Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File:                     Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier:          pA1pccKKt6IKVC8DYqCMb1PlZZmIeYR+5gvYNvY3jp8=
Subject key identifier:   49:0B:76:92:DE:4B:17:D1:6B:82:F1:EF:FB:FB:43:EE:CA:9C:66:83
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       06B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number:          0698
Signing time:             Mon 12 May 2025 22:03:20 +0000
Manifest this update:     Mon 12 May 2025 22:03:20 +0000
Manifest next update:     Mon 19 May 2025 22:03:20 +0000
Files and hashes:         1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: Enqutx5TEClGgiS/VbEzQki0nXH302DR6tq4V+jBBvk=)
                          2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: u+ofbKLYcAYXay4QDo5J92308RfIUZYffrakAkc1/w0=)
                          3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: 00yFzXA+JQ5htpGD8ADiNSIhDTumFOoTTNXL9w2q2PM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 21:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: May 12 22:03:20 2025 GMT
            Not After : May 19 22:03:20 2025 GMT
        Subject: CN=68227028-84e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:9c:48:de:2d:e0:ab:2d:3d:05:f2:58:5f:
                    dc:28:31:a1:62:37:6b:0a:29:9f:78:44:12:09:46:
                    2b:78:6f:2c:6e:6a:34:48:ed:93:1a:58:af:b3:e8:
                    d4:5c:c2:85:6c:29:2c:6f:07:d9:ae:a7:13:92:cd:
                    89:6f:8d:36:59:ec:e5:01:2c:e2:69:69:92:99:c1:
                    28:64:2e:58:05:33:c8:f4:22:a6:70:ca:9a:cb:9d:
                    b3:e9:2b:ec:d2:e9:d1:35:05:a3:d9:ed:39:02:12:
                    09:31:9c:43:bf:59:5f:7a:2b:d3:ca:93:f4:f4:c8:
                    fb:4a:ba:97:68:c5:2d:18:27:2c:2b:bf:9c:ef:b1:
                    3b:ea:2f:b2:b1:c3:b6:86:31:67:d2:2d:29:ce:12:
                    14:7e:fa:1e:fb:44:85:5a:74:44:33:52:3b:ac:15:
                    9f:78:7b:33:93:90:88:ed:5d:de:3b:99:56:3b:ad:
                    ab:d7:59:80:30:a8:c6:0f:8c:24:0b:28:8e:19:24:
                    e6:d4:70:a4:32:87:a5:04:dd:e2:3f:0a:b7:44:9e:
                    26:06:b7:b5:5c:88:7c:0f:9b:07:1d:bf:0b:11:4e:
                    ff:66:5e:62:b4:b3:22:fa:38:19:c6:8a:9c:fb:bc:
                    4b:c8:9d:b0:14:0c:47:75:72:6d:51:de:8e:c9:ca:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0B:76:92:DE:4B:17:D1:6B:82:F1:EF:FB:FB:43:EE:CA:9C:66:83
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c4:a6:e2:74:78:ac:da:e9:e1:e7:7b:15:19:9f:14:2e:bd:
         84:e5:db:8d:55:09:e0:f8:d5:9c:d0:0e:1c:0b:0b:5c:73:48:
         07:2d:fb:36:ee:01:e6:ff:70:d8:c6:81:1a:51:8e:a2:83:43:
         e3:4b:9f:42:58:5f:7a:37:89:49:25:f0:31:2c:1b:8a:2c:b9:
         f7:28:58:76:be:60:9d:48:c3:0a:9e:74:cb:64:a4:ee:45:08:
         24:4f:18:35:8f:4c:f6:90:8d:73:86:0b:1c:4f:49:cb:f2:59:
         8c:21:9a:ea:39:ed:2f:19:b8:89:0c:1b:f5:73:2f:ef:e4:21:
         9e:9f:5b:62:0a:0a:1e:5b:a0:60:38:02:db:ee:1f:76:6f:bf:
         77:61:54:75:f1:d2:2b:8e:0d:73:0f:b5:67:1f:db:50:b8:69:
         7b:29:f9:df:99:89:ff:f4:ec:96:02:81:a2:6b:f9:6c:f2:6f:
         7c:ec:be:6f:6a:0b:9d:3e:e0:e9:ee:35:9e:68:e8:2c:94:35:
         6d:eb:1f:18:e3:71:c4:d6:31:59:9d:36:f1:b7:fb:5a:6b:9b:
         af:a5:7a:20:b7:71:bf:b8:26:87:9e:b2:2c:2f:99:8a:9f:3a:
         6e:ae:d7:60:6a:25:82:30:50:7a:a7:fb:04:62:e9:1c:97:55:
         49:8e:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:34:52 2025 by rpki-client