Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
File:                     htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json)
Hash identifier:          WUwDuMaNQzBYjlzvJXMM03T1bIQL7NuR5TSgH+QEzxM=
Subject key identifier:   7F:58:66:35:88:DB:EA:5D:61:89:65:88:63:23:4F:54:EB:E6:5C:35
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Certificate issuer:       /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
Manifest number:          012A
Signing time:             Sun 29 Jun 2025 03:45:39 +0000
Manifest this update:     Sun 29 Jun 2025 03:45:39 +0000
Manifest next update:     Sun 06 Jul 2025 03:45:39 +0000
Files and hashes:         1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: fakVLphgJmG8LJ7akgyuQny1LG6vcDLcuau7vXf83bA=)
                          2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: XRSbm92iiBJ9xxjhhCi5I/tUaB0t9fuY2aP6/h6Ck2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
                          rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 03:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
        Validity
            Not Before: Jun 29 03:45:39 2025 GMT
            Not After : Jul  6 03:45:39 2025 GMT
        Subject: CN=6860b6e3-91d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:34:82:b6:27:d4:6f:7c:4a:40:7b:5b:25:
                    42:5f:ca:5c:ed:c5:e5:76:e0:a0:48:f7:d1:fe:7b:
                    ba:d4:89:0a:bc:21:92:ec:02:1f:af:5b:a7:19:b0:
                    fc:cb:b5:84:f9:ff:90:3e:aa:ef:b6:03:03:25:f6:
                    4c:57:48:93:25:69:91:66:db:7b:69:86:a7:42:a5:
                    97:6a:ba:27:92:7a:b0:03:0b:0c:80:de:cf:79:54:
                    4c:ab:4a:12:53:be:ab:c7:9e:d3:4b:1f:26:cb:79:
                    8d:a8:a4:c5:9a:b5:64:68:23:10:0c:ce:3c:22:5e:
                    66:21:7e:57:81:ff:33:d2:c4:5c:a8:3b:52:6b:07:
                    c3:83:e7:91:7f:36:be:b8:8a:fc:2a:27:79:99:ca:
                    25:29:9d:00:e9:a3:31:cd:08:23:57:16:cc:11:f2:
                    77:ba:5c:42:6f:45:b7:38:05:ee:72:fa:7a:59:2c:
                    74:c7:2d:56:b0:d7:d9:cf:e2:bb:3e:d2:89:2c:b1:
                    d9:6a:b8:81:8c:6d:8e:8c:2d:17:f0:24:0f:d5:80:
                    b0:04:66:57:1c:32:6b:20:0d:47:5d:b5:ea:56:ca:
                    d8:41:86:e2:cc:c0:3f:b5:64:8d:01:56:c7:e8:4b:
                    1c:06:d6:f9:59:bd:35:2f:a1:4a:c1:b1:73:ac:c4:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:58:66:35:88:DB:EA:5D:61:89:65:88:63:23:4F:54:EB:E6:5C:35
            X509v3 Authority Key Identifier:
                keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ca:03:53:20:36:8e:40:12:c0:b9:0c:e8:36:a3:ec:b0:6a:
         53:ae:0d:0c:90:06:bd:af:08:96:f7:5f:4f:1c:64:a5:0f:78:
         3f:a5:a3:40:2d:a9:d5:ea:a1:db:1e:cf:69:62:00:6b:e7:7a:
         4d:2a:26:7e:c7:78:a8:2b:1c:a0:0f:19:80:86:ab:de:0c:76:
         c8:35:a2:47:13:7a:71:2b:3e:03:e6:46:5d:86:70:21:6a:0f:
         8e:f1:08:30:35:46:cc:f6:60:8b:b6:25:f1:e8:76:eb:fc:eb:
         3f:c7:dd:51:b8:23:80:3b:6a:f1:83:9d:4f:4f:9e:70:f5:f6:
         67:0d:d4:18:07:40:54:1c:27:a7:3b:f0:68:38:f5:88:4b:d7:
         31:28:be:7f:83:1f:b9:bd:e4:22:b5:a1:fb:77:93:82:27:79:
         8c:82:5c:4c:1e:0e:14:dc:9d:90:d1:cd:e9:9a:4c:ba:c2:c2:
         54:7f:06:99:77:e8:e3:16:6a:a2:ab:64:e1:a9:db:2d:5c:db:
         ff:5a:15:9c:f2:70:c4:e4:34:87:85:2b:74:f9:03:3e:17:4a:
         94:2e:b1:26:c3:39:06:bc:c3:c3:0c:0e:27:41:fb:36:0f:9e:
         52:66:d4:4f:ba:22:79:63:76:a9:8e:55:a3:3b:05:51:f7:29:
         15:ae:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:19:18 2025 by rpki-client