Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File:                     HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier:          OXGLCi/N737yIHZ6r2xhNxchpxuVA+xty3Ki60kc2I4=
Subject key identifier:   3D:6F:DF:39:4F:2F:37:5A:F3:E7:73:D2:54:6A:E5:40:E9:D8:FA:33
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer:       /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial:       3511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number:          34CD
Signing time:             Sat 10 May 2025 14:16:02 +0000
Manifest this update:     Sat 10 May 2025 14:16:01 +0000
Manifest next update:     Sat 17 May 2025 14:16:01 +0000
Files and hashes:         1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: iHgqZuEkOz0/pppATdZwtzD33YPx/LtuQszeidzPR1k=)
                          2: 3D6EDF86EDA711ED91155885C4F9AE02.roa (hash: mXb8AscVsTwHQGsL7M6XAxSIWwOh5epna0XlBQIQUOY=)
                          3: D3DAACB2507E11EF91EDBA52C4F9AE02.roa (hash: Whq1SIyvQYa1mALpVqGVZuuCi11KV+H9HrjJKdS2dN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 14:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13585 (0x3511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
        Validity
            Not Before: May 10 14:16:01 2025 GMT
            Not After : May 17 14:16:01 2025 GMT
        Subject: CN=681f5fa1-42f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:d4:f0:cc:c9:7e:59:32:c3:f2:93:03:2f:
                    cb:ff:b6:fb:8f:4f:25:45:03:4f:a1:34:06:34:dd:
                    7b:a5:a3:25:f6:25:ea:e7:00:0c:50:5e:e0:80:d9:
                    cf:09:ef:0d:87:26:8c:b6:a7:64:11:b0:cd:9d:13:
                    58:1e:de:7a:ab:32:6c:b2:9e:b4:2c:cf:e5:6d:bb:
                    08:1e:5f:e4:4a:95:89:c2:c1:ae:b8:f9:60:53:78:
                    d3:00:c9:63:d7:98:95:d7:52:92:8c:25:20:f8:bb:
                    af:11:ca:26:f0:7b:91:fe:3d:86:5b:aa:03:cc:56:
                    70:35:0d:c8:0f:7a:8a:d5:ac:54:1d:26:e6:79:5c:
                    27:de:13:d5:74:4c:15:ec:88:a2:5e:3e:df:b5:e8:
                    f1:b6:36:b0:5b:82:30:bb:1a:1e:8b:a9:ca:b4:0d:
                    35:66:36:e2:53:2f:bf:6d:30:5e:ee:92:89:e3:06:
                    ff:a6:4e:7b:85:f0:dc:63:ed:fe:ff:9b:13:40:54:
                    6c:1e:49:67:6e:22:56:39:a7:37:31:24:24:3e:af:
                    34:94:fd:9a:0a:05:d4:4c:d9:a8:88:3d:a0:ff:c7:
                    ea:24:ef:e9:f6:56:47:ef:df:f8:5f:33:40:ef:31:
                    7c:ba:4f:7b:23:4d:22:c3:9c:21:8b:55:14:9a:f0:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6F:DF:39:4F:2F:37:5A:F3:E7:73:D2:54:6A:E5:40:E9:D8:FA:33
            X509v3 Authority Key Identifier:
                keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ac:38:d5:56:cf:0f:5c:91:cb:65:04:cd:25:07:75:f1:b9:
         9c:5d:ff:4f:fa:31:56:b6:1a:f9:4e:eb:fa:77:6a:04:24:6e:
         85:81:e5:fc:64:b0:c8:5a:aa:e3:3e:91:9f:dc:d7:4f:81:38:
         95:2a:38:d8:77:92:ce:95:03:39:64:8c:1a:4b:0a:9e:12:04:
         08:14:93:60:8e:14:ba:86:77:dc:1a:26:45:87:ee:67:9e:5d:
         10:e9:28:a6:a5:2d:6b:a1:e8:37:38:a2:a4:b7:4e:04:e7:11:
         dc:12:dc:6f:80:a4:a7:08:a2:24:e4:0a:c1:49:0f:28:05:f1:
         41:79:06:6c:9b:c9:82:d4:0e:36:75:d5:5d:27:3f:19:84:98:
         27:c0:97:d6:fb:8f:bf:b1:b3:f1:5f:21:e8:c8:4f:4c:e9:c1:
         de:e5:40:08:27:22:17:45:78:cd:ca:ff:4b:b5:01:38:5b:f4:
         5b:04:5f:60:05:da:d8:09:e7:89:86:bb:5b:b7:16:52:f9:c2:
         81:45:e0:9d:90:2e:b1:f8:a5:0b:4a:65:9c:6e:ec:77:e5:0b:
         84:f4:a0:36:42:b2:56:82:14:4f:10:21:d2:4b:19:a4:03:a2:
         e3:3c:f2:49:71:9b:91:17:d4:cd:1e:be:ed:f3:3e:ef:76:76:
         14:05:ba:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC
QUQzOEJFMzcwHhcNMjUwNTEwMTQxNjAxWhcNMjUwNTE3MTQxNjAxWjAYMRYwFAYD
VQQDEw02ODFmNWZhMS00MmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3j3U8MzJflkyw/KTAy/L/7b7j08lRQNPoTQGNN17paMl9iXq5wAMUF7ggNnP
Ce8NhyaMtqdkEbDNnRNYHt56qzJssp60LM/lbbsIHl/kSpWJwsGuuPlgU3jTAMlj
15iV11KSjCUg+LuvEcom8HuR/j2GW6oDzFZwNQ3ID3qK1axUHSbmeVwn3hPVdEwV
7IiiXj7ftejxtjawW4Iwuxoei6nKtA01ZjbiUy+/bTBe7pKJ4wb/pk57hfDcY+3+
/5sTQFRsHklnbiJWOac3MSQkPq80lP2aCgXUTNmoiD2g/8fqJO/p9lZH79/4XzNA
7zF8uk97I00iw5whi1UUmvDQEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1v3zlP
Lzda8+dz0lRq5UDp2PozMB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE
NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUQ3Ni82Mjg3QTExNDFENjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9J
UnZxSnZ4T2J6czI2MDR2amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZrDjVVs8PXJHLZQTNJQd18bmcXf9P+jFWthr5Tuv6d2oEJG6FgeX8
ZLDIWqrjPpGf3NdPgTiVKjjYd5LOlQM5ZIwaSwqeEgQIFJNgjhS6hnfcGiZFh+5n
nl0Q6SimpS1roeg3OKKkt04E5xHcEtxvgKSnCKIk5ArBSQ8oBfFBeQZsm8mC1A42
ddVdJz8ZhJgnwJfW+4+/sbPxXyHoyE9M6cHe5UAIJyIXRXjNyv9LtQE4W/RbBF9g
BdrYCeeJhrtbtxZS+cKBReCdkC6x+KULSmWcbux35QuE9KA2QrJWghRPECHSSxmk
A6LjPPJJcZuRF9TNHr7t8z7vdnYUBbob
-----END CERTIFICATE-----
Generated at Mon May 12 07:14:17 2025 by rpki-client