Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File:                     h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier:          +ess70ZpJpupov8FzKLaih803k02Jy9WjocMSY/Z8f8=
Subject key identifier:   7D:1C:09:A2:21:34:46:FB:C4:C4:51:5B:30:7B:79:7F:F0:FA:CD:35
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer:       /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial:       07C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number:          07BD
Signing time:             Fri 22 Aug 2025 21:22:31 +0000
Manifest this update:     Fri 22 Aug 2025 21:22:31 +0000
Manifest next update:     Fri 29 Aug 2025 21:22:31 +0000
Files and hashes:         1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: C5oOYtbKMYOgZ+ILLF9LEi0QetKMv+/7K17Ci5omFlA=)
                          2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: BK8JW2Wj4etRuysdxWiOktynoZCEWJ2xeDWHB4Oo8iI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
                          rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989 (0x7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
        Validity
            Not Before: Aug 22 21:22:31 2025 GMT
            Not After : Aug 29 21:22:31 2025 GMT
        Subject: CN=68a8df97-866b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:93:cd:5b:de:8d:9d:3c:fa:c7:26:3a:ef:
                    2b:6a:4b:b4:1f:33:78:cb:6a:d3:e4:4b:91:11:05:
                    30:0e:45:7e:f1:b5:56:0f:8a:89:45:43:28:60:14:
                    66:13:79:e9:70:68:05:61:18:a5:ab:83:83:6d:2d:
                    19:34:b1:8f:37:53:f0:9c:b3:98:b3:70:f6:93:dc:
                    24:43:c1:32:53:3d:85:6b:83:e4:99:c4:79:ec:5f:
                    ef:25:c1:b7:42:00:06:93:0f:33:97:a3:9f:b3:9d:
                    bb:94:ef:96:a7:5c:77:9f:e0:f3:be:b9:d4:0b:e8:
                    5f:cb:90:c6:44:42:74:c7:e5:c2:a0:6c:02:88:32:
                    34:da:05:92:02:95:02:cf:a1:84:f2:dd:7d:68:3c:
                    bf:21:b9:1e:28:85:e4:7c:71:f6:ae:d6:14:e3:7e:
                    58:bd:c4:d1:08:1f:e5:95:47:64:90:38:70:93:f7:
                    75:77:28:40:ab:a4:4d:d3:0d:5f:72:1c:a4:9e:b5:
                    b2:50:64:33:e8:58:db:78:d7:0c:b2:74:16:1a:e8:
                    5a:72:bc:0a:99:fb:c3:4c:a5:5a:56:52:64:14:cb:
                    14:0f:9a:19:bc:72:14:c2:67:56:ae:2e:8e:0a:97:
                    d5:e5:a0:18:30:b8:f9:6e:a8:5e:76:6d:44:8b:ea:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1C:09:A2:21:34:46:FB:C4:C4:51:5B:30:7B:79:7F:F0:FA:CD:35
            X509v3 Authority Key Identifier:
                keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:16:a7:2c:96:e2:9d:30:7a:49:2e:ce:12:63:18:11:b8:
         89:32:eb:1e:71:da:21:ff:ab:11:d6:b1:98:2d:77:53:83:62:
         0f:4e:cb:2c:67:7e:a5:5f:2c:0e:99:f7:01:52:c0:c1:2d:63:
         c2:49:4c:eb:b6:19:a4:64:5d:44:26:7e:18:1f:ca:91:20:b2:
         9d:22:0a:9a:1f:64:04:bc:f7:f5:0d:48:3d:b6:7d:ec:4a:f2:
         ef:af:7f:ab:be:7d:5c:67:38:34:74:5b:ed:70:a7:59:d3:00:
         d1:07:a4:d4:e8:e3:8f:f1:68:4b:fe:1d:25:88:5f:58:78:28:
         d5:a1:d3:c3:1f:5c:40:81:85:34:3e:64:dc:9e:80:bf:26:47:
         28:52:b6:22:fc:54:86:ff:0f:f1:36:e3:14:5e:9e:9c:26:76:
         47:64:e5:c5:39:e4:da:1f:a8:31:90:42:6c:60:ca:b1:5f:90:
         60:1a:f6:9b:60:9a:90:47:56:3e:07:2e:56:a7:b4:23:e6:fc:
         7a:30:69:f2:7b:07:5e:66:05:8c:8e:67:a6:cc:30:9a:87:ae:
         37:03:b4:c6:33:05:b0:af:48:ff:f7:be:73:f1:3a:2e:8e:fe:
         50:fa:7e:45:c8:7a:32:20:34:6c:91:fc:26:a2:9b:d7:85:17:
         57:ec:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:36 2025 by rpki-client