Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
File:                     HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json)
Hash identifier:          FDWFzWwb3OuhKZ7XksYbSqZ8mJFEEQjVe/OzWj56V1o=
Subject key identifier:   C7:EB:E3:CC:F6:4F:2C:03:67:62:97:64:AF:DA:46:DC:8E:35:2C:23
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Certificate issuer:       /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
Manifest number:          023F
Signing time:             Fri 13 Jun 2025 01:21:58 +0000
Manifest this update:     Fri 13 Jun 2025 01:21:58 +0000
Manifest next update:     Fri 20 Jun 2025 01:21:58 +0000
Files and hashes:         1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: Xy14Yu/END9OFG+hu/X5195iDJ/6MJTGdv77nQTxJOI=)
                          2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: hGQixG8nIJXVA0JQORYC8z0pOj4UbTutn+kvPqmH25s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 01:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
        Validity
            Not Before: Jun 13 01:21:58 2025 GMT
            Not After : Jun 20 01:21:58 2025 GMT
        Subject: CN=684b7d36-b891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:82:22:97:23:e6:c4:1a:ef:9e:a6:d1:03:
                    bb:63:8c:4d:ad:0e:35:bf:c9:d3:a7:c7:6b:e7:7a:
                    01:f9:3d:06:36:26:26:74:d1:9a:15:ba:c5:7e:ad:
                    28:26:b5:f8:26:75:af:3d:e0:23:1e:30:da:b7:6a:
                    04:46:45:6f:2b:ae:18:9a:4b:3f:4e:09:57:aa:19:
                    c3:ab:6e:d8:a9:54:3f:26:09:3b:d6:e3:c0:36:89:
                    45:5b:74:53:4e:20:ab:5f:f8:63:26:7d:46:3f:df:
                    8c:c5:d4:52:14:cd:ec:f1:07:68:d5:fd:99:bb:4a:
                    04:12:82:52:9b:1e:94:55:69:b9:ba:bf:e9:79:29:
                    2e:5f:00:8f:dc:63:2a:95:b0:55:47:cf:e5:9e:90:
                    7d:68:90:d6:b0:3e:07:cb:c8:6a:20:18:49:00:89:
                    7f:d9:14:cc:16:86:60:60:27:4f:44:fa:23:56:cf:
                    43:ca:e0:1d:55:0a:07:3f:18:fb:1c:e0:7b:7c:2c:
                    73:21:0d:8e:fc:7f:b9:cc:d3:5f:6a:23:d5:26:61:
                    33:66:37:da:f8:94:36:cb:27:98:52:b2:b7:22:ab:
                    dd:ce:58:ed:dc:0f:9a:da:99:31:30:7c:fe:66:3b:
                    5d:cb:9c:54:55:f0:8b:1c:22:0b:38:9e:c5:50:00:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EB:E3:CC:F6:4F:2C:03:67:62:97:64:AF:DA:46:DC:8E:35:2C:23
            X509v3 Authority Key Identifier:
                keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:89:d5:85:5f:da:ac:18:9c:49:a2:2d:73:0e:59:b1:a7:c4:
         a1:7e:27:47:33:85:57:c1:d9:36:c3:9c:36:32:42:a1:3c:64:
         44:24:c4:fd:4b:22:82:8c:e7:1b:61:4e:fa:6d:70:bc:12:97:
         c2:82:f9:4c:e7:e2:24:e5:2f:8c:9f:3b:49:6e:97:83:41:d9:
         da:42:d7:9a:7f:08:5d:6d:59:4a:25:5c:bb:93:b5:59:b8:f5:
         2a:d0:c8:77:2b:bc:f8:49:02:9c:86:30:93:1a:71:ed:9d:b1:
         16:71:27:13:40:d1:2a:22:b1:6b:25:7c:86:71:a1:4b:51:d1:
         7d:9c:ab:ad:a4:90:61:c7:0f:d5:94:9e:19:0c:8a:53:b5:9c:
         fb:e7:a6:5c:0b:72:8b:70:a2:46:bb:13:97:3d:a1:cc:4a:41:
         78:6b:ad:6c:98:5e:1b:26:53:76:5d:16:5d:79:ad:98:55:d1:
         47:01:a1:d3:44:5b:23:ff:f2:a1:58:e1:3c:68:29:63:d1:b1:
         45:7f:75:b8:74:71:7d:86:9b:98:d0:aa:8c:65:80:5b:ab:e6:
         da:77:27:50:ca:c7:46:af:5f:fd:16:d5:b7:5f:28:20:0a:66:
         97:dc:72:bb:b9:14:af:c2:d4:d6:7a:bb:38:14:07:46:9c:60:
         ff:8b:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:35:13 2025 by rpki-client