Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
File:                     HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json)
Hash identifier:          VLe6gtyQJR2xXl12sZ3M8cFfv/o0j2Dh0JX5Zj/4wDY=
Subject key identifier:   10:C5:86:FF:58:27:7D:4C:F1:39:AC:84:F6:A3:09:70:48:57:27:B9
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Certificate issuer:       /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial:       3547
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
Manifest number:          34FE
Signing time:             Sun 10 Aug 2025 14:38:46 +0000
Manifest this update:     Sun 10 Aug 2025 14:38:45 +0000
Manifest next update:     Sun 17 Aug 2025 14:38:45 +0000
Files and hashes:         1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: 1wC3HETfMe/RrRRx7Z91oS8emE+N69mWNCg+N6/2Qgo=)
                          2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: qZJPfG2amv1YRehnUzdlHxLOWwvXz8+dMtqCKRYUJpM=)
                          3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: uxN4zJEmGXmB/qpIp2ey6SpNrf4s6W/tukdRHW9gvLc=)
                          4: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: HhPaW5eoa8YAXMCyUgrMCG4GBbrYuP09obNUWTvTJmo=)
                          5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: o+SVOkw4B+Pgr5TLQfMcQYEp6f3Jn3P38kWJLEEf/tQ=)
                          6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: Kgqe2j6IHwMDhGgmbFi5UiveUmKiCe0XXLEEC0ovFyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
                          rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Aug 2025 14:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13639 (0x3547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
        Validity
            Not Before: Aug 10 14:38:45 2025 GMT
            Not After : Aug 17 14:38:45 2025 GMT
        Subject: CN=6898aef5-44d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:93:63:6a:31:0b:6c:a4:f0:17:e0:34:78:
                    2d:50:2e:88:ab:45:59:64:37:57:9a:df:ba:87:28:
                    b2:d0:ff:1f:20:78:b3:c0:2f:9a:90:f1:b0:1a:8c:
                    0a:7b:7a:6c:d8:c9:29:5d:d8:b9:2f:ed:2c:3e:28:
                    e4:76:61:7d:04:79:fb:db:b1:77:e0:2b:8d:bc:c4:
                    03:e6:75:4a:90:5a:45:d7:57:c9:bc:cd:40:e9:0a:
                    4a:05:e4:fa:e8:19:ce:80:2b:bb:da:21:68:1a:3f:
                    9b:ea:12:45:c3:cd:04:63:59:f5:30:e4:86:b6:7f:
                    8d:97:41:79:05:a2:42:b7:55:f3:00:80:c4:05:a8:
                    1a:f3:61:6f:6f:d5:69:00:db:48:45:6b:51:94:dc:
                    38:97:42:1c:02:4d:82:15:af:1a:c1:17:ce:36:a0:
                    8a:7c:38:0c:00:9a:07:ee:3b:bc:67:f5:f5:c8:95:
                    25:c4:76:c5:b5:50:39:e1:b4:64:25:9e:42:be:72:
                    e1:22:a3:e2:ad:e1:35:32:1d:b5:15:f9:1f:5c:3e:
                    46:a7:34:dd:2b:2f:9b:64:4d:c1:58:3c:79:e2:34:
                    08:38:20:1f:71:c8:93:e7:77:59:df:86:60:2d:86:
                    91:42:b9:54:2a:5e:e3:a9:e1:c3:12:00:16:90:96:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:86:FF:58:27:7D:4C:F1:39:AC:84:F6:A3:09:70:48:57:27:B9
            X509v3 Authority Key Identifier:
                keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:18:31:f1:bd:0e:c5:1d:d4:50:88:26:dd:1b:f8:25:34:f6:
         82:68:ab:e6:d5:ff:09:17:a4:57:38:01:d1:22:ec:99:fb:07:
         57:22:d1:a5:22:90:0d:3c:f4:dc:e8:86:49:8b:8a:4e:69:2d:
         4c:04:6b:92:f2:c4:e9:16:4d:83:b0:21:46:b4:d4:f1:f0:cf:
         a1:22:e0:dd:89:90:e4:84:e5:f3:cd:28:78:df:a3:d9:d1:be:
         70:64:4e:fe:9c:60:a9:5f:1d:f2:3c:6f:cc:43:18:a4:a6:1a:
         f3:d6:da:73:78:f3:50:60:00:38:53:c5:c5:90:e0:c1:e1:de:
         e5:17:e6:52:e0:f5:e9:f7:66:33:75:fd:89:06:30:86:68:0c:
         92:59:8f:ea:45:03:07:48:25:ec:95:8f:4b:d5:53:04:cb:ee:
         cd:4b:80:4c:9a:7c:bc:e7:53:bd:6d:2c:7d:a3:72:cc:7b:b1:
         2e:19:12:f7:65:c7:e4:30:62:ae:a0:4e:6f:5a:3b:d0:cc:44:
         09:28:85:30:c2:1a:a1:a9:7f:1c:58:f4:e9:39:fd:2b:f1:80:
         11:98:f5:0e:82:62:33:df:70:e0:08:d6:42:cc:01:c7:66:4b:
         c4:54:1d:e9:18:14:fa:fb:81:fb:f0:06:71:44:a0:87:ff:15:
         39:a2:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:04:10 2025 by rpki-client