Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
File:                     HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json)
Hash identifier:          lq4MP1j7DaVHWiccnBuYGFth4to5Xjb2+IN+BWj+rHo=
Subject key identifier:   0D:8D:29:E6:A3:07:34:37:B8:B9:B5:B9:9B:8E:C5:43:11:D5:B2:49
Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C
Certificate issuer:       /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C
Certificate serial:       177A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
Manifest number:          177A
Signing time:             Fri 08 Aug 2025 16:45:10 +0000
Manifest this update:     Fri 08 Aug 2025 16:45:09 +0000
Manifest next update:     Fri 15 Aug 2025 16:45:09 +0000
Files and hashes:         1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: 3DomV9ZioOV+C8iFIHqYjgII1of0+5HN9nwVxYcgO80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl
                          rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6010 (0x177a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C
        Validity
            Not Before: Aug  8 16:45:09 2025 GMT
            Not After : Aug 15 16:45:09 2025 GMT
        Subject: CN=68962996-e93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:d9:10:85:dc:68:b6:2a:8c:31:42:b7:5c:
                    d3:77:a5:18:ca:b3:88:00:44:ed:a4:52:fd:a4:45:
                    9d:66:91:ad:b4:e8:e0:f4:83:9e:a3:26:19:18:9a:
                    94:18:b6:2c:14:0f:fb:87:41:87:34:43:31:45:da:
                    63:4e:89:2c:66:ef:eb:05:bb:fa:db:52:d1:3b:c8:
                    88:8d:b8:5c:b4:99:cc:3a:30:e7:4d:0f:04:48:e8:
                    f4:3c:d9:e7:78:af:6a:3d:ab:1e:7c:a9:65:22:2d:
                    16:14:b4:94:2e:d0:5c:86:d3:2a:e5:31:b8:93:13:
                    b6:d2:f5:61:5c:6b:69:b1:67:1c:88:03:ce:c4:75:
                    72:da:0a:a5:9f:4d:3b:07:f0:ab:73:e1:28:9b:87:
                    7e:f1:01:fc:13:26:64:46:77:23:19:ef:e0:f5:a8:
                    70:37:f0:ff:86:0b:59:95:63:6f:86:46:ff:5e:65:
                    46:e1:b3:ff:36:af:f8:00:3f:7c:20:6c:62:3f:46:
                    c5:09:50:cf:7b:14:a0:cf:25:5d:a7:59:6a:3d:01:
                    05:88:16:23:0e:d3:2d:c9:f1:0b:5a:66:cc:4a:53:
                    c6:0a:72:e0:b9:85:c8:77:76:3b:0f:80:c2:6a:aa:
                    13:54:3f:07:ec:89:48:7e:db:d0:ec:af:5b:cd:04:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:29:E6:A3:07:34:37:B8:B9:B5:B9:9B:8E:C5:43:11:D5:B2:49
            X509v3 Authority Key Identifier:
                keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:6e:21:46:f9:7f:df:5b:c9:b3:19:2d:7a:51:e9:6c:b2:
         71:4b:76:69:c4:8f:da:ed:3b:42:57:e5:18:f8:b1:d4:be:80:
         b1:9f:e9:f6:0d:e9:3d:a9:b0:2a:71:fc:62:e2:a3:a8:bc:ce:
         38:84:27:8f:92:e1:e1:53:80:e6:68:e2:c9:5f:1a:b3:b0:42:
         5d:b3:a1:2e:4a:48:f2:88:2c:d9:04:a8:31:79:c4:2c:4f:c8:
         6e:66:54:d4:0d:11:25:ef:16:7b:e0:76:10:cb:e5:a4:cb:76:
         5c:be:bc:d8:55:0d:05:0d:c1:14:6a:ca:70:bf:d4:4f:ef:13:
         11:d0:f2:56:c9:22:e2:fc:f8:09:43:7a:1f:26:84:d1:4d:17:
         ef:dd:9e:ec:43:ef:6b:45:a4:e7:92:6a:79:95:61:14:50:5a:
         6b:c5:d7:44:3c:12:04:b8:6f:bf:b5:7c:49:c3:e1:5a:cf:11:
         3c:a7:41:74:97:cf:6b:50:87:c7:12:b1:fd:46:65:68:e4:20:
         d0:68:ac:d3:20:b1:7e:14:af:8c:df:35:07:0f:4a:0a:4c:51:
         1f:b0:25:4b:61:7b:9f:68:ea:69:5c:1c:f1:9d:fa:2f:ec:a8:
         4d:07:e9:1d:40:5f:68:4b:22:90:5f:8b:40:1c:aa:cd:ca:e1:
         ed:15:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:14 2025 by rpki-client