Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
File:                     huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json)
Hash identifier:          jJV1GxWeJPEJiArhjga7RVVSQG2gCBFYZhWV5TiLcVg=
Subject key identifier:   50:13:B2:DF:E7:E2:93:A9:E1:0D:4E:5A:1F:AC:10:03:65:05:7B:F0
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Certificate issuer:       /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
Manifest number:          BA
Signing time:             Sat 09 Aug 2025 06:18:54 +0000
Manifest this update:     Sat 09 Aug 2025 06:18:53 +0000
Manifest next update:     Sat 16 Aug 2025 06:18:53 +0000
Files and hashes:         1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: DnjAVYzNS712LOM13cMbv7WGlfVSGKaTbyzf/lUjBfA=)
                          2: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (hash: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
                          rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
        Validity
            Not Before: Aug  9 06:18:53 2025 GMT
            Not After : Aug 16 06:18:53 2025 GMT
        Subject: CN=6896e84e-eab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:10:f9:6c:c4:98:11:da:67:65:62:71:80:
                    1f:28:8f:6e:54:71:f3:9d:51:19:98:c5:98:1b:b0:
                    b3:84:c0:65:fd:39:8b:6a:9d:c0:ed:fd:f1:8b:42:
                    57:3b:29:64:4e:f2:1f:e6:db:93:04:43:c4:fd:8f:
                    94:c6:3d:1e:3f:22:db:4b:c5:f0:61:61:4c:2e:84:
                    a5:c6:7e:79:10:36:4b:b9:e3:00:ad:28:e0:b8:a8:
                    4d:4b:4e:68:7e:31:d1:2d:2a:fe:f5:dc:a9:6d:91:
                    8e:a6:49:82:e4:c4:51:52:c6:8c:a3:1e:63:da:a4:
                    1f:94:a7:4f:6f:5f:19:b0:a0:46:d3:d0:62:59:bc:
                    a6:b0:9f:2b:6d:aa:b0:17:93:67:b2:df:86:a8:7c:
                    31:0f:84:6f:ec:52:4a:03:fe:ed:0d:8b:9e:60:5a:
                    79:9a:5b:3f:4f:aa:b4:8f:47:ce:e9:45:a5:d8:76:
                    b8:4a:7d:b8:34:23:4c:55:9e:34:6b:a7:f8:24:59:
                    e8:dc:f1:62:69:c5:89:4c:68:ff:22:e6:54:52:f4:
                    c4:1b:db:bb:96:11:52:4e:47:2b:c2:b3:dd:fb:33:
                    b4:be:1a:e5:08:13:79:80:8e:bf:88:82:18:77:1f:
                    74:67:7e:39:27:d8:6f:b4:01:8e:14:6b:66:ab:18:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:13:B2:DF:E7:E2:93:A9:E1:0D:4E:5A:1F:AC:10:03:65:05:7B:F0
            X509v3 Authority Key Identifier:
                keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:eb:7d:72:37:75:9f:68:e4:59:00:8e:b9:89:d2:86:79:eb:
         4e:12:9c:d8:f8:b4:f6:3f:6a:24:f2:b4:07:52:54:b7:75:7c:
         4e:5e:47:87:45:f2:fc:52:44:df:7d:d6:31:bd:f3:8e:4e:37:
         73:bf:8f:6f:f6:7d:73:44:7a:63:23:5a:50:80:04:d7:35:ae:
         cb:50:21:41:8c:0f:cd:f9:5f:f1:24:e9:40:f3:14:4c:e8:c0:
         7d:37:07:fc:a4:3f:a6:b0:c2:bb:7f:b8:6f:17:64:80:60:89:
         ed:64:b1:73:1f:8a:78:43:00:1d:19:b9:cb:b1:19:b1:88:b9:
         75:a1:a3:7f:7e:77:8a:68:b6:ef:69:d7:1a:63:43:90:0b:dc:
         91:96:47:ca:a5:67:53:83:34:74:b1:83:2b:8b:62:25:06:02:
         32:36:03:3b:16:d2:45:dd:e7:55:6d:8d:cf:7b:45:f4:07:85:
         fb:a6:37:96:e8:7f:92:c8:ef:ec:6a:cf:6b:ff:0e:d9:e5:c6:
         8a:54:d8:c3:58:5f:e9:de:cd:d4:99:11:c2:33:da:e4:e2:d0:
         cd:15:9a:5f:e3:93:ee:f5:25:07:e1:fc:f0:5d:bd:0d:2c:97:
         05:41:fd:92:b7:76:b6:4e:21:60:0d:2c:9a:c3:b5:72:34:8f:
         0e:2b:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:01 2025 by rpki-client