Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
File:                     h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json)
Hash identifier:          ERGO921nZbjVXsGgQoW6wILUuTHfpNrOtP2mF6tXvtY=
Subject key identifier:   4A:62:F5:D6:91:A8:6B:F6:96:3E:76:AC:F5:A0:21:42:E7:78:5E:1F
Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
Certificate issuer:       /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Certificate serial:       34B4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
Manifest number:          34B4
Signing time:             Tue 12 Aug 2025 14:16:46 +0000
Manifest this update:     Tue 12 Aug 2025 14:16:46 +0000
Manifest next update:     Tue 19 Aug 2025 14:16:46 +0000
Files and hashes:         1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: 59N0JLQYafqbj4+PLGLI6OMoqMBeZwJEPURJ7sPFsVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13492 (0x34b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736
        Validity
            Not Before: Aug 12 14:16:46 2025 GMT
            Not After : Aug 19 14:16:46 2025 GMT
        Subject: CN=689b4cce-b609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:01:3c:92:b1:80:2a:1b:ec:6b:ff:07:9f:
                    87:b2:ad:35:33:6b:7b:39:27:df:20:ec:73:8a:c1:
                    34:54:e4:4d:b3:32:1a:89:d1:42:98:e6:0a:f5:c2:
                    e1:a1:e3:3b:bb:aa:ba:13:7c:93:22:57:29:59:0b:
                    2f:b0:01:6b:36:72:d5:a5:28:7f:b9:9f:28:b4:34:
                    bf:a5:9e:2a:c8:1d:8d:42:2c:98:19:79:23:1a:b3:
                    4a:3e:3b:46:cc:ea:79:e7:70:e1:bb:f1:36:9f:05:
                    44:ed:32:56:1a:4c:57:44:3c:5d:fb:3b:e8:3f:a5:
                    f0:6d:10:11:8b:51:da:3c:2c:80:bb:19:95:fd:34:
                    21:bb:92:52:15:81:bd:e5:41:79:cf:2b:17:a8:d5:
                    57:d5:5e:96:df:0b:b4:df:1c:24:39:01:73:1e:38:
                    b0:91:a2:2c:5c:57:c3:4a:5f:98:78:86:dd:1d:f4:
                    16:e4:1d:25:0a:dc:a3:0e:91:88:dc:25:0d:e2:2d:
                    d8:b8:5b:7b:48:64:fe:33:7c:28:57:11:c8:ef:f2:
                    a0:d4:2c:ac:a3:7e:ce:f3:26:f2:79:ca:dc:73:dd:
                    59:b3:59:68:e1:ef:c0:40:82:23:91:84:9c:1b:b8:
                    2e:af:a4:ca:5f:30:92:46:82:97:af:a9:4a:a4:84:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:62:F5:D6:91:A8:6B:F6:96:3E:76:AC:F5:A0:21:42:E7:78:5E:1F
            X509v3 Authority Key Identifier:
                keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:36:e8:78:39:72:62:da:7b:00:2d:05:73:74:66:56:ec:
         ec:e6:df:9e:d7:55:c9:54:56:ee:03:9f:16:4b:95:9b:a5:47:
         d5:b0:95:d0:ee:18:a9:5b:97:75:12:55:84:91:f4:f2:9b:d6:
         dd:64:d7:ce:47:1a:0e:bc:a3:98:f9:40:ae:3e:21:d9:a8:2d:
         0c:e5:06:c2:7e:09:86:c8:22:dd:c8:b3:f3:74:db:8c:26:f2:
         35:d4:7b:fe:5f:af:da:88:32:36:d6:92:b1:b6:10:ea:11:83:
         6d:fd:9c:cc:2b:c8:62:f3:9c:52:34:33:39:79:a0:e5:ba:11:
         96:aa:4b:06:4d:5d:29:4d:7a:96:17:40:6c:8b:22:0c:f4:f4:
         40:17:f8:9f:93:6d:ee:fe:60:f9:8d:eb:80:a3:a2:f0:a0:b8:
         84:f2:68:52:c2:02:9d:5f:23:2b:e3:6c:5e:95:92:1e:8e:c8:
         66:d6:27:20:99:94:67:d4:7d:87:9e:47:32:62:19:6a:d2:a5:
         06:ff:33:80:a0:de:aa:39:b2:32:d7:c4:d3:90:e1:90:39:31:
         58:56:23:58:56:22:e9:cc:0d:6b:33:31:3a:e5:99:19:65:31:
         71:82:51:12:2c:cb:f2:67:c5:8d:c0:5d:b3:f3:f5:e0:25:90:
         45:e6:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:08 2025 by rpki-client