Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File:                     Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier:          1zfPcpeHecEU0RE1d2UZ/Pfn3MzaDu2Q8OshHfcqjTU=
Subject key identifier:   54:9C:47:51:D1:00:A3:B6:9A:07:1E:41:94:25:8F:38:B5:C7:0C:AF
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       070A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number:          06E9
Signing time:             Sat 18 Oct 2025 23:28:33 +0000
Manifest this update:     Sat 18 Oct 2025 23:28:32 +0000
Manifest next update:     Sat 25 Oct 2025 23:28:32 +0000
Files and hashes:         1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: 4U+58id+hvucOZBK7jtxsP9NASw/jA3qV196HRXubWg=)
                          2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: u+ofbKLYcAYXay4QDo5J92308RfIUZYffrakAkc1/w0=)
                          3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: 00yFzXA+JQ5htpGD8ADiNSIhDTumFOoTTNXL9w2q2PM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Oct 18 23:28:32 2025 GMT
            Not After : Oct 25 23:28:32 2025 GMT
        Subject: CN=68f422a1-ffae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:d6:bf:5d:67:e4:95:ff:fe:1a:eb:57:39:
                    fd:b4:49:bf:e9:27:e5:4a:67:a7:9e:85:e4:f3:5f:
                    46:d9:a2:bf:65:3d:d5:79:21:08:8e:72:53:be:09:
                    90:39:94:60:c8:76:8c:e1:bd:ef:5d:6b:76:c1:aa:
                    28:5e:30:05:85:af:c8:94:32:9b:2f:83:7e:f6:1f:
                    4d:88:36:58:d8:87:f8:6d:f4:7f:75:aa:34:99:ed:
                    ee:37:8f:d7:5f:bd:43:83:90:56:df:8c:8f:f2:3e:
                    79:09:2d:f1:ec:13:e2:7a:2f:c7:89:6f:e5:c9:27:
                    6a:84:a4:ee:a1:c1:29:f5:fa:55:7b:4d:89:9b:e9:
                    38:1b:50:55:48:56:0a:bf:eb:5d:da:d4:e2:4d:e7:
                    c8:44:2e:aa:ea:6f:d4:5c:a8:21:a0:dc:d9:95:88:
                    bd:11:3e:dd:cc:f1:91:3f:2d:17:a1:f2:a1:62:59:
                    62:65:7e:b9:c3:88:bf:4b:b7:54:53:f9:25:45:9b:
                    69:2c:a7:2a:5b:a3:2d:c0:dd:97:d3:ad:a2:78:b7:
                    dc:44:fd:64:e7:97:61:13:f1:78:95:b7:c9:8b:c5:
                    a1:99:53:37:07:7f:7b:94:75:84:79:0f:bb:fa:7a:
                    90:86:1c:d1:ba:3f:67:d9:1b:fa:08:14:64:fc:7f:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9C:47:51:D1:00:A3:B6:9A:07:1E:41:94:25:8F:38:B5:C7:0C:AF
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:14:5f:85:9c:e9:21:65:97:b0:11:6c:8f:5a:45:1e:a2:77:
         75:ff:89:38:4f:fb:48:5f:9f:42:35:02:27:f1:f2:7e:ac:98:
         fa:24:88:40:f9:c1:2c:90:51:42:82:72:1b:bb:d7:6e:a9:87:
         93:13:69:39:fb:a3:8c:97:68:be:b6:57:12:2d:aa:a4:e8:13:
         73:5f:db:82:ca:af:10:c4:33:47:aa:0f:45:11:cb:7d:96:3b:
         84:93:a7:9d:70:40:57:d3:8f:3c:b9:df:a6:71:fc:3a:b1:ac:
         76:78:37:99:4e:dd:97:ae:5f:84:8d:bb:b4:8d:3c:fe:80:98:
         82:e3:fb:d4:6c:a4:05:0d:fd:c0:e1:f6:5e:5a:ce:08:95:38:
         c4:1d:41:6a:86:b7:b8:60:7c:fd:9f:c5:21:d8:44:90:77:d9:
         26:6c:e4:fa:50:3a:8e:e2:91:a0:d5:ff:1b:12:69:14:51:d9:
         d2:f8:b3:87:83:15:4e:db:18:23:4a:6c:74:03:29:58:9b:9f:
         6c:9d:ed:f2:74:1d:1a:b1:45:7d:fe:1c:eb:3d:53:f9:2f:cb:
         80:89:58:4e:7b:50:99:18:9c:75:69:7e:5c:0f:9b:9f:76:47:
         58:2e:0c:5a:9d:de:64:c9:d7:71:f7:34:94:82:e9:14:03:5c:
         bd:8d:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:12 2025 by rpki-client