Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File:                     H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier:          o35beU77ia8tuwWHttYOfLGPi5sqWxNZ4j50DiJXxn8=
Subject key identifier:   C8:A0:EC:3B:54:DB:F5:F1:1D:6B:1B:94:C6:7F:4C:B4:CE:A8:89:07
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer:       /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial:       0C47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number:          0C36
Signing time:             Wed 02 Jul 2025 18:49:37 +0000
Manifest this update:     Wed 02 Jul 2025 18:49:36 +0000
Manifest next update:     Wed 09 Jul 2025 18:49:36 +0000
Files and hashes:         1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: a237xKsVVWRJvfFnU0sFfilYcTrVnfKlb1AJ5B8zr38=)
                          2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: jjQzstnlPYenRZWamhU8+OP/S56HuWE5rPwPEoYqLOI=)
                          3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: FwxCipQAsBk9UBv8EDrb+Vo/Shz8I+uuiBIqO9LmFMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
                          rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3143 (0xc47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
        Validity
            Not Before: Jul  2 18:49:36 2025 GMT
            Not After : Jul  9 18:49:36 2025 GMT
        Subject: CN=68657f41-249e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:46:16:8b:38:1c:7a:cd:7b:83:79:20:49:81:
                    b1:af:8e:29:90:ee:bf:d2:d2:ec:fe:87:6e:3b:ee:
                    be:48:e9:56:f6:5f:89:50:84:d0:22:f5:36:6e:42:
                    23:8d:2b:da:cb:60:99:65:78:42:a5:20:17:16:6e:
                    3b:15:1e:a9:6a:1a:12:8d:2b:05:ca:f2:f0:ee:43:
                    ea:a0:70:0e:f5:52:fd:0e:fd:48:63:2f:c8:81:fb:
                    a7:f1:10:f7:07:6e:93:da:1e:0b:2c:36:82:1a:40:
                    d2:43:6d:68:5e:07:05:3e:7a:17:18:af:39:ae:f4:
                    42:1c:0d:6b:ef:51:89:31:b3:bc:48:ac:02:c0:1d:
                    18:40:0c:ca:f3:9d:e1:50:b5:3f:e8:52:2e:cc:93:
                    79:c3:46:e7:c9:a6:83:5d:9f:c7:86:75:33:1a:1f:
                    d3:11:33:e8:11:01:9a:94:72:75:df:e8:86:33:3d:
                    22:a8:d5:3a:b4:8b:f1:07:24:3d:4c:3a:fa:6f:09:
                    f1:ba:b9:89:4f:a5:f2:48:18:b5:e6:cf:69:0f:20:
                    ea:28:55:1b:18:45:2b:c3:b2:72:e2:88:d5:fe:c5:
                    b7:94:92:7b:43:2e:0d:09:fc:50:15:f8:65:69:06:
                    1f:7a:d4:b1:32:d8:4d:35:19:b6:67:3c:d0:26:2a:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A0:EC:3B:54:DB:F5:F1:1D:6B:1B:94:C6:7F:4C:B4:CE:A8:89:07
            X509v3 Authority Key Identifier:
                keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:5b:1a:b1:23:94:fc:4b:a0:f6:62:01:3a:6c:ac:75:55:f0:
         dd:2c:83:f4:3c:76:20:29:e6:60:37:7a:5f:a4:66:33:b5:c9:
         3b:99:44:d4:32:ea:41:c7:16:b1:9c:e4:fb:97:46:9a:97:61:
         4a:ee:79:65:a7:e3:b3:2d:68:3d:6f:d4:5a:9f:62:79:75:95:
         ba:55:20:16:ab:50:3a:0c:1a:90:ce:2f:a8:54:d0:f5:4c:5d:
         e9:51:56:85:ad:90:29:1c:6c:48:57:e0:3a:31:d7:61:12:62:
         17:69:d3:d7:7e:41:49:88:a4:e3:00:a0:c5:20:04:b2:a2:01:
         6b:ef:69:7d:9f:2d:35:9a:47:12:54:a0:c4:51:60:27:bf:f0:
         4e:be:f2:dc:dc:0a:f6:7b:84:66:cb:62:21:3e:a1:6e:8a:2b:
         40:49:d5:a1:63:65:02:24:e5:5d:c1:6c:13:7b:84:35:9d:b4:
         cd:3d:37:36:ea:6c:ab:b6:e8:ce:c7:0d:6b:80:20:7e:cc:cf:
         fe:77:76:ca:88:cd:4b:10:45:d5:c9:d7:a3:2e:ad:d3:f7:2e:
         3c:5e:36:92:0d:aa:40:89:51:fa:9d:32:cd:ee:34:e5:b7:aa:
         a1:a5:ba:56:73:4a:18:d6:b9:74:fb:7f:39:de:3b:88:4a:a4:
         11:44:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:18:18 2025 by rpki-client