Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File:                     HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier:          xsLf3rWShuw/y52IsoVfb2oz1YJSyiW6zxdOHYDEKW4=
Subject key identifier:   32:AE:3E:31:86:ED:A9:10:07:20:04:BD:A7:E6:70:D2:3B:63:DE:03
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer:       /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number:          0155
Signing time:             Fri 13 Jun 2025 03:11:35 +0000
Manifest this update:     Fri 13 Jun 2025 03:11:35 +0000
Manifest next update:     Fri 20 Jun 2025 03:11:35 +0000
Files and hashes:         1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: BdMl5GR9bNgiUdLiz25nl4o9J02+sx7eiqatRUrNMOc=)
                          2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: kdsA/bny2SyuYzwYvWjWWNRHht/7GqZqRAtQE/oZ56I=)
                          3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI=)
                          4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: jLjyxuzoihO6U4uZj4lE+4ZXFm13Tj1cLNw88yjt4fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
                          rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
        Validity
            Not Before: Jun 13 03:11:35 2025 GMT
            Not After : Jun 20 03:11:35 2025 GMT
        Subject: CN=684b96e7-495c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bb:3d:34:48:18:fc:6c:17:96:4a:e5:c0:69:
                    69:aa:49:b1:26:ae:41:bb:bb:e9:55:62:8f:dc:78:
                    85:0b:23:8b:7f:74:63:d6:8a:17:7d:18:60:22:e5:
                    e9:8e:98:f6:58:71:b5:bc:9f:dd:9e:ff:5c:bb:dc:
                    31:fb:b3:d5:e1:5a:4f:c9:c2:f8:fb:cd:ab:e7:70:
                    80:25:c7:67:33:c1:9b:0a:56:b2:06:4b:bc:2b:5b:
                    26:2a:67:de:12:e2:1f:f1:94:f7:bb:34:0a:94:84:
                    91:a7:d7:81:a2:7e:7f:f4:ea:f1:cf:0a:f5:47:32:
                    38:82:56:7f:83:7e:9e:ac:21:33:68:47:eb:9b:6d:
                    8e:b9:3d:16:9e:a4:f3:59:64:a8:96:2b:b9:cb:8a:
                    8a:36:ca:ac:3f:56:94:fa:a4:aa:e4:91:8b:eb:ae:
                    30:e5:ae:7c:ea:d6:5e:fa:d7:04:71:7c:1d:d1:4f:
                    38:98:96:62:c7:27:6f:74:e1:94:52:14:ee:96:ca:
                    1f:b8:51:ee:f0:fd:52:92:6a:c6:ca:56:9a:00:61:
                    23:82:29:6d:d5:0b:11:86:83:9c:71:5e:b1:c9:a9:
                    44:cf:31:37:ed:d3:bd:83:be:36:cb:eb:c7:2e:37:
                    64:7c:83:d5:e3:8f:5e:82:de:b4:f3:1b:ca:df:95:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AE:3E:31:86:ED:A9:10:07:20:04:BD:A7:E6:70:D2:3B:63:DE:03
            X509v3 Authority Key Identifier:
                keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:59:a9:48:c3:c1:08:16:b9:59:08:6b:ba:c7:fe:b4:3a:62:
         cd:52:c1:4d:98:db:c8:10:7f:17:ec:41:d0:46:55:27:3a:fd:
         c4:4d:d7:00:0e:bc:e0:93:a6:06:b7:b2:6a:47:5e:ed:07:12:
         d5:3a:cb:e9:0c:dd:11:59:bf:74:ab:a2:68:82:bb:24:c1:7f:
         57:44:97:ba:8e:e1:19:e2:5d:fd:25:ed:08:b3:7c:4b:61:61:
         15:02:24:bf:08:57:8b:8a:e0:90:b1:93:1c:f9:36:39:0c:97:
         02:62:3b:c5:eb:76:97:73:40:d2:cb:99:f4:5e:83:72:63:3e:
         1f:bc:0b:d8:3d:a4:ff:55:2e:10:1b:f9:27:b6:25:30:bb:cd:
         64:7e:7d:a9:a9:f3:06:41:89:62:0b:f7:68:9b:5f:64:ac:0d:
         42:e4:bb:c9:17:4c:96:ba:26:5b:de:fb:13:35:0a:8b:2b:d8:
         2e:cc:83:36:5a:4f:82:b9:49:b6:c7:85:b1:9f:26:4c:0d:7f:
         97:d5:c0:21:df:26:cf:1c:cd:b5:6a:7d:72:e9:af:38:66:a2:
         0b:fb:48:75:0c:f1:14:dd:d6:15:0d:1c:3b:06:05:dc:16:e8:
         2a:9b:f7:47:00:d5:98:66:77:cd:6e:7b:92:eb:e1:f1:8c:c1:
         a6:b6:40:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:55:13 2025 by rpki-client