Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File:                     HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier:          3xM7ML9zZZ/F7cpyMUPenJ6hfskSCq8K/Flasq9eWfs=
Subject key identifier:   49:F1:77:7F:79:96:B6:DF:FD:88:50:96:D3:B4:0A:29:B8:28:A7:2B
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer:       /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial:       0B9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number:          0C1C
Signing time:             Fri 22 Aug 2025 19:08:01 +0000
Manifest this update:     Fri 22 Aug 2025 19:08:01 +0000
Manifest next update:     Fri 29 Aug 2025 19:08:01 +0000
Files and hashes:         1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: HiOFtNb94TMZUxBRCj46QwT0ebP06jgTF8Cd7xlJYSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
        Validity
            Not Before: Aug 22 19:08:01 2025 GMT
            Not After : Aug 29 19:08:01 2025 GMT
        Subject: CN=68a8c011-05bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:f8:aa:a9:ad:75:58:f1:28:ae:8e:08:e2:
                    8f:22:6c:f8:d3:bb:55:ce:9b:04:42:1b:fc:84:5a:
                    54:d2:95:39:6f:7c:9d:a5:8b:fa:ba:6d:4c:a8:59:
                    e3:75:4e:1b:63:a0:49:83:fa:d1:79:0b:81:e2:48:
                    c9:b5:cd:1c:4e:a6:92:99:be:83:85:55:27:a4:6d:
                    f1:8a:d8:ee:4e:2e:18:0e:45:b9:d2:6e:f9:b7:cd:
                    b8:d2:e9:ca:82:52:d7:4e:16:1d:75:c6:c4:3c:27:
                    88:8b:c5:89:88:16:17:44:0b:54:31:38:c7:9b:f4:
                    3e:4b:e7:7e:40:39:19:fc:4e:0f:0d:7e:91:02:52:
                    db:d9:42:91:82:a2:19:93:41:6d:40:ec:a0:43:6d:
                    7a:00:88:f4:89:8c:96:02:6a:50:a6:cd:c2:aa:df:
                    86:4a:fd:9b:06:a5:7f:61:c8:2f:c6:8c:b1:fa:92:
                    ea:e5:75:4d:cb:cd:af:ce:58:97:98:ca:7d:e6:df:
                    09:40:0f:9a:66:55:6f:69:0a:c2:3c:76:1b:ae:74:
                    35:cc:48:a7:1e:b4:47:68:49:97:6b:0a:02:57:3d:
                    c4:15:69:fc:b3:2b:6c:47:c5:cb:ce:64:75:13:04:
                    31:a8:6b:b8:46:f4:45:67:69:94:e7:08:47:0c:fe:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:77:7F:79:96:B6:DF:FD:88:50:96:D3:B4:0A:29:B8:28:A7:2B
            X509v3 Authority Key Identifier:
                keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:62:ce:94:64:5a:7f:01:51:a1:d1:61:84:bf:5a:0b:8a:
         8d:23:d6:cb:1e:85:53:7c:cd:ee:de:5b:85:3b:8e:f0:cf:9f:
         fa:f0:69:a8:29:5f:ea:e7:f8:3b:56:fd:42:ce:50:8c:7a:0f:
         77:24:66:68:ea:83:32:bc:a0:98:59:e3:6e:5d:69:c9:21:80:
         1f:19:8a:1d:e0:e3:e2:71:96:ec:bb:1e:51:c5:20:e6:74:42:
         67:7d:62:e6:68:12:f3:af:50:cd:3c:c7:da:3a:71:8e:ba:46:
         a3:fa:3d:3a:f3:d4:de:52:f6:5d:66:ee:66:b3:49:3e:15:35:
         4f:d4:51:18:3f:fc:c0:50:f2:0e:ba:e7:4a:d4:ce:26:a5:a6:
         a9:ee:5e:de:31:97:f7:c8:5a:7c:27:c1:a6:f3:a3:ba:f5:99:
         5c:2e:4d:b5:ae:98:e9:40:ec:19:c7:e8:80:6b:ee:da:a9:6a:
         6a:c6:21:03:ae:72:6c:f2:5b:c3:48:95:a6:05:05:44:16:df:
         b6:47:04:fd:e5:b1:d3:15:b8:38:e3:34:83:f5:a2:56:40:be:
         dc:cd:a2:67:93:d6:f2:ed:88:a9:cb:dd:e0:ee:4a:f7:57:77:
         ff:90:9c:74:18:91:5e:37:7f:0d:97:b4:d5:1d:e6:1e:f1:99:
         47:e8:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:53 2025 by rpki-client