Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
File:                     hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json)
Hash identifier:          wxIZUynamezxgSo8CpAwUFtgf4T5ChO9XnOT6Yciujo=
Subject key identifier:   68:B0:27:1D:41:1A:D1:B9:28:54:03:26:0E:20:67:D4:52:E4:D4:88
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Certificate issuer:       /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial:       0320
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
Manifest number:          0314
Signing time:             Thu 03 Jul 2025 01:35:12 +0000
Manifest this update:     Thu 03 Jul 2025 01:35:11 +0000
Manifest next update:     Thu 10 Jul 2025 01:35:11 +0000
Files and hashes:         1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: PjAXtv0Ju8vusKALeDCZFEGQisj1Weq44ilE8edMndA=)
                          2: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: D/07ECvWp7oQg2+1KPxjiVqoD+wojBNXOMz248kJJ/8=)
                          3: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: l1w8+0ex2ah/bqLhlgu70ROEZ3rYXLDAefLnWRzXKeM=)
                          4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: jCGpkTOREB2CZphvzKOSraYTHWPq9LTO8zozaxcqQy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
                          rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
        Validity
            Not Before: Jul  3 01:35:11 2025 GMT
            Not After : Jul 10 01:35:11 2025 GMT
        Subject: CN=6865de4f-02b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:75:4a:6f:37:e2:c7:e3:28:b0:19:9e:4f:b5:
                    49:6e:d4:24:dd:5b:1c:0a:b3:bc:73:15:18:e7:38:
                    88:42:d3:92:fd:99:23:11:6d:fd:a8:3b:cd:7b:b1:
                    b5:db:7a:3f:bb:2e:ae:9c:9b:e4:0c:a6:dc:a3:85:
                    a0:f1:73:7b:2f:e3:fe:52:c1:56:70:34:07:72:32:
                    50:00:2f:b0:c9:66:79:dd:1a:da:c1:7c:b1:d9:58:
                    9a:47:60:8f:a6:5e:b4:60:f4:e7:b8:19:43:0f:50:
                    93:69:e5:b5:47:39:5f:49:a1:36:90:d5:d7:2d:98:
                    21:19:7e:5e:5b:d0:f1:52:a3:54:82:c1:0f:b9:b7:
                    ee:c2:bf:71:79:e4:a2:fa:31:18:f6:8b:6f:39:dc:
                    03:e1:d6:6b:20:54:04:c9:1d:2a:ff:fa:b9:84:da:
                    bb:7b:64:6b:28:97:b7:cc:5b:c0:02:9f:92:e9:62:
                    a1:ca:c5:02:11:84:ae:fb:c5:a1:84:b2:0b:4c:1e:
                    98:bb:2a:22:19:84:0c:0f:8e:91:c5:a0:fc:ee:4c:
                    e3:40:92:33:bd:d8:72:34:eb:c6:47:81:00:77:20:
                    81:c4:64:9e:70:27:63:22:27:c0:e5:43:5b:40:40:
                    cb:32:d4:34:26:3b:75:c4:52:f6:8e:06:52:46:2a:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B0:27:1D:41:1A:D1:B9:28:54:03:26:0E:20:67:D4:52:E4:D4:88
            X509v3 Authority Key Identifier:
                keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:dd:b7:c5:41:9d:e7:36:ad:f1:e0:6a:a6:c0:88:ab:01:7f:
         6f:d9:fc:2d:7f:b5:ac:72:f3:95:0c:60:dc:d0:60:d0:32:3d:
         f9:d9:13:7f:ad:9e:87:a6:32:3d:84:b3:a3:01:d7:cf:db:b8:
         60:19:5f:ca:00:1a:55:be:a0:71:8f:40:ae:9e:ae:be:74:5b:
         0f:c2:0d:14:69:03:ba:82:d0:0f:6e:15:81:51:7a:76:d3:b9:
         4e:7f:df:a4:7e:c6:76:9d:90:db:26:dc:12:42:97:05:2e:5e:
         13:35:7f:4b:40:75:b0:07:22:d8:75:17:f8:c3:a3:61:2e:df:
         5e:e8:a3:3e:d8:62:db:a6:41:d2:1b:a8:88:e7:86:52:31:cf:
         20:af:17:a1:a9:bb:17:b3:76:da:2d:a2:47:1e:a2:4d:0d:99:
         53:c6:1f:6f:32:df:69:31:31:56:71:e4:63:6e:d2:7a:b7:62:
         af:ab:5b:fe:6d:f9:3f:a8:15:cd:80:f8:34:83:b5:67:d0:78:
         69:61:13:d7:b0:d1:b0:47:1e:7b:3b:f4:11:7c:94:6d:70:1c:
         ea:6a:9d:12:24:24:23:91:e1:21:23:08:b7:08:d1:b7:0d:b5:
         b0:10:6a:d1:f1:4c:8e:c0:50:7b:34:cb:44:eb:b8:dc:02:73:
         cf:52:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:58:00 2025 by rpki-client