Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
File:                     Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json)
Hash identifier:          ilB3bOBgVvbtXX0xo8CAr1oTBqQOZbHDcR6bF/6oymI=
Subject key identifier:   5B:05:F8:72:2A:00:1A:D5:39:ED:9E:2D:71:FE:F9:F5:7E:46:0C:4A
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Certificate issuer:       /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
Manifest number:          0111
Signing time:             Mon 21 Jul 2025 05:09:35 +0000
Manifest this update:     Mon 21 Jul 2025 05:09:34 +0000
Manifest next update:     Mon 28 Jul 2025 05:09:34 +0000
Files and hashes:         1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: n+BlWXi+QoMAswrM3hEQ7dIjw9nG7P+xJRikn6UOcFA=)
                          2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: ETljmMeyS5s0KQSm6+ufGeAzxHuJN+oLqoLZAlzH7iA=)
                          3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: zzdEKdXg7PtYmyul7ayVLXvjXFDgVqUVGxPOLSuwkDE=)
                          4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
                          rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
        Validity
            Not Before: Jul 21 05:09:34 2025 GMT
            Not After : Jul 28 05:09:34 2025 GMT
        Subject: CN=687dcb8e-468d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:38:d6:8a:46:d7:13:a7:e1:74:89:c2:12:a1:
                    89:48:a6:4f:b5:dd:b9:4d:54:c8:90:28:d8:95:7e:
                    8a:c8:dc:12:9d:48:17:06:a8:8f:1e:33:ec:b0:e2:
                    e1:9f:61:6c:71:28:3f:f9:81:f5:15:43:11:56:bc:
                    4d:7b:d0:3c:13:29:60:32:c0:c6:3c:26:ae:73:cf:
                    0b:cd:be:0e:4e:fc:69:c2:e3:a9:ab:0f:27:ef:58:
                    35:95:f3:b1:69:d4:75:7f:0c:d8:36:21:33:33:78:
                    26:3c:b8:9d:10:8f:cb:a2:72:fd:fc:38:fc:f0:3d:
                    ea:68:3c:00:9e:8d:f0:a1:2e:45:60:38:48:0e:7e:
                    0b:89:4e:9f:6e:3c:a3:27:f8:8a:9c:d5:d7:d1:bf:
                    0b:5e:78:ad:aa:d9:8d:ef:26:df:8b:ca:34:48:b9:
                    92:69:40:d8:b9:f0:62:4a:d1:ac:12:7a:01:8f:70:
                    2a:d9:14:fd:c9:fd:02:2d:0b:22:80:ab:34:74:70:
                    30:9d:07:b0:3c:09:91:ca:29:78:40:b2:08:e7:29:
                    1b:a2:e3:6a:87:70:cb:08:0f:8d:6f:ec:12:1f:1a:
                    1f:59:e3:82:0d:84:53:4e:a9:fe:eb:24:70:1f:c1:
                    55:2d:83:46:be:19:32:53:65:8c:f4:75:00:e7:59:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:F8:72:2A:00:1A:D5:39:ED:9E:2D:71:FE:F9:F5:7E:46:0C:4A
            X509v3 Authority Key Identifier:
                keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:25:6c:a3:4e:db:98:db:8e:9b:83:4a:94:27:5e:08:9d:85:
         52:ce:5a:5c:fa:42:e9:d5:76:19:3e:7e:a5:60:26:67:25:58:
         eb:82:ed:e5:a7:d9:12:25:32:04:b5:61:49:b6:e2:75:04:9b:
         db:4c:7a:3d:0e:30:b6:91:81:6d:e7:f4:f8:f6:67:a3:1a:97:
         24:28:a4:89:f0:f0:38:5a:d5:70:be:12:da:b1:40:1b:a3:60:
         0c:83:7e:8f:c9:28:2a:a9:02:fe:2d:66:23:5f:e4:23:97:fd:
         ba:14:99:c5:c4:54:48:64:af:48:e5:d5:5e:cc:15:c5:c5:2f:
         9d:76:9a:8e:92:ae:5a:76:0e:90:b1:3f:e7:66:e2:7e:e9:fa:
         7a:cc:92:09:a6:3e:40:91:fa:b1:a5:1b:46:4b:80:68:89:02:
         dc:3e:b4:6e:54:71:8b:27:e7:19:3d:a9:92:f9:a9:43:93:af:
         1a:d0:ef:c2:ab:4b:3f:50:1f:28:ed:9f:55:13:dd:4b:7f:5e:
         f9:6c:b1:9b:e0:c2:e2:15:7f:00:17:5c:79:60:f8:60:12:b6:
         c0:0e:2a:88:86:4c:ee:2d:23:d0:5e:32:b4:9e:9f:bd:45:4a:
         59:54:1d:e0:9f:1b:67:4f:97:42:e7:f2:d1:18:e1:c5:11:cd:
         84:7e:b4:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF
RkYzMTA2QzUwHhcNMjUwNzIxMDUwOTM0WhcNMjUwNzI4MDUwOTM0WjAYMRYwFAYD
VQQDEw02ODdkY2I4ZS00NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DjWikbXE6fhdInCEqGJSKZPtd25TVTIkCjYlX6KyNwSnUgXBqiPHjPssOLh
n2FscSg/+YH1FUMRVrxNe9A8EylgMsDGPCauc88Lzb4OTvxpwuOpqw8n71g1lfOx
adR1fwzYNiEzM3gmPLidEI/LonL9/Dj88D3qaDwAno3woS5FYDhIDn4LiU6fbjyj
J/iKnNXX0b8LXnitqtmN7ybfi8o0SLmSaUDYufBiStGsEnoBj3Aq2RT9yf0CLQsi
gKs0dHAwnQewPAmRyil4QLII5ykbouNqh3DLCA+Nb+wSHxofWeOCDYRTTqn+6yRw
H8FVLYNGvhkyU2WM9HUA51mA7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsF+HIq
ABrVOe2eLXH++fV+RgxKMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy
MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t
aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPJWyjTtuY246bg0qUJ14InYVSzlpc+kLp1XYZPn6lYCZnJVjrgu3l
p9kSJTIEtWFJtuJ1BJvbTHo9DjC2kYFt5/T49mejGpckKKSJ8PA4WtVwvhLasUAb
o2AMg36PySgqqQL+LWYjX+Qjl/26FJnFxFRIZK9I5dVezBXFxS+ddpqOkq5adg6Q
sT/nZuJ+6fp6zJIJpj5AkfqxpRtGS4BoiQLcPrRuVHGLJ+cZPamS+alDk68a0O/C
q0s/UB8o7Z9VE91Lf175bLGb4MLiFX8AF1x5YPhgErbADiqIhkzuLSPQXjK0np+9
RUpZVB3gnxtnT5dC5/LRGOHFEc2EfrQG
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:33:07 2025 by rpki-client