Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
File:                     hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json)
Hash identifier:          LbhuT1KVToJHaLWCEk13RcEHnUOfiTnljFpGqkkNaF0=
Subject key identifier:   91:EA:B1:1C:5C:0B:D2:5B:39:40:3A:72:65:D2:D0:89:36:35:D4:5F
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Certificate issuer:       /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial:       350F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
Manifest number:          34E6
Signing time:             Wed 18 Jun 2025 14:22:47 +0000
Manifest this update:     Wed 18 Jun 2025 14:22:47 +0000
Manifest next update:     Wed 25 Jun 2025 14:22:47 +0000
Files and hashes:         1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: vtvShiij11a6TY0KOXjNVSlJ1T19lz0qmLHuiQEEhKk=)
                          2: D750ADC20ACF11F0B4EBA55FC4F9AE02.roa (hash: NL1ARYRNOz8aLxkxUrPpKF6D4wwBVw7q5BCEbZZrFuo=)
                          3: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (hash: I6SN+VthWHNwpn13bC2pRMPfdtmxkMFNn0d1M2WvxFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 14:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13583 (0x350f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
        Validity
            Not Before: Jun 18 14:22:47 2025 GMT
            Not After : Jun 25 14:22:47 2025 GMT
        Subject: CN=6852cbb7-9d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:7e:dd:7e:20:d9:61:e6:24:34:e9:3e:71:
                    cf:fd:a7:a5:60:c2:1b:91:52:e4:da:66:99:96:4f:
                    55:89:37:a4:98:02:a8:1d:7f:aa:7c:b1:1f:4f:eb:
                    1f:5d:f8:72:c8:3a:0f:cb:0f:3c:50:06:44:e2:a2:
                    d9:0d:ca:ef:98:b8:f8:d5:d6:5d:ae:42:07:1d:2d:
                    29:82:58:69:64:16:53:05:d9:1b:3c:90:bc:00:7a:
                    19:d8:9d:35:75:2b:0d:75:bc:57:18:2f:99:94:d5:
                    56:68:08:a6:d7:5d:fc:bb:89:4f:e2:a1:31:d9:a9:
                    cf:1c:73:7c:cd:42:9f:1f:35:f4:f1:27:7c:bf:67:
                    74:88:4b:cb:b6:f9:e5:c1:fe:2b:4c:57:e8:b4:00:
                    aa:c4:3a:df:8d:49:2b:9c:c0:3a:c3:01:b3:6f:e3:
                    18:cf:11:d0:d7:fd:59:d9:e0:97:62:f0:8f:ae:69:
                    44:d2:f8:13:b2:23:80:22:c5:73:08:1f:81:8f:41:
                    76:e9:a0:b3:ed:02:c5:5d:bc:58:aa:ee:0f:60:a6:
                    2e:00:47:55:59:35:2b:46:bc:2e:0e:67:84:ff:bd:
                    f0:22:32:eb:ad:fa:79:33:4b:32:bd:4c:75:bf:ca:
                    af:d1:7a:f7:cb:ca:a4:fd:63:39:fa:c1:d5:ed:46:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:B1:1C:5C:0B:D2:5B:39:40:3A:72:65:D2:D0:89:36:35:D4:5F
            X509v3 Authority Key Identifier:
                keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:94:52:98:30:83:40:9d:a5:72:6a:32:e7:f4:46:a2:09:
         b7:c5:f0:12:fd:3a:ec:15:f1:f6:4f:9d:07:3f:bb:91:19:24:
         c4:56:da:fc:ff:c6:44:6b:f7:00:22:fb:72:bc:a5:3b:0f:25:
         50:97:32:c5:d5:05:0d:17:41:ef:4e:c3:74:4f:6e:99:d6:f1:
         7e:ec:f6:cd:23:60:77:81:08:1a:c5:33:36:2f:2e:81:f6:90:
         24:81:df:1f:ea:f3:ae:2c:6a:fb:fa:c4:24:05:cd:e9:fc:57:
         5e:66:56:19:a7:d6:a9:6e:af:d3:6d:47:e7:c5:ef:d9:45:a5:
         2b:06:22:a4:52:b7:bd:8b:77:9d:2d:e7:f7:c5:1e:9a:7f:79:
         fa:78:77:81:81:fd:92:de:ce:cd:e1:02:f5:a0:b8:3c:98:92:
         bf:16:a9:13:28:f5:2d:5d:16:16:7c:f6:ef:b3:7e:2e:77:b1:
         36:01:2c:09:a5:ce:b5:f8:70:80:b6:eb:02:60:15:86:91:8e:
         dd:59:fb:5c:08:17:70:12:d5:0d:fd:25:c5:2a:f4:1c:ea:3f:
         4a:cf:54:d6:d7:33:78:e2:15:be:89:f4:05:c1:b5:c1:29:64:
         39:b3:b8:f6:09:21:e6:bd:47:a9:93:d9:68:5a:8a:8c:5a:8e:
         87:58:9b:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw
QzJDRTQ5QjQwHhcNMjUwNjE4MTQyMjQ3WhcNMjUwNjI1MTQyMjQ3WjAYMRYwFAYD
VQQDEw02ODUyY2JiNy05ZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhh+3X4g2WHmJDTpPnHP/aelYMIbkVLk2maZlk9ViTekmAKoHX+qfLEfT+sf
XfhyyDoPyw88UAZE4qLZDcrvmLj41dZdrkIHHS0pglhpZBZTBdkbPJC8AHoZ2J01
dSsNdbxXGC+ZlNVWaAim1138u4lP4qEx2anPHHN8zUKfHzX08Sd8v2d0iEvLtvnl
wf4rTFfotACqxDrfjUkrnMA6wwGzb+MYzxHQ1/1Z2eCXYvCPrmlE0vgTsiOAIsVz
CB+Bj0F26aCz7QLFXbxYqu4PYKYuAEdVWTUrRrwuDmeE/73wIjLrrfp5M0syvUx1
v8qv0Xr3y8qk/WM5+sHV7UbgswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHqsRxc
C9JbOUA6cmXS0Ik2NdRfMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE
ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY
c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3P5RSmDCDQJ2lcmoy5/RGogm3xfAS/TrsFfH2T50HP7uRGSTEVtr8
/8ZEa/cAIvtyvKU7DyVQlzLF1QUNF0HvTsN0T26Z1vF+7PbNI2B3gQgaxTM2Ly6B
9pAkgd8f6vOuLGr7+sQkBc3p/FdeZlYZp9apbq/TbUfnxe/ZRaUrBiKkUre9i3ed
Lef3xR6af3n6eHeBgf2S3s7N4QL1oLg8mJK/FqkTKPUtXRYWfPbvs34ud7E2ASwJ
pc61+HCAtusCYBWGkY7dWftcCBdwEtUN/SXFKvQc6j9Kz1TW1zN44hW+ifQFwbXB
KWQ5s7j2CSHmvUepk9loWoqMWo6HWJuX
-----END CERTIFICATE-----
Generated at Thu Jun 19 04:36:11 2025 by rpki-client