Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
File:                     huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json)
Hash identifier:          4ZHdEy7f3LZ65Cr8zoQM31H8nQWs9ewdxeUz091McQY=
Subject key identifier:   C5:AA:5E:3E:F4:01:2E:A5:8C:3D:97:5E:81:55:A5:64:02:F1:F6:7A
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Certificate issuer:       /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
Manifest number:          9E
Signing time:             Sun 15 Jun 2025 05:20:46 +0000
Manifest this update:     Sun 15 Jun 2025 05:20:46 +0000
Manifest next update:     Sun 22 Jun 2025 05:20:46 +0000
Files and hashes:         1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: StW/LPSW3xXFfF1Fp+6hhR9pn6ikfupJFI7TdRcf7HM=)
                          2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
                          rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
        Validity
            Not Before: Jun 15 05:20:46 2025 GMT
            Not After : Jun 22 05:20:46 2025 GMT
        Subject: CN=684e582e-86b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:42:02:86:4e:da:2f:66:d1:47:63:33:9f:
                    c1:82:fe:2d:9f:cc:ab:03:20:5c:30:c4:55:52:57:
                    fb:26:33:71:42:9b:d6:9d:41:12:91:4e:d0:6b:5a:
                    df:61:7d:ff:17:81:a5:98:d5:16:0c:15:9d:a3:76:
                    a6:e9:95:59:a3:e4:1d:d9:77:b7:6e:6c:1d:92:3a:
                    5f:64:59:39:ba:08:9a:c8:6c:c9:b4:69:97:ca:ce:
                    30:39:1c:58:71:02:c0:6c:dc:36:d5:1e:39:bd:d2:
                    61:0d:55:a9:5d:15:5d:62:da:a9:a6:99:a5:39:8c:
                    bc:aa:b3:77:bf:92:0d:fc:1c:fd:3b:9a:f5:a8:08:
                    0d:8c:c8:2e:dc:d8:60:b1:bf:90:6a:03:d9:ac:88:
                    5d:3a:de:31:5c:76:19:04:3d:6f:39:29:c3:1b:e4:
                    41:e0:dd:f4:c7:9f:9f:f7:36:27:19:01:14:0c:15:
                    cf:51:c9:17:e3:93:a1:b4:dc:d1:ea:4e:9a:da:0b:
                    1d:90:b6:cc:37:f1:db:46:89:06:fe:c5:b9:8e:e9:
                    30:8a:22:c2:54:16:2d:97:6e:db:d7:f2:48:58:bb:
                    84:32:5d:60:66:8f:45:1d:12:c4:05:87:07:47:23:
                    aa:da:49:5d:55:f3:f4:80:1c:71:d4:a4:ac:15:55:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AA:5E:3E:F4:01:2E:A5:8C:3D:97:5E:81:55:A5:64:02:F1:F6:7A
            X509v3 Authority Key Identifier:
                keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:82:44:e2:da:06:46:80:d6:57:0a:51:19:3a:f4:9d:09:e0:
         fe:3b:25:24:45:33:ea:eb:46:e9:71:13:09:1a:bc:42:07:cd:
         39:1e:e7:29:90:75:df:9a:1f:e8:c3:c2:54:58:ab:19:1f:47:
         1f:98:35:d7:53:b8:45:19:c0:70:01:51:05:99:1e:ef:3f:27:
         b9:c2:1b:8c:7b:6a:99:ee:47:fc:ba:9b:a3:95:43:9a:8d:8a:
         95:c4:6b:96:35:b2:ae:cb:c9:8d:67:95:97:4f:72:7c:ae:73:
         5d:54:d0:d8:32:32:0e:74:5a:2f:5e:8d:01:60:61:9d:84:69:
         a9:e2:1e:dc:30:ff:6b:c2:17:ef:44:cb:c0:e4:6a:26:4f:96:
         01:16:7b:11:11:cd:1f:b3:ad:b2:48:5c:f5:e9:25:f5:e5:dd:
         82:7d:68:bb:51:19:3c:5e:b7:68:e0:c3:78:a7:18:7d:c2:a6:
         b4:c0:26:82:6f:15:30:8f:8e:c8:44:75:5d:38:f7:c0:9e:75:
         bf:65:37:6d:98:ec:31:ee:28:95:2f:47:33:fc:46:b6:0b:13:
         cc:b7:e7:3d:88:b7:6c:e8:37:cd:18:91:24:13:30:6f:c0:e7:
         f5:f1:78:f8:43:1a:7d:95:d8:e9:4a:19:79:39:35:09:e2:0a:
         b1:8f:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:35:36 2025 by rpki-client