Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
File:                     -1Hou5mkLX1_xMVwQZv3TIbTr9w.mft (raw, json)
Hash identifier:          9rsP2d0WBK2Qoo2GqP8969yn4Nx+luvhasZn/POhs4E=
Subject key identifier:   F9:39:84:E3:B1:5C:61:C6:D0:31:FB:C6:AA:9B:7D:38:00:31:7A:D1
Authority key identifier: FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC
Certificate issuer:       /CN=A9192739/serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
Manifest number:          0628
Signing time:             Wed 02 Jul 2025 23:04:58 +0000
Manifest this update:     Wed 02 Jul 2025 23:04:58 +0000
Manifest next update:     Wed 09 Jul 2025 23:04:58 +0000
Files and hashes:         1: -1Hou5mkLX1_xMVwQZv3TIbTr9w.crl (hash: Dq+Ytk4jDwa9FI2p6ct5As5kMnwpb2d/t6RRUEKiTHU=)
                          2: A2835E90A0B211EBA87FF23EC4F9AE02.roa (hash: VRjoLmafAxq4ektn9uauBKFkk07qZLl2+f3SufQLeJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl
                          rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192739, serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
        Validity
            Not Before: Jul  2 23:04:58 2025 GMT
            Not After : Jul  9 23:04:58 2025 GMT
        Subject: CN=6865bb1a-333c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:80:e5:05:d3:0e:98:ca:75:7b:3c:2e:4b:
                    38:03:f9:bc:f5:25:22:ba:c1:66:be:b9:a5:56:11:
                    85:2a:fc:cd:87:af:28:f3:13:ef:fb:03:c6:dc:e5:
                    b7:00:0d:8e:24:d1:56:25:f6:c7:af:6f:74:2e:8f:
                    28:b6:a2:28:33:99:26:db:01:8d:7d:39:89:51:01:
                    0b:76:88:c2:e6:2e:e5:36:4f:84:c1:ac:2e:53:b3:
                    fb:5d:9f:68:55:c6:02:19:b6:78:a5:6f:82:4c:4e:
                    32:81:ed:a7:a7:80:e0:a4:c2:33:82:1a:ec:c4:d9:
                    52:d0:25:db:c1:81:8e:48:23:f5:9c:7c:76:b6:a7:
                    0d:49:2f:6f:db:9a:18:67:51:3c:a0:1f:00:64:97:
                    8c:4b:01:03:a4:04:5f:7c:c1:c4:16:56:20:76:bf:
                    25:72:b4:19:91:14:96:30:47:38:cd:c5:98:73:6e:
                    95:3d:03:14:53:fc:e0:4e:7b:d1:62:52:de:31:8c:
                    8e:a2:71:92:f7:a6:d0:d5:1f:b2:3f:08:96:8b:09:
                    b4:20:fa:28:c1:a3:f1:9b:36:be:a8:40:f8:ec:26:
                    9a:40:93:80:01:4f:7d:2d:95:3b:bf:16:f3:89:52:
                    0a:a9:f4:0b:a0:32:de:71:c8:34:43:a9:6c:d5:2a:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:84:E3:B1:5C:61:C6:D0:31:FB:C6:AA:9B:7D:38:00:31:7A:D1
            X509v3 Authority Key Identifier:
                keyid:FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c7:fc:c9:b3:22:35:c3:77:88:e1:7b:47:b9:40:f7:b0:52:
         c8:97:fc:99:4a:5f:1a:78:44:fa:e4:75:47:f0:e0:aa:a9:6a:
         7b:c5:3a:4b:e4:c1:2a:ed:4a:04:29:4e:95:25:92:50:d3:44:
         e5:42:90:9a:27:4b:81:0b:ef:0f:a2:48:eb:fb:69:cb:37:53:
         23:b5:04:5c:f9:ea:fb:f6:c1:f4:15:52:fb:20:68:76:80:66:
         34:d5:9e:73:1d:65:37:d4:e1:03:05:41:6c:75:38:4f:12:58:
         b1:85:f9:bd:01:76:27:19:7c:d6:7e:3b:a5:24:93:c0:98:01:
         87:75:26:43:a6:26:bb:2c:1c:05:12:8d:6c:6d:a2:ed:05:62:
         0a:f9:d4:c1:41:61:fe:83:88:73:0c:e2:f0:05:a4:7a:01:9b:
         c2:e5:04:2c:f4:01:9d:70:a5:e2:2b:e0:44:65:1c:1f:9e:a9:
         1b:89:63:f1:64:e5:82:1c:7b:56:bd:bd:1a:0a:27:7a:7c:f0:
         ae:a4:78:77:92:08:c3:c6:cd:7f:6d:04:0f:e6:87:d7:aa:95:
         80:c9:66:28:ff:34:81:04:05:64:a5:da:26:32:5e:e8:09:41:
         85:bf:9b:bd:2e:78:f7:3e:ac:59:4b:61:21:8c:61:7c:3f:8c:
         41:fe:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:45:32 2025 by rpki-client