Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File:                     hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier:          zcdal1kNc9Oq0uyPxZPRnpQxngzo8JYkkIE878gP9JQ=
Subject key identifier:   B6:BF:4F:5C:7E:EE:89:78:96:7A:B5:B6:BE:10:44:73:8A:4F:AC:50
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer:       /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial:       14A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number:          148E
Signing time:             Wed 02 Jul 2025 17:03:50 +0000
Manifest this update:     Wed 02 Jul 2025 17:03:50 +0000
Manifest next update:     Wed 09 Jul 2025 17:03:50 +0000
Files and hashes:         1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: D6XUW1J2sYAO2y8NVt0iw5TfbTLRDh8W089xQOKSBr8=)
                          2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
                          rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5286 (0x14a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
        Validity
            Not Before: Jul  2 17:03:50 2025 GMT
            Not After : Jul  9 17:03:50 2025 GMT
        Subject: CN=68656676-8de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:ba:19:1b:9a:c9:ad:48:04:d8:b7:1a:33:
                    c8:c4:da:20:2b:86:59:2e:7f:c0:56:0b:e2:99:30:
                    0e:57:85:5d:f8:48:2b:03:74:6c:de:95:c0:0b:05:
                    bb:0c:3b:a9:19:7b:9c:9a:f2:85:a4:e9:98:4b:06:
                    77:8c:04:c8:5b:7c:cb:e1:73:d3:bd:2a:84:92:df:
                    01:69:d3:f1:02:fc:33:23:62:59:0e:4c:4a:eb:56:
                    6b:03:94:6d:71:7d:ca:cc:4f:9a:25:e0:1a:2c:20:
                    1e:00:16:25:86:1a:fa:28:9c:ef:39:9c:d3:84:52:
                    23:b9:e0:c5:d9:c0:97:a2:14:c7:e0:e5:9b:f7:02:
                    00:10:02:e3:09:68:91:0a:e9:b4:c1:ce:4e:6d:84:
                    80:bb:8f:4e:20:1e:0a:eb:14:fd:5d:a3:7a:33:c0:
                    95:fd:81:ea:c4:50:b1:d5:28:0a:43:28:3f:a9:49:
                    e6:dd:b7:cf:0b:d2:2f:e4:82:f6:93:3a:48:e0:6f:
                    2f:9d:5a:00:d2:b9:6c:a4:7d:1c:ea:bd:e1:20:53:
                    ef:64:99:e7:49:88:9d:6e:d6:1c:88:b7:11:af:8c:
                    85:32:ad:57:d7:15:49:e1:19:a8:b9:5d:be:52:f9:
                    dd:d6:58:91:33:7c:95:98:34:86:81:ba:7c:b2:90:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:4F:5C:7E:EE:89:78:96:7A:B5:B6:BE:10:44:73:8A:4F:AC:50
            X509v3 Authority Key Identifier:
                keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:19:97:20:16:9c:da:7e:de:b2:98:26:fe:03:4b:ca:88:aa:
         76:c8:3f:e8:4e:5c:dc:48:9d:cc:12:a2:00:e6:31:3c:35:b0:
         3b:93:ca:ee:38:3a:b2:88:3e:79:3e:9e:a0:d6:bd:c5:7a:0e:
         3b:b8:87:9e:12:01:7d:01:e5:b3:45:4a:4b:a1:21:3b:2a:61:
         f4:3b:4d:fc:92:25:50:6c:26:59:97:5d:f4:c2:7b:12:3f:a7:
         e2:1d:86:6d:2c:f2:ec:5b:29:4e:cf:90:8b:61:df:a5:e4:f9:
         13:5b:4b:7a:d9:48:5b:b2:0b:83:af:af:06:2b:b7:17:a7:e7:
         9b:5b:0c:2b:48:05:a0:af:f6:10:02:22:0b:62:ae:5b:f2:54:
         3f:d1:6a:8b:9d:01:dc:06:64:7a:46:99:c0:3e:84:7a:c0:38:
         dd:dd:33:bd:aa:7b:79:bd:0d:72:f5:b9:fa:9a:48:e3:73:ad:
         ee:f8:26:44:1f:8f:a9:af:58:dc:43:c6:79:75:be:c5:93:20:
         f2:a8:65:47:52:f5:41:d5:70:6d:0b:d2:28:8a:34:55:53:02:
         f0:61:53:ae:34:ad:7b:18:f8:72:ed:4a:29:be:4a:61:5b:3e:
         da:db:1e:a9:2e:44:a6:72:af:ec:d3:5d:15:9e:fc:5b:ed:b9:
         39:03:57:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:02:24 2025 by rpki-client