9:99:cb:27:c4:da:15:f8:bb:41:1e:04:
                    9f:4b:95:88:ff:14:c7:97:13:b0:d4:50:09:93:d7:
                    f0:f2:00:3f:7c:27:53:a4:10:7b:31:10:98:e2:e8:
                    77:99:cf:29:3d:05:79:d1:88:70:9e:6f:06:62:97:
                    72:6d:9e:2c:f1:c8:cd:87:f2:63:20:3a:75:6f:ad:
                    4e:6c:2d:b1:8b:ed:10:6a:fa:e7:82:57:13:b1:00:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:57:11:CD:3D:17:D3:95:6D:9F:F3:EA:79:3D:21:13:55:1F:41:66
            X509v3 Authority Key Identifier:
                keyid:EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cc:3d:ac:0a:19:10:ef:09:ad:61:71:48:65:d4:73:f1:80:
         5b:38:93:c8:a1:ab:20:05:d5:e8:a0:1d:c4:0e:39:6c:e3:7d:
         e4:e0:ba:a6:db:26:69:13:cc:72:cd:41:59:45:d8:1a:39:93:
         73:e9:92:4a:d4:51:80:80:7a:97:02:de:9e:1f:39:4d:59:a8:
         21:80:03:58:23:17:8c:83:da:e3:f9:03:bd:fd:4f:68:2a:70:
         28:1c:d9:63:7f:32:75:98:f3:77:9e:31:26:47:b4:0d:2b:58:
         94:80:4b:8b:f2:f1:0d:f6:ce:26:c2:0b:5e:02:6b:5d:ce:43:
         b9:d5:8e:a4:f4:99:2b:31:6c:4d:2c:a7:58:29:a4:0b:00:40:
         6e:5f:e2:ad:82:b0:cc:01:72:e7:3f:b2:e0:75:cc:e4:a1:76:
         82:b8:dc:90:44:ee:60:c9:f3:43:3e:8b:af:71:74:81:53:45:
         21:bb:2d:0d:71:85:c5:3f:06:c8:83:72:4d:bb:ec:7d:a4:cd:
         27:41:60:47:e3:f5:22:07:8e:e9:ac:d0:86:91:85:86:1b:e8:
         47:0f:f2:aa:bc:e2:03:31:5c:71:c1:8d:ab:6f:1c:35:d1:dc:
         ad:cf:73:f7:9a:11:dc:d7:0f:6a:f6:8f:d0:83:4b:8a:eb:99:
         49:e2:55:92
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MjJFNzExMC8GA1UEBRMoRUFBODE0N0JDRDdFNTg0NDRFRkI2M0ZDMkFDN0Q1QTkx
Q0JGQTAyMTAeFw0yNTA4MTEwODA4MTZaFw0yNTA4MTgwODA4MTZaMBgxFjAUBgNV
BAMTDTY4OTlhNGYwLWUyNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgiUAR334qP2LfGFK4V61zz7TF41xQsGAAWDzGx+EZmGlZen043Gh0N3qc1Wjh
fYTE6ZZxsq5Xniui19LIieKQMdQKgS3xIUFO6Uqnu70A/Xg+bxsF6aPbMdHhoclP
EHmkJIL6xj7X9QsFIpa8xHoTEMNmxizh57n2lz//CqNYeLAftuVgKvGznjnxrLF2
1sdS5sySy56//z/1Wox2RmDWqgJmn3fy9dmZyyfE2hX4u0EeBJ9LlYj/FMeXE7DU
UAmT1/DyAD98J1OkEHsxEJji6HeZzyk9BXnRiHCebwZil3JtnizxyM2H8mMgOnVv
rU5sLbGL7RBq+ueCVxOxAI7VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7FcRzT0X
05Vtn/PqeT0hE1UfQWYwHwYDVR0jBBgwFoAU6qgUe81+WERO+2P8KsfVqRy/oCEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyMkU3LzEwM0M4QTE0NDY1
NTExRjBCN0NDMUMzQUM0RjlBRTAyLzZxZ1VlODEtV0VSTy0yUDhLc2ZWcVJ5X29D
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNnFnVWU4MS1XRVJPLTJQOEtzZlZxUnlfb0NFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
MkU3LzEwM0M4QTE0NDY1NTExRjBCN0NDMUMzQUM0RjlBRTAyLzZxZ1VlODEtV0VS
Ty0yUDhLc2ZWcVJ5X29DRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACDMPawKGRDvCa1hcUhl1HPxgFs4k8ihqyAF1eigHcQOOWzjfeTguqbb
JmkTzHLNQVlF2Bo5k3PpkkrUUYCAepcC3p4fOU1ZqCGAA1gjF4yD2uP5A739T2gq
cCgc2WN/MnWY83eeMSZHtA0rWJSAS4vy8Q32zibCC14Ca13OQ7nVjqT0mSsxbE0s
p1gppAsAQG5f4q2CsMwBcuc/suB1zOShdoK43JBE7mDJ80M+i69xdIFTRSG7LQ1x
hcU/BsiDck277H2kzSdBYEfj9SIHjums0IaRhYYb6EcP8qq84gMxXHHBjatvHDXR
3K3Pc/eaEdzXD2r2j9CDS4rrmUniVZI=
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:15 2025 by rpki-client