Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File:                     hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier:          zYHegNCNqXd5yohtIWc5di8V2LGPAWCZMhnYw76TOxk=
Subject key identifier:   D6:5E:59:43:44:C6:96:7F:7C:CA:0D:98:87:A3:44:B7:7A:F9:81:34
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer:       /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial:       0514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number:          0503
Signing time:             Thu 07 Aug 2025 00:11:16 +0000
Manifest this update:     Thu 07 Aug 2025 00:11:15 +0000
Manifest next update:     Thu 14 Aug 2025 00:11:15 +0000
Files and hashes:         1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: PPA7RRf/W6q/EzAVAIqXAutoHn7A/3bDjC+aYV89J9E=)
                          2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: YHTE5QYQ4ZxchKvHk6Tg5vyK0QNcF3tQixzNTie8Jug=)
                          3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: 63vkN+nqGcEYIUErZWKNYsJiLNJREPqHvMp6E/nWN+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
                          rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 00:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300 (0x514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
        Validity
            Not Before: Aug  7 00:11:15 2025 GMT
            Not After : Aug 14 00:11:15 2025 GMT
        Subject: CN=6893ef23-2d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:cb:3d:e7:9d:1e:f5:98:55:68:58:0a:bd:
                    d1:4b:8e:d0:5c:59:6f:d4:1c:b7:b5:40:b8:08:32:
                    37:27:d7:46:6a:86:65:6a:e9:d2:d3:16:e1:48:4a:
                    a1:99:1e:71:72:67:03:31:b5:c8:3f:a6:d9:1d:33:
                    a3:54:79:a7:13:17:19:c2:49:04:67:02:be:5e:b5:
                    b4:07:0a:7a:a7:e5:87:bd:e7:09:72:94:60:d6:d3:
                    cb:ff:19:42:36:f6:e8:55:1b:fe:16:54:30:0e:3d:
                    9b:34:17:b9:b0:e5:6b:cf:88:13:85:d7:f7:c0:2b:
                    c5:53:a0:91:7a:58:76:90:bd:5e:d4:b4:f1:58:ea:
                    b2:59:34:3f:8c:7d:79:84:d1:3f:99:d2:42:f8:3d:
                    65:91:95:ee:6d:e0:d6:da:ab:ca:52:f8:e7:66:ad:
                    6b:44:ad:0a:94:70:8d:55:14:38:50:bc:d4:b9:f4:
                    66:35:ab:eb:3f:cf:aa:7d:0d:73:7c:d5:40:94:78:
                    5b:c3:da:39:fb:0c:67:e6:5f:b2:00:29:f4:e3:d1:
                    c5:24:88:21:4d:b7:e2:f3:07:72:6b:54:77:67:8c:
                    32:49:4d:15:ec:82:e6:cc:e8:e2:c7:4e:23:13:91:
                    ab:e1:01:a5:1c:fa:6d:62:cf:32:16:3e:6f:f3:06:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5E:59:43:44:C6:96:7F:7C:CA:0D:98:87:A3:44:B7:7A:F9:81:34
            X509v3 Authority Key Identifier:
                keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:06:ef:f7:76:a8:d7:4e:26:56:47:fc:55:03:cd:fd:13:4e:
         e5:1f:f0:55:bf:7d:3a:27:5e:53:2b:f0:be:c0:48:8c:db:29:
         62:b9:17:34:45:f6:54:58:35:bc:4f:4f:06:94:3f:6f:4c:e6:
         b4:f8:b2:59:f0:84:af:2c:a3:04:f1:a5:ea:1c:f2:1f:3a:82:
         db:cc:d0:00:4b:36:09:ed:c2:5e:2c:18:fc:20:67:6a:28:8f:
         59:cc:27:06:01:e7:b1:74:43:e9:93:35:1e:3a:b1:a5:6a:c0:
         36:6c:ff:83:d0:76:60:22:d0:f4:f9:ec:86:4b:bd:73:0c:97:
         dc:ae:6f:50:47:e9:47:07:f8:8f:fd:e5:bb:16:35:d3:ff:ab:
         ea:0a:97:10:6e:ad:b2:79:78:ba:ea:91:7c:11:12:53:72:a5:
         aa:04:d6:3f:de:be:f2:a1:79:77:ec:33:34:5f:a5:3c:d3:6e:
         c1:c5:45:0a:2e:37:d6:ea:42:0a:6f:16:7c:83:de:3e:3f:b8:
         3b:5f:1d:87:2a:d1:3b:14:6a:c0:92:39:67:ae:6b:4a:66:a5:
         51:fe:b1:10:67:27:58:a2:ef:a3:3f:e7:31:ec:ab:72:79:83:
         cc:64:be:b2:f2:ef:a7:22:d9:51:73:ce:8b:aa:54:f7:97:de:
         6b:1b:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:07:37 2025 by rpki-client