Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          IYwnksnZvt0ujrcDYP97EoZL6r0B1l94i6owcl/A/Bw=
Subject key identifier:   5C:60:6F:32:4A:31:1E:BF:4C:F3:7F:2A:25:67:03:F4:EE:8B:60:57
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0B12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0B02
Signing time:             Fri 18 Jul 2025 19:35:09 +0000
Manifest this update:     Fri 18 Jul 2025 19:35:08 +0000
Manifest next update:     Fri 25 Jul 2025 19:35:08 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: stLo1XnSgeHLcrEZt4MxZzxVMD7KUUZFz3+QQDuVTa0=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: s5FxAXvHyHM95JkI0bpkB+0cESUkZdTctd6oGAI/wW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2834 (0xb12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Jul 18 19:35:08 2025 GMT
            Not After : Jul 25 19:35:08 2025 GMT
        Subject: CN=687aa1ed-befc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:77:41:0f:2d:be:b6:29:51:62:d5:6d:46:b4:
                    bd:4d:4b:ba:5b:1f:e8:cb:1e:b0:26:be:3f:92:8c:
                    72:4e:80:c7:a6:48:05:dd:f2:82:f9:03:d4:43:f2:
                    61:05:f0:9c:92:4c:c0:7f:96:28:9d:e2:46:34:39:
                    c9:90:4a:81:20:56:29:20:a7:11:b8:fd:83:c6:c5:
                    a5:d2:0b:57:6a:66:52:3a:4d:79:ef:f2:40:5c:8c:
                    e1:f8:ad:ff:87:fc:5c:b5:1f:e9:06:bc:73:51:cb:
                    2c:ca:d5:74:6c:03:9c:f8:da:6e:24:42:ab:73:72:
                    27:c8:3f:05:8d:c7:9f:44:4f:8e:1a:aa:40:87:ea:
                    20:dc:97:48:a1:37:e8:c6:46:ce:45:13:21:cf:da:
                    c3:ee:42:c0:18:79:6b:87:47:9e:36:3e:e5:cb:a4:
                    02:88:cd:bc:e4:a6:48:34:00:76:df:80:9c:ac:1d:
                    71:be:fe:6e:58:8a:33:4b:3d:70:f8:d4:04:17:a2:
                    df:6f:8f:52:e2:12:b2:b7:29:cc:e0:b7:11:bc:81:
                    9b:ad:02:f9:ff:80:2b:51:16:54:8a:79:2d:cb:a8:
                    2c:84:10:9b:8f:56:6d:ff:c4:72:c9:97:c0:a9:fe:
                    4c:65:a4:a2:56:a7:ea:68:13:ea:73:c8:b2:2c:83:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:60:6F:32:4A:31:1E:BF:4C:F3:7F:2A:25:67:03:F4:EE:8B:60:57
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b7:d3:da:32:09:5a:fb:7b:65:ed:b6:62:c4:8a:d3:b5:5c:
         18:0c:4d:af:89:03:b0:98:fe:49:03:9f:fd:69:87:2d:dc:3e:
         56:3b:4d:84:cb:f7:c9:6a:a6:83:b2:38:f4:ce:fa:a5:f2:0a:
         8b:38:68:29:81:a7:76:5e:d9:0d:37:29:f5:55:71:ae:30:a6:
         80:7a:b3:c7:ae:79:e8:e5:35:ad:7d:6d:73:af:7c:83:e6:8d:
         0c:58:15:94:c5:4c:f2:3d:c1:e4:86:d6:10:83:c5:eb:14:5b:
         11:2a:77:3b:ce:5d:eb:7d:2a:57:03:c0:c1:90:f5:31:84:50:
         97:70:50:00:ba:9e:e0:50:ae:3e:87:f7:2d:90:34:ec:4e:87:
         4c:d9:f7:81:c0:95:84:6f:a8:10:6c:1c:ee:d8:bf:e6:47:90:
         6d:32:98:26:57:e3:c3:02:43:c5:bd:5e:a9:14:c3:16:5f:99:
         0d:9f:ef:06:38:82:10:2d:b5:8c:26:aa:21:01:01:22:c7:ec:
         69:49:18:dc:f7:17:f0:67:8c:a1:21:27:79:54:44:c4:44:7b:
         8a:b9:52:41:e9:ce:9d:84:82:08:3b:49:6b:60:33:0e:cb:cf:
         0b:f3:1e:1f:0c:f2:51:a5:51:56:ce:55:08:0c:92:50:b5:16:
         c6:f9:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:59:20 2025 by rpki-client