Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File:                     HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier:          uSu0Ut/diwpfgIxz6Y/BP1TtmNg8F8gAa59E2bjoyw0=
Subject key identifier:   BB:44:FE:95:C1:32:6B:BD:1A:61:35:3A:88:27:F2:8D:91:C7:8F:EE
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer:       /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial:       3541
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number:          34FD
Signing time:             Fri 08 Aug 2025 14:16:02 +0000
Manifest this update:     Fri 08 Aug 2025 14:16:01 +0000
Manifest next update:     Fri 15 Aug 2025 14:16:01 +0000
Files and hashes:         1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: lKBzr9J69rUZETomuhHHpdsGYCjy7WbCbCuQ6SOPuJM=)
                          2: 3D6EDF86EDA711ED91155885C4F9AE02.roa (hash: mXb8AscVsTwHQGsL7M6XAxSIWwOh5epna0XlBQIQUOY=)
                          3: D3DAACB2507E11EF91EDBA52C4F9AE02.roa (hash: Whq1SIyvQYa1mALpVqGVZuuCi11KV+H9HrjJKdS2dN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13633 (0x3541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
        Validity
            Not Before: Aug  8 14:16:01 2025 GMT
            Not After : Aug 15 14:16:01 2025 GMT
        Subject: CN=689606a1-64a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:a3:22:d1:c3:3e:75:c0:ad:f1:d1:4f:2f:
                    6a:30:0b:60:ed:2f:fd:04:5f:a9:6b:8a:a8:46:31:
                    dd:c2:f9:8b:9e:6f:cc:c8:2e:c2:e9:90:66:65:c7:
                    eb:b1:76:8b:b1:a3:77:20:6c:26:f7:e2:65:de:4c:
                    b5:fa:a9:7e:b5:13:62:aa:d2:fc:21:b0:12:f3:9e:
                    72:83:02:8d:1e:89:df:0a:53:33:89:02:cd:68:d5:
                    fd:5d:80:9e:2d:2a:5e:44:98:9b:b6:c6:e2:c4:7b:
                    b7:d8:f5:c3:8d:79:94:e5:79:17:ae:eb:7d:df:de:
                    60:02:a1:c9:8b:56:0e:c4:c9:d3:6f:45:2f:ad:c8:
                    ab:2c:49:28:68:5b:d0:5f:d1:03:50:9e:df:06:ce:
                    f8:6d:71:9a:18:56:47:31:59:67:c4:1a:f2:f7:06:
                    8e:67:20:cb:c1:41:e9:21:af:e0:69:6d:bb:31:94:
                    de:37:1c:18:0c:63:bf:6d:45:2b:53:0e:f1:05:4d:
                    11:5b:3c:be:54:f1:31:50:c7:1b:63:20:42:5d:f2:
                    40:63:00:7c:26:f0:2d:90:78:9f:bc:53:72:bf:fe:
                    b7:c9:ba:f4:ef:bb:d7:04:53:29:69:6d:41:5f:7b:
                    07:ab:6e:17:f8:29:70:bb:c9:48:1b:75:bd:b6:43:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:44:FE:95:C1:32:6B:BD:1A:61:35:3A:88:27:F2:8D:91:C7:8F:EE
            X509v3 Authority Key Identifier:
                keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1c:7c:f4:85:59:28:1a:52:d9:0b:b9:2a:18:74:03:5f:e7:
         f8:3b:aa:5e:5d:8c:5a:3f:54:2e:75:be:8e:de:02:16:af:d0:
         fc:d8:d7:e9:54:f2:b0:1b:ad:67:17:bb:b6:05:a1:89:ed:a1:
         08:1e:f1:54:49:d3:f5:62:49:24:cb:53:e3:0a:30:86:91:0e:
         9b:bc:f8:0a:bd:78:f1:b6:15:ea:37:4a:11:b4:97:e0:40:ca:
         fe:12:82:0f:67:2c:f2:22:ea:bc:97:98:5a:90:a0:62:de:76:
         36:9e:4d:4b:5e:64:d0:38:ed:e0:6d:66:da:b6:0a:24:50:37:
         91:1f:94:d7:53:51:e2:cf:5f:6f:a2:93:7c:51:b2:9e:16:12:
         c1:0e:32:23:5e:ef:f8:f6:1b:6e:c3:a5:26:0e:0c:cf:97:cf:
         51:8a:2d:b5:1c:1d:69:86:09:69:e5:d4:72:25:b3:f4:fa:e6:
         6c:15:9b:9b:4b:9a:bb:68:bb:2c:d0:88:4e:71:34:28:44:29:
         43:21:ee:b9:fa:0f:78:e6:b1:79:15:3e:41:00:18:f0:61:a5:
         3d:41:ea:c5:52:11:c5:b4:e5:a5:23:8d:da:2b:8e:ca:b1:41:
         79:a6:b0:4f:31:83:86:90:4f:99:33:c9:d2:08:7c:2f:a7:6d:
         a5:09:5b:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC
QUQzOEJFMzcwHhcNMjUwODA4MTQxNjAxWhcNMjUwODE1MTQxNjAxWjAYMRYwFAYD
VQQDEw02ODk2MDZhMS02NGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1yOjItHDPnXArfHRTy9qMAtg7S/9BF+pa4qoRjHdwvmLnm/MyC7C6ZBmZcfr
sXaLsaN3IGwm9+Jl3ky1+ql+tRNiqtL8IbAS855ygwKNHonfClMziQLNaNX9XYCe
LSpeRJibtsbixHu32PXDjXmU5XkXrut9395gAqHJi1YOxMnTb0UvrcirLEkoaFvQ
X9EDUJ7fBs74bXGaGFZHMVlnxBry9waOZyDLwUHpIa/gaW27MZTeNxwYDGO/bUUr
Uw7xBU0RWzy+VPExUMcbYyBCXfJAYwB8JvAtkHifvFNyv/63ybr077vXBFMpaW1B
X3sHq24X+Clwu8lIG3W9tkPF/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtE/pXB
Mmu9GmE1Oogn8o2Rx4/uMB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE
NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUQ3Ni82Mjg3QTExNDFENjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9J
UnZxSnZ4T2J6czI2MDR2amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6HHz0hVkoGlLZC7kqGHQDX+f4O6peXYxaP1Qudb6O3gIWr9D82Nfp
VPKwG61nF7u2BaGJ7aEIHvFUSdP1Ykkky1PjCjCGkQ6bvPgKvXjxthXqN0oRtJfg
QMr+EoIPZyzyIuq8l5hakKBi3nY2nk1LXmTQOO3gbWbatgokUDeRH5TXU1Hiz19v
opN8UbKeFhLBDjIjXu/49htuw6UmDgzPl89Rii21HB1phglp5dRyJbP0+uZsFZub
S5q7aLss0IhOcTQoRClDIe65+g945rF5FT5BABjwYaU9QerFUhHFtOWlI43aK47K
sUF5prBPMYOGkE+ZM8nSCHwvp22lCVsx
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:25 2025 by rpki-client