Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
File:                     HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json)
Hash identifier:          KMTvkvfwtCN62h+jk9p35PEBaAfvUnTlpAwMvkZC4JQ=
Subject key identifier:   D5:87:20:1B:CA:80:F9:1E:BD:53:2A:96:5F:16:C1:79:7E:61:88:D1
Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
Certificate issuer:       /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Certificate serial:       071C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
Manifest number:          0714
Signing time:             Wed 02 Jul 2025 22:09:45 +0000
Manifest this update:     Wed 02 Jul 2025 22:09:44 +0000
Manifest next update:     Wed 09 Jul 2025 22:09:44 +0000
Files and hashes:         1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: lvG3dYaSXyUkqvCHlM0eK70nMsqvBJpawcxFbDSY7xo=)
                          2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
        Validity
            Not Before: Jul  2 22:09:44 2025 GMT
            Not After : Jul  9 22:09:44 2025 GMT
        Subject: CN=6865ae29-0337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:da:04:65:75:fe:87:7a:c2:5f:c4:11:d3:
                    cb:42:a2:f0:e0:71:ba:b8:b3:77:a0:00:62:eb:78:
                    cc:40:15:c8:ec:21:e3:a5:7e:de:a4:a3:1e:36:c3:
                    35:be:81:28:93:5f:3f:53:b8:1e:67:6c:da:ed:3f:
                    b9:08:4e:ab:f0:5f:1d:09:fd:ed:b8:89:a7:8c:ed:
                    a1:55:70:f3:fa:6f:5c:80:ae:57:9a:1f:12:37:c7:
                    e9:7a:56:65:35:a8:47:48:2d:be:87:5a:93:41:68:
                    2a:85:f7:2c:1f:7b:6f:80:c0:c7:d0:ea:c1:cc:ec:
                    31:93:1e:ed:15:18:d3:81:96:58:f7:67:31:f5:2e:
                    65:08:f8:b7:55:65:52:b8:d8:41:5e:f6:17:be:b7:
                    b4:93:cb:9c:b5:2b:07:96:fe:f8:31:aa:5c:b8:ba:
                    6d:ae:9a:50:d2:a1:63:1d:01:de:6a:6d:cc:01:da:
                    10:1c:16:2d:e8:79:9a:95:eb:9d:a1:1f:e7:6c:a6:
                    42:bc:a7:4b:fe:9f:27:fd:e9:46:d3:64:67:8a:45:
                    47:58:d4:65:e9:69:08:1c:18:06:38:8f:0d:07:e1:
                    2a:d4:9e:47:30:87:c5:e3:39:49:b0:76:72:49:42:
                    18:d6:20:52:b3:c6:94:0e:00:cb:0e:60:07:1e:a3:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:87:20:1B:CA:80:F9:1E:BD:53:2A:96:5F:16:C1:79:7E:61:88:D1
            X509v3 Authority Key Identifier:
                keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:54:22:8f:25:07:2c:a4:ea:f7:c0:ba:89:d6:d7:80:b2:
         2e:34:f7:b7:1b:9d:85:c1:cb:42:75:c2:2c:4c:d3:0f:0d:65:
         c7:a1:73:c1:38:9b:24:4a:37:0c:35:be:90:6d:9b:bd:93:bf:
         c8:d8:eb:e9:14:8f:bc:0d:ad:c0:7c:28:99:7e:e4:c7:56:ff:
         b5:3c:62:ca:04:25:32:97:ad:0c:1a:86:d5:eb:18:82:50:cc:
         61:08:84:66:c5:34:dc:b5:82:ca:ad:76:de:34:ec:0a:25:a1:
         36:a6:d4:ff:8b:6b:d3:dc:97:fc:b6:37:0e:56:f4:a2:4a:42:
         ad:99:b5:e7:bc:1f:7b:c0:f1:bd:d8:4a:e3:fc:6b:01:cc:f2:
         4b:49:45:50:5a:42:61:48:3d:2b:ae:99:74:d8:c6:23:2d:54:
         e1:2d:d8:aa:7e:94:67:76:44:ee:49:df:10:6b:22:88:23:a1:
         f3:be:5c:8b:8e:33:3a:20:41:ae:d5:fb:0c:6f:96:78:dc:2d:
         e5:37:12:de:93:c5:19:75:ab:40:5d:d7:82:b4:2d:17:21:d6:
         46:56:15:6c:b0:9c:15:9f:45:f8:f9:3d:20:78:4d:07:75:2e:
         ad:b7:ac:77:89:f3:eb:85:90:0f:91:6c:ac:87:0f:d2:8a:c1:
         32:fd:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:32:28 2025 by rpki-client