Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
File:                     r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json)
Hash identifier:          k/quqJXxu+L746QocLIRRnpn95ej0BdxYUa+BgkJ3Ns=
Subject key identifier:   1B:E5:F8:09:E1:74:E5:B5:D2:21:99:EA:23:11:BD:6F:41:62:B0:29
Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
Certificate issuer:       /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
Manifest number:          01B1
Signing time:             Sat 19 Jul 2025 03:26:28 +0000
Manifest this update:     Sat 19 Jul 2025 03:26:27 +0000
Manifest next update:     Sat 26 Jul 2025 03:26:27 +0000
Files and hashes:         1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: kHBRAICr/XkDvqGGbmm40C62g4LqTLM+wbtcrWaXDkg=)
                          2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=)
                          3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
                          rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
        Validity
            Not Before: Jul 19 03:26:27 2025 GMT
            Not After : Jul 26 03:26:27 2025 GMT
        Subject: CN=687b1063-240f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:8e:a2:fc:95:0c:42:98:7c:a6:cc:2a:c9:
                    67:6a:83:1b:32:19:ba:ca:a0:75:e1:c8:64:4d:4c:
                    13:b5:6a:ca:81:82:f4:aa:89:1c:fc:2a:f3:29:a0:
                    83:c1:bf:fc:30:a8:3b:dd:b0:50:db:71:9d:b4:1f:
                    b8:5b:50:5b:92:45:80:be:2d:9a:30:07:67:65:53:
                    88:d4:59:de:0f:b7:2f:be:6a:17:76:1c:b2:5d:8d:
                    13:8b:a4:42:ff:52:a7:20:f7:2c:de:45:96:22:21:
                    d6:22:e7:4f:f4:fb:eb:7d:94:9a:1b:7a:f3:41:03:
                    db:33:bc:d6:ba:13:53:7f:6c:9f:56:1a:e6:27:e9:
                    5c:32:f7:2c:69:1b:17:41:ce:8d:8a:42:7f:57:2e:
                    58:bb:cb:8c:d2:b5:e9:35:28:e2:cb:65:e8:85:ce:
                    b0:d0:b3:66:0e:25:4f:06:06:c0:e4:bc:76:39:cf:
                    d6:42:03:d1:cb:20:3e:8f:ec:f3:9d:be:84:1e:89:
                    77:83:93:7b:f6:b5:17:f7:e8:05:19:31:33:89:3e:
                    e7:28:72:57:32:26:23:0e:42:6b:b5:68:c9:29:a7:
                    df:a1:ec:c1:1d:39:cc:94:b4:c4:63:45:26:a4:b4:
                    9a:04:3d:45:dc:38:6c:1f:60:cb:8c:f6:39:1b:1f:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:F8:09:E1:74:E5:B5:D2:21:99:EA:23:11:BD:6F:41:62:B0:29
            X509v3 Authority Key Identifier:
                keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:96:a4:8e:5d:1b:27:2c:6a:dd:fc:db:85:cb:3f:be:a6:
         ff:55:6e:c0:93:41:cb:c0:51:9f:df:b7:8b:37:b6:f6:c9:34:
         ae:e1:3b:0a:c5:ae:2b:96:f4:c7:c1:4b:04:42:21:0f:0d:15:
         07:65:ea:45:eb:d8:d8:ee:af:67:de:df:12:ac:08:d7:53:7b:
         bb:ef:fc:a5:f7:1c:24:fa:f0:5c:c3:a0:d5:44:10:d8:5e:5f:
         14:41:d9:b8:fc:bf:17:bc:89:20:09:e4:68:39:ed:cb:22:c1:
         ea:4e:72:ca:33:ca:e4:ac:d4:f4:b4:49:ab:f8:7b:49:69:64:
         58:e4:08:a3:fa:f2:2c:ca:8c:5c:74:dc:2a:8a:ce:e8:35:b8:
         30:05:24:a5:d0:d6:9e:48:ab:a8:c7:0f:f1:b2:6f:d7:77:e2:
         f4:ef:cb:b9:95:63:4f:c9:6a:3f:ea:83:cb:00:fe:36:23:3d:
         c0:fc:13:d6:14:40:5e:fd:93:aa:a1:52:46:37:48:4b:48:92:
         0b:c1:22:b7:1a:a7:7f:10:1f:76:97:88:90:60:ad:8e:2f:b4:
         3a:18:dd:6c:73:73:89:18:b5:70:9b:1a:1f:2b:bf:c7:c1:d0:
         7c:fb:4c:41:b8:59:c1:08:e3:a9:cf:e3:ea:1d:1d:4d:7c:f9:
         1a:d7:bb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:30:10 2025 by rpki-client