Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft
File:                     Hwkr8ONn_aUUbSh9gQKybsj7grU.mft (raw, json)
Hash identifier:          WoquCStUl9k51/DGRR9rc9GeJam31rlnWG8cXRyWsfI=
Subject key identifier:   9C:2F:46:1A:70:F8:A4:75:B8:87:15:E3:F2:EF:E3:F2:CE:9C:90:39
Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5
Certificate issuer:       /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5
Certificate serial:       02E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft
Manifest number:          02D2
Signing time:             Sun 29 Jun 2025 00:57:21 +0000
Manifest this update:     Sun 29 Jun 2025 00:57:20 +0000
Manifest next update:     Sun 06 Jul 2025 00:57:20 +0000
Files and hashes:         1: Hwkr8ONn_aUUbSh9gQKybsj7grU.crl (hash: 248kcRJGG79HDubSCGCiSoCDdnCXkNb3PD4zdd6O8S8=)
                          2: E7923742526311F0986A3A5AC4F9AE02.roa (hash: C1cnMXKGJuTQ/i5MZh9Z6fPastUUu1Swd7Zuw8j4VwM=)
                          3: 26B54DD8326911ED9A685C1AC4F9AE02.roa (hash: TmDws7WheFOESe1yv//UWdgV37JOyUYHp5qinnrseq8=)
                          4: 2E56630C741611EE98997122C4F9AE02.roa (hash: f1I70aR9/6jQvTXHflDUxz1+wxpkM6Pj3ynFhb0cXfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl
                          rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 00:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1AC4, serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5
        Validity
            Not Before: Jun 29 00:57:20 2025 GMT
            Not After : Jul  6 00:57:20 2025 GMT
        Subject: CN=68608f71-2cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e6:4e:08:07:34:95:f1:df:c4:06:b5:ca:44:
                    76:a9:63:c6:93:f2:1b:bf:f1:20:2b:08:72:f2:65:
                    7e:cc:9a:6f:7d:64:f4:e9:c8:db:43:46:66:9e:43:
                    cc:be:ae:a6:39:07:c8:89:0e:58:f5:3d:10:97:55:
                    1f:18:f0:1d:63:8a:4e:74:e3:63:2a:01:0d:86:8d:
                    5f:0c:c6:65:92:da:c7:5f:07:90:68:e0:09:bd:c0:
                    01:1d:63:72:63:c4:f6:c8:0f:94:b4:f7:04:ea:60:
                    22:ec:be:2d:4b:73:7c:78:f6:3c:e9:62:47:0c:c8:
                    a3:65:db:f9:cd:96:f9:bb:78:e1:6b:46:f6:c8:3c:
                    cf:bf:eb:1a:b4:3f:9d:86:f3:5e:4a:4f:c2:15:8c:
                    63:eb:cf:d6:4c:9f:9f:75:ae:24:8f:0d:4b:5a:99:
                    25:8c:1a:6e:93:81:c4:e5:2b:82:ed:f0:88:84:60:
                    56:6a:ff:c1:62:01:80:8e:f8:fe:1a:fb:be:b8:1c:
                    bb:00:1e:ef:f6:2d:fb:66:51:61:8e:13:16:5d:b9:
                    fa:42:28:c0:0b:ec:c5:ea:10:1e:94:dc:64:56:1d:
                    f3:63:c9:5a:d4:10:7d:8b:19:e9:d0:3a:4e:68:71:
                    23:9f:04:65:35:1b:06:d5:2a:da:c2:da:e5:11:cc:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2F:46:1A:70:F8:A4:75:B8:87:15:E3:F2:EF:E3:F2:CE:9C:90:39
            X509v3 Authority Key Identifier:
                keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:74:e1:76:77:18:bd:e9:8b:ea:2d:62:86:ea:71:36:78:01:
         bb:18:ad:a3:11:d1:3f:ad:f1:27:df:66:84:23:bc:a6:b2:98:
         27:9b:52:2a:4e:b8:54:ef:74:79:05:5c:dd:fc:4b:02:09:e7:
         9e:ab:92:62:5d:4b:40:e9:5b:7f:7b:3d:6f:07:ce:32:ec:ed:
         6e:f6:88:d4:b8:53:85:07:e2:b8:5e:d6:2e:8c:2b:2f:9c:ab:
         d3:95:cd:e8:54:e5:12:3b:a6:48:8d:19:47:df:49:6a:2d:93:
         1c:35:af:51:7f:15:9b:d8:66:e8:e7:ea:71:a4:ab:03:b0:66:
         49:0f:93:d3:be:6a:96:74:fd:fd:6f:3a:94:d0:31:a8:d4:a9:
         7c:3f:54:2a:ac:21:ab:f9:81:56:5e:0b:3e:65:59:5d:41:67:
         2f:44:25:9b:c7:6a:58:d7:f4:7e:27:95:05:0d:7f:86:94:b8:
         44:67:31:eb:89:f4:0f:0e:7b:43:55:a0:cb:58:1c:83:cc:e2:
         22:50:68:ab:1b:7b:36:a5:86:3f:38:6b:4f:1f:ae:9f:d9:98:
         bd:90:cf:28:7c:b2:47:dd:e7:e9:0a:ef:d2:6e:88:d2:fd:ef:
         96:01:6f:b3:7e:e0:06:68:17:f7:74:10:fb:18:57:63:d5:84:
         b7:4c:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:58:18 2025 by rpki-client