Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File:                     HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier:          ofMIoRdTZdcQ+jCoFPPTUcqVC4I1TKAR+e4BeUxVQ0M=
Subject key identifier:   30:E6:EA:36:67:9F:8D:2D:0F:F5:2A:23:F1:5A:3B:50:2D:04:5C:5D
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer:       /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial:       0EC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number:          0E9E
Signing time:             Mon 30 Jun 2025 17:54:19 +0000
Manifest this update:     Mon 30 Jun 2025 17:54:19 +0000
Manifest next update:     Mon 07 Jul 2025 17:54:19 +0000
Files and hashes:         1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: JFHRYkCUijUNLZpeHPzdYehkM/cMI436syBE5n35aaI=)
                          2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=)
                          3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=)
                          4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: nERwHYLrCQbTGbVdhkuVu4DLbRWJapvf+ehHeDcqXoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 17:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3776 (0xec0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
        Validity
            Not Before: Jun 30 17:54:19 2025 GMT
            Not After : Jul  7 17:54:19 2025 GMT
        Subject: CN=6862cf4b-4232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:56:15:b2:34:71:c1:7f:b1:4d:ef:d6:c4:
                    c4:41:8c:26:e2:bc:9d:85:ac:a8:33:48:fb:70:cd:
                    a1:57:f4:7b:18:90:22:70:17:cc:30:c6:64:dd:4d:
                    aa:2f:f8:58:74:aa:86:8d:b0:b8:b0:a7:6a:19:d2:
                    58:c4:cc:0a:9c:08:35:37:9c:e0:35:eb:f6:7b:8c:
                    1e:5d:44:07:5f:79:8d:3f:72:17:f9:53:cd:66:3a:
                    e2:9a:7a:7b:ac:fa:c2:fd:3c:b4:dc:fa:e4:6c:4e:
                    e5:88:05:fb:8b:0f:bf:d0:8d:d9:f1:7d:24:b6:1a:
                    2a:3f:87:fe:42:04:88:e6:dd:06:7a:89:23:3b:51:
                    7d:e1:01:81:be:ff:c2:4a:77:50:6c:f8:9a:df:da:
                    f5:45:b2:fb:22:88:cf:3f:d9:02:df:7e:bd:c4:3e:
                    54:8e:55:c3:d3:77:eb:e3:0c:60:63:e3:10:c9:22:
                    e0:83:75:f7:b7:7d:ac:c9:28:80:a2:47:70:13:25:
                    fc:87:b6:c0:f7:ac:d0:03:fb:f0:f7:cf:6d:fd:f8:
                    fb:7f:08:f7:28:c3:4d:41:bc:6f:52:0e:e2:5b:54:
                    eb:b0:97:94:f8:c1:7a:7b:c4:f6:24:18:40:dc:b7:
                    23:11:c4:1f:98:72:59:d5:2c:78:4c:78:a7:f8:d5:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E6:EA:36:67:9F:8D:2D:0F:F5:2A:23:F1:5A:3B:50:2D:04:5C:5D
            X509v3 Authority Key Identifier:
                keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:b1:61:3f:3d:79:2b:73:75:b6:cb:c5:32:d3:8b:7e:74:
         7d:41:60:ef:96:d7:4b:13:a4:ae:86:87:8b:c4:04:69:59:9a:
         54:41:ff:ce:87:69:4b:f7:73:28:4e:a5:f7:29:a5:4d:e3:e4:
         86:e5:7b:0c:9e:dd:1d:29:e5:87:c9:22:63:de:18:8d:da:bd:
         f1:78:60:96:58:8b:eb:3f:58:a3:b7:b5:cb:16:37:56:65:d6:
         64:03:0a:d5:87:be:b6:dc:b2:67:d5:69:3d:1d:95:54:e3:6f:
         35:cf:90:d5:19:5d:f5:81:76:b6:51:76:a6:3f:fd:4b:ed:b1:
         3e:a0:74:8a:f2:07:81:0a:23:de:ab:32:5b:6e:a3:ac:55:23:
         34:a6:65:24:bb:26:c4:91:e7:5d:5a:8d:dc:61:47:69:89:91:
         5e:fe:f5:7d:55:4b:68:55:e0:b4:fd:32:6a:d1:40:4d:08:d7:
         63:2d:dd:b0:db:3f:0e:7b:5e:e2:17:fe:04:f1:c9:36:f9:ec:
         87:13:8e:29:32:32:0d:84:43:8d:48:bd:7e:52:f8:43:75:de:
         69:45:ec:b5:08:66:8f:8c:be:5a:d3:3d:a4:38:66:17:e3:4e:
         d8:dd:e0:87:ec:12:0f:07:1a:ed:a1:e0:57:bc:e3:8f:59:e1:
         cf:c1:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:18:34 2025 by rpki-client