Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft
File:                     Hwkr8ONn_aUUbSh9gQKybsj7grU.mft (raw, json)
Hash identifier:          vteZqFl6QiFyhxjfeDB23OUXgASEkojuAoazwebGuQc=
Subject key identifier:   C9:A5:A9:55:5D:72:6F:62:8C:9E:9B:6D:32:25:A0:CC:BC:02:08:58
Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5
Certificate issuer:       /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft
Manifest number:          02C8
Signing time:             Fri 13 Jun 2025 00:57:28 +0000
Manifest this update:     Fri 13 Jun 2025 00:57:28 +0000
Manifest next update:     Fri 20 Jun 2025 00:57:28 +0000
Files and hashes:         1: Hwkr8ONn_aUUbSh9gQKybsj7grU.crl (hash: dMY1ZK2ag7ecFp2IFEV6mlxtXUgjwtOPOCL5xCjZ9cA=)
                          2: 26B54DD8326911ED9A685C1AC4F9AE02.roa (hash: TmDws7WheFOESe1yv//UWdgV37JOyUYHp5qinnrseq8=)
                          3: 2E56630C741611EE98997122C4F9AE02.roa (hash: f1I70aR9/6jQvTXHflDUxz1+wxpkM6Pj3ynFhb0cXfg=)
                          4: 6B18B650ADB311EF8CC1FB7BC4F9AE02.roa (hash: k9zAAHn9EIQpLq7EiBS7GWyLVtI0EwocRCBQ5ijC7AM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl
                          rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1AC4, serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5
        Validity
            Not Before: Jun 13 00:57:28 2025 GMT
            Not After : Jun 20 00:57:28 2025 GMT
        Subject: CN=684b7778-dcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:fa:8e:6b:96:3e:a2:40:07:91:30:a4:1b:
                    47:31:00:83:b9:a1:c2:0b:b5:3b:06:f6:2c:3d:fe:
                    58:ff:b9:92:cd:f6:68:2a:3a:29:d5:de:45:5e:b6:
                    a3:6f:5c:fe:42:82:61:17:b1:58:fb:7c:0c:e6:9e:
                    90:8c:18:a9:a6:43:0a:6f:6a:3f:7d:ca:c3:b9:80:
                    14:c5:d9:f0:c0:94:31:d3:d3:54:a2:79:64:27:5d:
                    d6:c7:45:3a:09:b0:63:1d:1e:61:ef:70:26:c0:07:
                    2e:03:5c:95:1b:3b:fd:6a:f1:1a:97:d5:22:68:dd:
                    64:ce:8a:2b:b5:c7:7c:59:e6:d9:07:b4:70:d5:46:
                    51:d7:f1:50:79:1d:e8:53:c6:00:66:9a:51:79:23:
                    1d:10:7d:9d:6b:1b:49:ad:96:54:24:13:23:a3:13:
                    d0:2d:fa:5f:04:5e:dd:ff:86:70:93:22:48:3e:33:
                    36:95:4b:8a:79:09:87:7b:35:04:c8:fa:3e:cf:8f:
                    7d:04:bc:68:c3:5d:69:60:b2:d1:40:d2:34:3e:d8:
                    d4:37:91:c8:3a:80:7e:23:12:e0:81:5b:dc:b4:a2:
                    f9:a5:60:54:d6:84:49:67:5c:67:ea:bb:84:a4:84:
                    71:d2:b1:4b:c3:70:11:5e:cd:0d:e7:f0:14:fd:1b:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A5:A9:55:5D:72:6F:62:8C:9E:9B:6D:32:25:A0:CC:BC:02:08:58
            X509v3 Authority Key Identifier:
                keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e3:ea:62:84:b6:b4:19:b9:d6:85:16:86:27:6e:35:9b:aa:
         f3:3a:97:45:bf:2a:ed:9b:2f:75:31:4f:30:c5:08:80:1a:42:
         61:cc:f3:74:61:0d:61:9d:2a:a2:e2:fb:05:a6:c6:0f:d3:67:
         ef:0a:d4:1d:89:ec:7f:4c:9a:68:fa:0e:ab:ab:a0:7c:23:92:
         7d:0b:cc:23:cb:44:78:9a:c9:1b:9c:87:7a:37:d6:03:7e:d2:
         eb:1b:9c:59:6f:f6:a8:77:33:0d:e0:dc:6a:5a:68:7c:cb:3a:
         b7:0f:f5:8e:c1:bd:b4:4b:6e:f8:27:fe:47:9d:ce:e2:bd:43:
         bb:82:73:89:2e:61:ec:15:82:6f:ff:f0:83:2c:8e:84:33:ae:
         8f:93:9c:22:dc:57:e4:34:80:31:52:45:28:71:d0:e0:25:93:
         98:45:04:53:17:fe:79:b5:e2:0c:9a:59:1c:30:d9:a9:8c:c8:
         57:a4:88:e9:dd:7c:95:9f:76:e1:c0:b7:38:35:e0:98:39:8a:
         92:df:bd:36:24:38:93:67:0f:cb:9f:07:fd:86:04:01:47:62:
         3f:12:31:6a:d5:c3:d6:13:df:eb:67:fc:ac:7e:bb:e7:d7:16:
         94:d4:76:35:1e:69:c7:6a:bf:1e:1a:4f:23:e0:95:a4:de:1e:
         e6:16:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:45:04 2025 by rpki-client