Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
File:                     H7TDxXlvFLOd9R77qdra_Vzr0Js.mft (raw, json)
Hash identifier:          1PDT0nbPu/Ct9PABxhXzMibLn8YfpYPvYZVcospTc7Q=
Subject key identifier:   4F:21:13:F3:3B:DA:79:0B:6A:47:02:FE:5C:EE:38:55:3D:38:45:AD
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Certificate issuer:       /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial:       0596
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
Manifest number:          0586
Signing time:             Mon 12 May 2025 23:03:51 +0000
Manifest this update:     Mon 12 May 2025 23:03:51 +0000
Manifest next update:     Mon 19 May 2025 23:03:51 +0000
Files and hashes:         1: H7TDxXlvFLOd9R77qdra_Vzr0Js.crl (hash: 3CRfME+87E1j2Y4s9T0tkxFfLCnnDixG59Q5fkKogmg=)
                          2: 8DA93CBEBDDD11EFB1946851C4F9AE02.roa (hash: 0+1YoEpfMajvg53SL4gOebhqOGyRHlx7OSHPjEcp7CQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
                          rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916732F, serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
        Validity
            Not Before: May 12 23:03:51 2025 GMT
            Not After : May 19 23:03:51 2025 GMT
        Subject: CN=68227e57-f9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:a1:b0:5f:e9:c9:04:02:93:08:d4:b0:aa:
                    d8:ab:46:3b:42:8b:1f:c2:eb:6a:fa:b4:ff:2a:d4:
                    3d:44:9a:39:be:9d:85:49:5d:dd:d3:7e:1f:07:a5:
                    92:2b:5c:66:8d:4e:d0:e2:75:d0:f1:00:40:ea:e6:
                    52:f9:2f:76:b7:83:ed:68:02:02:49:a5:7d:8e:d1:
                    32:34:c1:f3:da:11:97:77:70:79:43:f9:60:2d:50:
                    3e:f5:66:c4:8d:62:82:ff:e9:ce:d0:b7:b8:59:2d:
                    90:2d:ce:8e:6b:59:89:45:af:2e:9b:65:68:e9:2e:
                    d1:50:62:91:b5:30:dc:e4:80:0a:6c:1b:ea:92:b3:
                    03:60:a2:3b:a5:d3:55:95:bd:42:2b:98:eb:5e:f9:
                    63:0c:06:22:5f:18:49:34:a3:6b:e4:4f:d6:20:08:
                    fa:c3:26:6f:6f:33:29:53:b8:da:30:bd:81:80:c5:
                    03:ca:5c:5f:37:f0:12:5c:54:7a:a8:57:24:0c:c6:
                    58:58:e3:8b:10:d0:16:f5:a2:14:db:3a:ad:31:21:
                    00:41:66:2d:02:df:27:4d:3c:02:51:d2:0a:2c:cc:
                    e8:84:8c:03:f0:01:3c:6b:06:96:7b:c9:c3:57:82:
                    bc:d5:19:d1:17:58:0d:65:ab:94:53:df:a8:77:5e:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:21:13:F3:3B:DA:79:0B:6A:47:02:FE:5C:EE:38:55:3D:38:45:AD
            X509v3 Authority Key Identifier:
                keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:cc:24:70:3e:d1:7e:3a:8a:0a:73:c4:5f:ef:6d:82:92:
         4d:ae:97:4f:11:19:07:e6:db:88:9d:b4:61:fe:80:f0:36:3c:
         2c:43:52:f0:49:0e:81:35:6b:32:e5:73:3a:c8:97:a5:d8:68:
         13:b7:4e:fe:3c:ab:b4:1b:5c:ef:c4:0b:3b:7c:49:57:d6:79:
         e0:9e:6b:01:52:31:f0:db:15:39:7c:67:0a:34:9e:38:d2:82:
         aa:da:ce:8d:e0:5e:c9:7b:4e:39:b0:91:b8:21:79:09:1a:7e:
         53:2f:76:69:71:dc:14:23:c3:ae:0b:70:ca:9b:b7:2d:c4:de:
         e8:3b:11:94:f1:0c:79:0d:87:a5:af:b3:6c:b4:1a:35:70:5d:
         d4:ff:59:78:0f:fb:f7:76:64:4f:b1:e3:b4:a9:70:6b:9f:53:
         6b:25:52:4f:5f:6b:fe:0d:d6:35:df:75:4f:70:4c:2b:d1:7f:
         27:5c:8c:3c:c5:78:13:dc:10:71:43:fd:eb:7d:e0:b4:d0:7d:
         91:34:3d:a5:9a:77:ef:e0:2b:64:46:37:bd:ca:51:fe:da:34:
         32:59:03:a1:6f:14:10:fd:2f:65:03:aa:af:5c:15:b7:0b:8c:
         6f:0a:51:88:d8:21:3a:3a:03:a0:3a:4a:87:2b:65:ab:ac:af:
         77:aa:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:23:02 2025 by rpki-client