Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File:                     HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier:          E9uBft1r54jrBgkxM285e1Kx8XL2JKEHrBYMLJhLdm4=
Subject key identifier:   8B:89:59:68:41:07:53:60:8A:98:5B:E8:93:78:D3:E3:46:2E:BA:A8
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       1894
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number:          1878
Signing time:             Wed 02 Jul 2025 16:37:16 +0000
Manifest this update:     Wed 02 Jul 2025 16:37:15 +0000
Manifest next update:     Wed 09 Jul 2025 16:37:15 +0000
Files and hashes:         1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: X5rP1pq9QK7ZpbwK+ALf0UEUf7FupEzHYz+TPXNx7S8=)
                          2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A=)
                          3: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: KFzJJioj1JdEaM7mj8QrDhe5X+FxHdHyz1gyMqXEJCI=)
                          4: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=)
                          5: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: Frk606k9XfomHW0x/AMLebHr43yDTcWmfdXiLloTTiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6292 (0x1894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Jul  2 16:37:15 2025 GMT
            Not After : Jul  9 16:37:15 2025 GMT
        Subject: CN=6865603b-796b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:2a:05:8a:ce:d5:63:44:72:e1:1c:0b:ab:
                    84:21:25:c7:0d:0b:4d:3c:92:e7:a7:ff:dc:a2:f9:
                    19:dc:ac:31:b9:ef:c3:e7:b1:42:19:57:52:b2:94:
                    17:b4:26:95:e3:ef:8b:5b:73:49:6e:ea:cb:8c:8f:
                    95:a3:76:dc:28:49:46:e8:25:ef:5e:ac:b8:b8:4b:
                    09:6a:10:31:0c:d0:d8:5a:0d:6f:5d:bf:4c:f9:0c:
                    e1:e4:c8:58:7f:2e:79:50:0f:3d:ed:b9:46:e9:53:
                    09:35:0f:59:60:aa:07:89:41:9f:5d:c2:b2:02:25:
                    a8:ce:ef:ef:aa:91:75:5f:02:ff:98:61:33:b6:33:
                    68:60:f6:4b:6d:5e:81:a7:29:83:15:7c:89:9f:45:
                    c5:e3:ec:80:47:67:17:96:84:56:bf:fc:0b:31:37:
                    71:76:5b:ff:d0:f8:56:5f:c5:e4:bd:79:3d:aa:83:
                    c5:db:79:aa:aa:65:22:34:90:37:ac:50:ff:0c:a2:
                    48:dd:d3:23:28:59:6d:d7:d0:bc:19:eb:6f:4d:ab:
                    0d:58:ee:97:81:7d:6b:95:48:ad:82:ec:d1:c6:95:
                    db:40:ef:2d:e2:46:23:1d:95:10:89:4c:ae:8c:cd:
                    b1:4f:10:8d:4b:f4:9e:06:79:6d:d9:3a:c1:0a:bf:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:59:68:41:07:53:60:8A:98:5B:E8:93:78:D3:E3:46:2E:BA:A8
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:6e:94:c9:84:b2:d0:b1:a5:c7:39:63:bb:e6:1e:b5:c2:
         02:12:90:08:3d:e4:9c:90:cf:32:98:9d:2b:19:9b:a7:c6:c2:
         45:3c:8b:6e:c0:95:12:ab:ff:72:ec:62:d6:1a:cc:ec:a1:3c:
         8e:3a:24:16:f4:3c:4f:05:1e:d3:3b:78:07:a0:0d:27:2a:b8:
         0f:5c:36:31:c4:fa:8d:d9:6b:c3:6c:d4:5a:9c:41:13:9a:45:
         ad:06:22:17:ad:71:9f:ba:27:9c:68:d9:eb:ed:8c:2c:fd:a4:
         a4:cb:f9:75:73:45:b9:4b:75:d3:ee:6c:1d:fd:79:14:d2:b5:
         28:c1:7b:e1:f1:12:ef:41:3e:56:bf:4f:90:a7:96:f4:93:de:
         d2:3c:b7:37:4b:08:64:20:e9:b9:ef:76:4b:4a:0c:51:e9:25:
         6a:d9:7e:ba:bf:43:a0:10:bc:5a:36:5c:d3:f6:5c:ac:66:eb:
         8a:bf:1c:f3:df:f1:31:d6:b6:c6:f0:62:c5:3c:25:da:f7:0a:
         9b:07:f6:86:e5:0b:58:ae:d5:37:76:ea:d7:c3:e0:e0:45:65:
         f0:2c:8f:6c:c9:67:39:9d:42:01:0d:95:d9:40:55:16:82:d9:
         b0:58:08:71:c7:94:12:9d:9a:26:a9:4d:7d:80:30:03:62:d8:
         09:6f:a8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:01:29 2025 by rpki-client