Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
File:                     1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json)
Hash identifier:          Lq3Rqj3rWxQmMay4oUjVTCcnJE2W6AOlwC7MHfQOUuc=
Subject key identifier:   C5:4D:6E:05:8E:F4:5B:53:0D:CC:52:82:CB:CC:34:BE:74:2A:6A:96
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Certificate issuer:       /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial:       0316
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
Manifest number:          0312
Signing time:             Sat 05 Jul 2025 01:44:30 +0000
Manifest this update:     Sat 05 Jul 2025 01:44:29 +0000
Manifest next update:     Sat 12 Jul 2025 01:44:29 +0000
Files and hashes:         1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: v3e0z/5/zL7uvAa9BC8/rUnVCJIjI/A5aTvyli3A/88=)
                          2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
                          rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
        Validity
            Not Before: Jul  5 01:44:29 2025 GMT
            Not After : Jul 12 01:44:29 2025 GMT
        Subject: CN=6868837d-0251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:16:80:46:f9:19:fa:db:88:75:60:86:49:
                    86:e8:9c:a4:a6:9c:2f:d9:2f:7a:c0:6c:44:85:1d:
                    a0:84:cf:7e:7c:3d:4f:8a:0a:0b:3f:7a:7b:58:08:
                    39:5e:9d:74:e7:18:3f:ea:a3:38:96:e1:ea:15:78:
                    40:56:cb:c7:e8:5b:f7:96:f8:e5:55:85:ce:56:5b:
                    eb:e9:89:09:b5:ae:e2:bb:f8:24:4d:91:a8:c9:57:
                    b6:d4:45:e8:4b:5d:22:ab:99:60:42:c8:fe:f6:ee:
                    fc:bb:41:c7:e4:a1:4c:51:56:61:8f:0f:d0:6d:90:
                    c0:2a:b1:f4:6f:e8:0e:f4:b4:7e:0c:dc:7b:7c:ff:
                    29:49:43:c5:04:04:1d:00:c3:6a:a9:53:c7:ef:91:
                    89:b3:5d:a9:cc:c3:50:57:80:e7:e6:4e:83:93:d0:
                    20:78:7f:fb:b5:f5:55:a2:5c:ca:27:70:e1:ec:47:
                    18:99:21:e7:df:cf:c4:20:40:a9:6e:db:65:f4:07:
                    17:7d:30:04:65:17:cb:b7:dc:5f:9d:8f:ef:e4:7b:
                    7f:21:a2:af:f0:7f:7f:21:80:79:d7:8a:bf:97:df:
                    e9:5b:e0:1d:fa:8b:04:7e:0f:51:e7:22:30:cc:9a:
                    9a:75:a9:ba:ad:8f:6d:aa:9f:70:48:2f:e6:6c:0b:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4D:6E:05:8E:F4:5B:53:0D:CC:52:82:CB:CC:34:BE:74:2A:6A:96
            X509v3 Authority Key Identifier:
                keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:b5:6b:35:9b:4c:6c:e9:04:df:a0:03:55:67:7f:f9:81:
         2c:32:5c:33:6e:16:a4:b7:92:59:92:de:29:af:dc:b5:88:9a:
         b1:da:07:72:3a:58:05:2c:ba:75:8d:24:4a:a3:84:de:4e:55:
         e9:71:5c:81:f2:46:af:19:22:fa:24:17:3a:11:eb:fc:60:6c:
         0f:02:8f:2d:17:d4:01:c3:46:19:2c:74:2e:c4:73:ce:d0:9c:
         a6:e3:dc:6d:28:75:24:cb:5d:a0:2d:1f:a9:36:2d:ff:9a:0a:
         a3:f4:2d:c4:bb:fe:85:bb:0f:e3:e8:ec:37:82:3f:0e:94:59:
         e4:0f:7c:5f:0e:44:b1:3a:e9:83:55:d7:d6:49:a2:6c:66:1d:
         74:9c:54:76:f7:42:b9:25:f3:ec:1b:42:e7:b0:dd:f1:14:86:
         4e:02:17:1e:25:40:29:6e:f9:20:a1:57:58:d2:3e:a0:44:6b:
         8e:28:4c:d7:70:1c:3a:cd:e9:37:cd:8a:d4:65:ef:5b:73:d9:
         8c:21:b6:ef:48:9a:db:a0:8d:75:77:c5:b2:64:4a:c8:29:43:
         09:22:ba:18:bc:3a:a8:83:18:47:81:a2:35:ae:e4:bb:a7:d7:
         3d:c5:a1:1c:da:46:28:1e:22:cd:d7:13:a1:81:53:e4:2e:70:
         88:f0:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:20:29 2025 by rpki-client