Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File:                     mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier:          C395XaS2IQPQOXGAi+SD+QaJHUlZJPNj9H9W8co7xDs=
Subject key identifier:   D8:22:DC:A6:7E:3C:30:A0:E5:66:95:69:09:A6:E4:15:5D:13:FC:0D
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number:          06E8
Signing time:             Wed 02 Jul 2025 22:14:54 +0000
Manifest this update:     Wed 02 Jul 2025 22:14:53 +0000
Manifest next update:     Wed 09 Jul 2025 22:14:53 +0000
Files and hashes:         1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: oNHWtX50IH+zC4mC69fzHDmLvgq32vA/zb4yKK1RQQA=)
                          2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=)
                          3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Jul  2 22:14:53 2025 GMT
            Not After : Jul  9 22:14:53 2025 GMT
        Subject: CN=6865af5e-9df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:fd:29:8e:08:d5:fc:0a:b6:a0:66:87:f5:
                    25:30:84:55:f4:14:61:56:39:96:36:6e:05:eb:34:
                    eb:eb:18:61:2f:ff:ee:90:3f:7d:e1:b8:b1:5d:4a:
                    1b:c2:f9:f3:fb:92:68:32:0f:f7:d4:31:f8:9e:de:
                    5d:20:fd:fd:91:de:48:db:3b:d5:b6:cb:03:6e:fe:
                    76:c5:24:c0:67:b1:e3:3c:0b:80:7b:fa:0e:5b:9c:
                    74:39:9e:27:a9:30:78:94:90:1c:d6:8a:c7:75:64:
                    3f:2a:1d:8a:80:3d:be:9f:88:76:0c:f9:60:87:b3:
                    6c:fa:08:28:85:19:2a:83:15:8c:f5:58:2b:f9:19:
                    b4:c2:39:30:a5:ad:4c:11:5e:06:99:09:da:e9:fa:
                    9e:6e:7b:10:82:64:52:32:d6:52:4f:e5:3a:f6:44:
                    f0:03:01:72:d4:df:31:48:fa:ab:61:47:1d:79:a2:
                    83:bd:a1:6c:93:d7:a9:35:d6:21:5c:c6:c7:f7:a1:
                    d8:d2:f8:e9:b5:c9:6c:60:d5:6e:b9:49:fa:83:3e:
                    b1:11:dc:22:8b:c8:3d:10:b7:df:44:9e:8d:e2:16:
                    02:a1:72:d4:a4:ce:f8:c1:47:32:1b:f7:ce:6d:1d:
                    30:50:5f:c0:52:7c:3d:bf:74:92:91:3f:a4:43:84:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:DC:A6:7E:3C:30:A0:E5:66:95:69:09:A6:E4:15:5D:13:FC:0D
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e0:30:c1:10:c4:fa:97:5c:6e:69:f9:eb:ed:95:ad:b0:17:
         cb:f3:0c:c4:6f:ce:39:fb:42:2f:60:92:03:e5:63:f1:03:9f:
         65:44:39:29:74:71:0a:0b:40:5d:df:0d:d2:22:8f:41:38:2e:
         6d:68:46:8f:71:00:cb:37:d0:78:9a:d1:89:ac:05:e5:bc:24:
         43:cc:99:87:05:cb:3d:03:f6:e1:24:b0:b7:dc:16:97:5f:83:
         7a:eb:fa:37:7c:9a:c6:d1:98:65:73:5b:7a:9f:fd:dc:45:8f:
         77:61:3e:e3:13:50:44:7e:51:6e:b6:51:d3:77:d6:12:f5:49:
         1f:ec:35:04:a9:33:57:53:8f:2e:0e:ee:c1:5b:e1:b7:07:2f:
         65:b8:f8:6b:e4:84:99:75:a0:97:77:00:4b:8a:e7:0d:95:ef:
         4b:73:d9:45:3a:e7:8f:62:77:49:6b:69:5b:5b:cf:0b:3b:52:
         9c:79:b8:50:86:47:06:3d:08:b0:69:fe:14:5a:fc:6d:c5:75:
         2c:32:1a:52:db:2b:b3:bb:25:03:7f:33:fe:1f:58:7f:7e:93:
         25:6f:e3:d1:e4:70:46:18:5b:0e:8e:08:4c:2e:d3:b9:27:00:
         05:98:b5:bc:d3:b7:73:54:f6:ba:e7:b4:18:8f:8c:1c:de:69:
         13:93:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:40:32 2025 by rpki-client