Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
File:                     HIAVCsljCYTTjMb1nD7MdRsl8-c.mft (raw, json)
Hash identifier:          P3+wk+ZWJsDP/VklVBG0GaZ2kGMxyOBYT7CgZR1cXZA=
Subject key identifier:   35:D7:02:D7:7F:0E:39:B2:11:ED:1E:E4:A0:8E:83:52:FE:4F:38:71
Authority key identifier: 1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7
Certificate issuer:       /CN=A915A549/serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
Manifest number:          6D
Signing time:             Sat 09 Aug 2025 07:43:52 +0000
Manifest this update:     Sat 09 Aug 2025 07:43:51 +0000
Manifest next update:     Sat 16 Aug 2025 07:43:51 +0000
Files and hashes:         1: HIAVCsljCYTTjMb1nD7MdRsl8-c.crl (hash: MutEUIsfl34mzsVQ2RXcBFprUpJpQnVmW8UTSDDq6dE=)
                          2: E9B51C0AD24411EFBD747915C4F9AE02.roa (hash: h7LkbeKD0rtGSmQTm/4/z1tqrdfuxl9pJq7z33t/Gys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl
                          rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A549, serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
        Validity
            Not Before: Aug  9 07:43:51 2025 GMT
            Not After : Aug 16 07:43:51 2025 GMT
        Subject: CN=6896fc38-0d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:7c:c1:35:0a:a3:d9:11:b9:f1:a1:92:b1:
                    ff:52:c1:fe:95:f9:93:65:d8:02:39:f7:fa:65:99:
                    48:22:79:86:69:27:f9:9d:1d:1d:3e:2b:25:5d:7f:
                    d2:53:1c:b8:f6:21:7d:82:79:0c:82:4b:f7:cc:c5:
                    ed:93:98:de:2d:94:c4:bc:18:58:33:53:61:f7:44:
                    42:5e:91:d4:7e:6e:1a:3f:cf:dd:0b:54:50:65:f3:
                    4f:1d:dc:1e:bf:b3:2f:18:78:6e:7f:72:fa:3e:54:
                    f1:d2:bb:56:4e:13:19:34:f0:3c:a0:49:d3:ef:5f:
                    3b:29:b4:4c:cb:33:e4:bc:2e:8e:d4:91:cb:cc:cc:
                    44:df:59:a9:ae:18:64:67:4f:d0:36:44:23:3d:e5:
                    eb:dc:c4:69:84:70:a5:f2:70:8a:7a:88:b4:ba:c1:
                    45:95:a9:47:92:1b:95:3f:fd:7a:ed:7d:c4:52:c0:
                    2a:19:29:5b:fd:ba:33:8a:05:ce:fb:dd:7a:3d:9d:
                    a6:36:b8:53:dc:3c:1a:c0:7a:4b:30:e9:42:a6:85:
                    7f:7c:14:3a:be:82:47:20:c0:ac:e7:87:1a:29:b9:
                    4c:2f:c1:81:e9:f5:27:b5:a8:b6:27:ad:9f:59:e4:
                    c5:ef:5f:1f:52:06:13:04:00:d1:3f:a9:ff:48:0b:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D7:02:D7:7F:0E:39:B2:11:ED:1E:E4:A0:8E:83:52:FE:4F:38:71
            X509v3 Authority Key Identifier:
                keyid:1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:f2:1e:82:a4:d1:1a:35:38:d1:2c:5c:d8:76:82:d5:a5:
         d1:d2:ab:6b:dd:26:4c:74:64:31:e5:fe:bf:ba:ce:4b:a6:e1:
         3d:f3:6a:12:dc:2b:16:18:1f:e1:7f:c6:80:5f:a1:4e:c6:15:
         a9:85:f4:7b:74:10:d7:97:f6:d8:68:72:c4:7b:5d:4b:3b:87:
         eb:3c:1f:fe:78:46:3d:bc:f5:9b:d4:13:dd:c2:67:f1:05:f9:
         2c:03:30:1c:7a:a4:d9:17:fc:2a:85:01:8d:80:a4:1d:2b:ee:
         e0:c5:04:17:f2:2d:9b:1f:4d:3f:84:85:a0:3f:37:4b:c6:35:
         75:89:d4:2c:1b:92:d2:f1:fc:cc:88:02:d4:46:0e:a7:a0:2e:
         9d:40:80:b4:7e:4f:3c:c1:d4:e5:b8:9d:b4:1b:48:d5:fd:73:
         6b:86:c9:6d:69:58:bf:f7:f6:1a:f7:6b:32:50:46:2b:11:f9:
         7c:d4:f0:ac:b3:8f:af:1e:99:ed:f6:4a:be:1f:20:0d:0b:d8:
         43:a5:85:07:8a:38:44:30:b4:f4:81:01:58:e1:50:06:94:e6:
         c9:ba:2e:2f:b3:c0:d2:ff:46:24:46:17:e5:21:01:23:25:a3:
         3f:38:ad:ff:f7:2a:5b:f4:74:0d:0a:4c:59:79:9d:09:b1:20:
         11:e2:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:40 2025 by rpki-client