Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
File:                     HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json)
Hash identifier:          Uq5q20IQh+aOuMtFs3A1UY1Gnndirzn8HIP+uuAn4JE=
Subject key identifier:   D1:A2:6A:C7:C2:72:06:9F:2B:5B:37:D8:9A:6F:4F:9E:54:6B:E4:A4
Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
Certificate issuer:       /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
Manifest number:          34
Signing time:             Sat 19 Jul 2025 07:53:47 +0000
Manifest this update:     Sat 19 Jul 2025 07:53:47 +0000
Manifest next update:     Sat 26 Jul 2025 07:53:46 +0000
Files and hashes:         1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: l0yc+G9jEEm06GMKBr2cob1EQLXhf/olqXBFLxzrGTI=)
                          2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: nOUBr+CqAJHxGP5VlXuW/aGl6J+jLJf/ElMdL6qIZFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
                          rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
        Validity
            Not Before: Jul 19 07:53:47 2025 GMT
            Not After : Jul 26 07:53:46 2025 GMT
        Subject: CN=687b4f0b-0fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f1:a2:b5:61:04:7a:2a:fb:9b:7e:df:b3:34:
                    c9:77:b8:71:f0:bb:94:32:5b:5d:cb:f4:42:92:fc:
                    a9:95:e9:eb:f4:b7:92:08:ee:3b:e4:7d:c6:63:19:
                    3b:e3:30:cb:ae:55:ba:0c:3e:25:84:ff:b6:db:02:
                    2d:cb:fb:74:62:44:af:b4:04:04:28:b6:28:c4:bc:
                    c2:26:f7:cf:36:5f:98:c8:c7:96:51:7d:ec:76:99:
                    5f:f2:7b:4e:ff:6a:22:4c:6b:11:0b:f5:75:b0:37:
                    ae:c9:3c:fe:9e:bd:a3:d4:9a:df:5b:06:59:dd:39:
                    06:5f:f1:a0:4d:4c:cb:0c:21:3f:59:89:7b:3f:cd:
                    5c:1a:ab:41:29:36:94:ab:3a:5a:aa:ef:a1:66:0a:
                    78:11:0e:12:c2:3f:3f:f6:e4:e9:94:7d:79:35:a6:
                    33:58:93:67:7f:ac:0a:30:87:71:8f:67:7f:94:81:
                    c9:a7:da:44:2b:73:4c:0b:c3:64:f7:a2:35:44:63:
                    37:41:a2:b0:56:ab:f0:dc:4d:5a:b7:c2:cc:64:9c:
                    87:cd:d2:cb:fc:f9:71:f6:b2:0a:27:c5:72:f8:94:
                    65:a4:11:01:a9:be:89:85:5c:4e:21:62:53:35:70:
                    a9:45:6e:ef:78:00:06:cd:0f:1c:68:61:77:40:5a:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A2:6A:C7:C2:72:06:9F:2B:5B:37:D8:9A:6F:4F:9E:54:6B:E4:A4
            X509v3 Authority Key Identifier:
                keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:33:d6:d8:1e:c4:9d:7c:3e:87:e6:24:18:b1:82:e5:12:0f:
         24:df:63:7f:3d:a0:ae:9f:d6:64:5c:41:bb:82:d0:26:e2:84:
         43:c9:45:f8:22:73:9f:17:da:bb:23:81:9b:a3:8f:9f:04:64:
         b2:d5:f1:46:29:58:aa:fb:df:09:a3:ec:88:35:eb:af:5e:41:
         e0:9b:09:59:6c:1e:bf:46:69:38:d2:a3:03:51:aa:4c:e5:51:
         fd:58:6d:ce:5c:6c:1f:82:31:a9:71:c2:12:6c:d6:57:b8:93:
         44:aa:fa:e3:cf:ac:97:98:0e:69:a6:23:2e:cf:24:2c:c3:27:
         ab:32:48:0e:39:d6:06:6d:43:32:04:a4:05:e1:83:b3:e2:89:
         a7:65:cb:de:85:2e:a0:e7:7f:b7:6f:27:fc:ae:76:7b:00:ff:
         b9:fc:7c:09:22:e2:fe:6a:88:1d:f1:c0:ee:12:11:bf:bf:e4:
         be:ce:20:11:94:0a:fe:4d:a1:b3:c2:ad:11:5a:1c:2d:9e:e1:
         40:a6:43:c4:c3:45:fc:ea:2d:06:f4:fb:9b:bd:d3:9c:f5:6d:
         78:7d:aa:bd:5e:7e:ea:06:ee:6c:6c:ef:aa:d1:14:e1:07:8e:
         64:bd:48:a2:a5:e4:4a:44:cf:1b:8f:64:1f:a7:cf:07:9c:17:
         a0:9b:0b:72
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
RDA3RTExMC8GA1UEBRMoMUUwNzkxRUJERDBDOTRDMzU2QkEzNzNEN0UwRjAxNjEw
M0Q0MEI5MjAeFw0yNTA3MTkwNzUzNDdaFw0yNTA3MjYwNzUzNDZaMBgxFjAUBgNV
BAMTDTY4N2I0ZjBiLTBmYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDh8aK1YQR6Kvubft+zNMl3uHHwu5QyW13L9EKS/KmV6ev0t5II7jvkfcZjGTvj
MMuuVboMPiWE/7bbAi3L+3RiRK+0BAQotijEvMIm9882X5jIx5ZRfex2mV/ye07/
aiJMaxEL9XWwN67JPP6evaPUmt9bBlndOQZf8aBNTMsMIT9ZiXs/zVwaq0EpNpSr
Olqq76FmCngRDhLCPz/25OmUfXk1pjNYk2d/rAowh3GPZ3+Ugcmn2kQrc0wLw2T3
ojVEYzdBorBWq/DcTVq3wsxknIfN0sv8+XH2sgonxXL4lGWkEQGpvomFXE4hYlM1
cKlFbu94AAbNDxxoYXdAWo13AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0aJqx8Jy
Bp8rWzfYmm9PnlRr5KQwHwYDVR0jBBgwFoAUHgeR690MlMNWujc9fg8BYQPUC5Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMDdFL0UwMjNGMjFFMTUw
NzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1OV3VqYzlmZzhCWVFQVUM1
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSGdlUjY5ME1sTU5XdWpjOWZnOEJZUVBVQzVJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE
MDdFL0UwMjNGMjFFMTUwNzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1O
V3VqYzlmZzhCWVFQVUM1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMgz1tgexJ18PofmJBixguUSDyTfY389oK6f1mRcQbuC0CbihEPJRfgi
c58X2rsjgZujj58EZLLV8UYpWKr73wmj7Ig1669eQeCbCVlsHr9GaTjSowNRqkzl
Uf1Ybc5cbB+CMalxwhJs1le4k0Sq+uPPrJeYDmmmIy7PJCzDJ6sySA451gZtQzIE
pAXhg7Piiadly96FLqDnf7dvJ/yudnsA/7n8fAki4v5qiB3xwO4SEb+/5L7OIBGU
Cv5NobPCrRFaHC2e4UCmQ8TDRfzqLQb0+5u905z1bXh9qr1efuoG7mxs76rRFOEH
jmS9SKKl5EpEzxuPZB+nzwecF6CbC3I=
-----END CERTIFICATE-----
Generated at Sun Jul 20 02:27:11 2025 by rpki-client