Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
File:                     HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json)
Hash identifier:          bJXSmsw3WGUx7bbhLR6xrCnYOUxWNRMXiPYeHLeCza0=
Subject key identifier:   E2:99:83:98:6A:37:E2:30:6A:78:0F:00:15:1D:2D:94:1D:96:C3:52
Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
Certificate issuer:       /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
Manifest number:          F7
Signing time:             Sat 09 Aug 2025 05:40:55 +0000
Manifest this update:     Sat 09 Aug 2025 05:40:55 +0000
Manifest next update:     Sat 16 Aug 2025 05:40:55 +0000
Files and hashes:         1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: XwqjilPmeOlpJ3EDabaBCT2GPIukPm23KF/mItZo5W0=)
                          2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=)
                          3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: FsP9VYFAICAa71awQKv/xp4WMIgY/BZLf1PogGiTuE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
                          rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
        Validity
            Not Before: Aug  9 05:40:55 2025 GMT
            Not After : Aug 16 05:40:55 2025 GMT
        Subject: CN=6896df67-5d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:db:e7:7b:5f:a4:76:d1:e1:35:ea:f4:ee:
                    ef:8f:ad:bd:2e:cc:fa:b9:0b:ee:b4:00:3c:fd:1f:
                    bb:9e:2d:4c:d8:cc:dd:ce:9d:67:6c:09:61:fc:18:
                    f7:2f:ea:3d:48:16:3c:2c:d2:86:66:35:1b:01:84:
                    28:86:ad:3a:5b:d8:ab:88:10:2b:2c:b2:af:47:91:
                    b2:55:e7:83:58:43:6a:5f:fc:e0:4b:a4:44:0d:9a:
                    b9:6f:dc:16:75:91:74:42:05:c8:8f:2e:c8:fd:9f:
                    59:7d:30:ed:9f:01:d5:99:0b:73:f8:12:1c:7d:2f:
                    0f:27:a7:69:ae:50:f5:a4:44:b8:fd:a6:17:16:51:
                    8e:8a:c8:23:77:58:dd:77:7b:ce:09:7c:e3:22:b5:
                    23:47:86:9c:06:68:24:52:cf:90:d8:d7:d2:a4:0d:
                    55:10:dd:9a:ab:26:2e:ba:0e:69:46:07:f3:27:10:
                    8f:c5:e9:58:20:68:21:9c:21:74:1b:7e:6e:ca:a6:
                    69:bc:37:79:f7:de:7f:b8:a1:f4:39:b6:3d:ca:a4:
                    d8:33:6b:d2:b9:73:59:76:7c:7f:93:d6:f1:bc:bc:
                    9a:a0:ae:b1:1e:dc:e6:79:dd:40:9a:70:b5:f4:df:
                    fe:40:7c:fd:af:90:fc:6f:35:e4:78:dd:d9:e1:aa:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:99:83:98:6A:37:E2:30:6A:78:0F:00:15:1D:2D:94:1D:96:C3:52
            X509v3 Authority Key Identifier:
                keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f5:4a:a3:b1:b4:d2:b2:77:b9:b0:ab:8b:ca:90:a2:fd:b4:
         38:44:34:bf:a7:88:58:f6:3f:a9:2f:25:43:c1:42:e6:c8:d6:
         5e:46:a5:af:7b:ec:a2:1d:ab:c1:80:e4:57:ea:7a:db:6c:f7:
         36:02:5d:e5:8b:a2:64:f1:e9:e2:8e:13:21:c3:43:e1:9d:c3:
         6a:07:84:54:50:53:13:7a:29:4a:30:66:38:8b:ff:cb:f2:35:
         7e:7b:a2:54:c2:e0:2f:7e:dd:c9:b8:ef:de:26:c9:53:cc:ca:
         20:b6:7a:7a:bf:e2:70:20:8f:0e:bb:d9:38:8b:aa:94:10:af:
         83:61:18:fb:42:e6:5a:96:2f:01:02:b5:47:e8:d6:f0:31:f6:
         2e:e2:b9:80:3b:b9:ce:f8:08:f4:63:57:f0:bd:28:9c:20:30:
         4c:e6:2b:48:5b:00:33:12:c9:30:29:3f:45:ed:55:8f:1d:86:
         3d:33:b3:23:13:44:f0:c7:98:93:07:d0:6d:52:d4:a6:fe:c0:
         11:5f:30:a3:04:af:00:9c:a7:ed:48:e6:aa:75:94:7a:14:59:
         40:b0:9c:a1:0e:98:10:71:27:2e:d3:f5:1b:42:0a:67:b8:cb:
         94:bd:76:71:8e:96:76:00:f3:c4:00:c1:56:4a:51:31:de:92:
         04:00:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:10:56 2025 by rpki-client