Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
File:                     6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json)
Hash identifier:          FQ/Z1b5+XWy8xQYuxTTD7RBpet9QIkZxA7unzvJEsWk=
Subject key identifier:   E3:EE:DF:25:6F:A5:CE:ED:9B:58:AA:A2:19:7C:4F:EE:CD:5D:8F:C7
Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A
Certificate issuer:       /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
Certificate serial:       123E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
Manifest number:          1233
Signing time:             Sun 10 Aug 2025 17:07:41 +0000
Manifest this update:     Sun 10 Aug 2025 17:07:40 +0000
Manifest next update:     Sun 17 Aug 2025 17:07:40 +0000
Files and hashes:         1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: 3TmG7LpHKqtxh78fdRdscOYaTJS7xBghI/vkKiArTdA=)
                          2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: x0pbE7Ea3sKXTfydYa2BTBmjtzbK1GRSFoSpJkmD3Ks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4670 (0x123e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
        Validity
            Not Before: Aug 10 17:07:40 2025 GMT
            Not After : Aug 17 17:07:40 2025 GMT
        Subject: CN=6898d1dd-88a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:fa:3c:fe:0e:18:e3:a3:44:7e:95:2e:86:
                    53:b5:91:8b:1e:c3:39:45:11:06:cc:71:23:67:41:
                    b2:84:0b:3f:e1:4d:78:2c:9b:6c:c6:ce:60:86:88:
                    51:3a:76:b4:46:60:27:1f:ce:e8:a5:17:37:1b:3d:
                    c8:85:71:a7:96:9f:0f:c1:9e:85:0d:f5:53:ab:a7:
                    98:f4:d1:5c:3b:32:77:63:f2:49:37:8f:f2:1f:a6:
                    f5:75:92:94:08:5f:25:c0:78:f7:31:e3:72:5e:1a:
                    0c:d3:92:14:7a:43:1c:19:9d:62:b9:23:ed:dd:e5:
                    9f:b5:57:ef:25:29:80:f1:4f:21:5a:84:50:7f:62:
                    c1:87:08:8f:ad:b6:22:59:e5:af:a9:15:9d:9d:20:
                    f7:17:d9:47:91:b3:b3:82:1c:e4:26:46:0a:9a:1a:
                    73:e9:20:a0:35:44:9e:be:ab:9a:c5:0b:bf:b0:0f:
                    84:8f:50:02:cc:0d:65:2f:fa:11:53:8c:83:e4:0f:
                    7c:ca:72:df:08:95:f5:ed:1a:35:14:bd:41:1a:52:
                    d5:71:94:cb:22:42:fd:fe:a5:aa:6f:b6:a1:17:da:
                    b5:c5:d6:eb:85:5a:a0:a6:0b:f4:09:da:65:16:93:
                    67:96:80:c2:76:cd:8f:ec:6c:5d:0b:67:9e:3c:1b:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:DF:25:6F:A5:CE:ED:9B:58:AA:A2:19:7C:4F:EE:CD:5D:8F:C7
            X509v3 Authority Key Identifier:
                keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:5d:a4:84:a4:68:78:ea:e8:7e:f6:46:33:09:e1:ac:39:
         cf:20:93:48:61:71:2c:07:92:e0:24:87:23:b8:18:d0:35:fc:
         ca:9f:87:3e:cc:28:e9:86:51:6b:9e:8d:e8:75:2d:4f:f2:54:
         03:b5:13:a8:3c:0a:29:9f:0d:9b:72:fe:e7:93:c5:c1:e4:c5:
         16:cc:2c:45:9c:3c:cf:c8:aa:db:77:68:89:a5:6b:a9:e0:4f:
         1c:08:45:0c:57:77:2d:29:6e:ec:f2:ac:79:fa:2c:58:21:53:
         09:4b:f2:8d:4f:70:3e:a8:73:74:5a:3c:07:aa:64:85:23:92:
         1c:a3:4b:66:88:a0:08:39:fd:c0:5b:56:62:73:95:a5:67:ae:
         48:a8:6d:af:cf:9f:db:10:3e:09:0c:b6:43:fb:71:e4:f9:91:
         9e:81:bc:aa:54:8a:23:e0:be:bd:2d:c3:02:59:b4:69:06:6e:
         4b:9e:34:2a:ee:65:1f:b4:f8:e7:db:fa:ff:38:4b:9c:9d:96:
         5b:b8:4e:dd:56:2b:cc:d9:a7:b9:e8:76:f2:97:0e:00:5b:03:
         f3:1b:47:74:eb:0e:f9:87:9a:ef:48:00:e6:0a:8b:de:43:46:
         3d:16:7f:f7:3c:be:50:72:2d:85:65:fa:11:19:df:3d:70:77:
         c7:6e:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:03:44 2025 by rpki-client