Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
File:                     H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json)
Hash identifier:          6yacewwAhO1aXBmIzxZuIx2eYseCdg+WCMhpaG4Z3oc=
Subject key identifier:   2C:51:FD:F6:9F:0D:65:78:19:87:C2:83:62:A0:0B:A2:84:68:65:84
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Certificate issuer:       /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial:       0521
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
Manifest number:          0515
Signing time:             Fri 18 Jul 2025 23:58:47 +0000
Manifest this update:     Fri 18 Jul 2025 23:58:46 +0000
Manifest next update:     Fri 25 Jul 2025 23:58:46 +0000
Files and hashes:         1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: QgEFKEaQ1aEvRN0QPba4ytHomGh4NSqljCSMdb/3Eh0=)
                          2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: sdwmDbTL9d6N7lKxS/YB/i6htv88Z1LDyZ9CwaUF42o=)
                          3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
                          rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 23:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
        Validity
            Not Before: Jul 18 23:58:46 2025 GMT
            Not After : Jul 25 23:58:46 2025 GMT
        Subject: CN=687adfb7-eadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:83:54:45:45:bc:79:7e:6b:f9:a1:38:aa:10:
                    dd:f4:96:5f:ca:83:a9:b2:35:e1:7a:7c:f2:14:74:
                    8b:90:50:c4:c5:22:21:bd:92:52:f4:11:7e:74:6a:
                    4c:10:50:a7:d5:af:ce:33:0e:df:45:85:d2:82:54:
                    a9:c6:69:94:92:e8:d1:06:d3:14:28:f7:3e:ee:1e:
                    d6:00:2f:e0:db:b3:55:5e:0f:7f:95:1b:d9:b4:68:
                    fd:40:44:6d:7b:b2:76:71:b8:ac:29:4f:76:d8:81:
                    29:69:9c:b9:c9:58:88:f9:f3:e6:6d:ca:f0:4b:44:
                    1e:a3:1a:51:29:f3:53:ce:84:1c:91:71:33:b3:3b:
                    e7:90:bb:e3:8f:5e:da:a0:59:79:57:5a:8b:95:8e:
                    bd:c0:86:93:76:af:ac:51:b1:3a:1e:56:8b:e8:ae:
                    c1:73:bf:f4:fd:8d:cb:62:d3:d5:41:eb:b7:b7:c7:
                    bf:fc:56:98:ad:a5:16:cb:82:15:ec:97:4b:d9:e3:
                    a4:5a:57:de:6a:3c:ca:e9:3f:e1:ea:63:d8:bf:ba:
                    a9:e0:c1:31:9d:bb:d9:1d:5e:20:d9:82:fb:cf:c2:
                    47:ad:ef:03:e4:28:4b:4b:fa:bc:80:8b:21:b3:6d:
                    3b:f5:aa:46:d6:f1:2e:82:d8:14:e6:d4:a6:cf:f7:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:51:FD:F6:9F:0D:65:78:19:87:C2:83:62:A0:0B:A2:84:68:65:84
            X509v3 Authority Key Identifier:
                keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:3b:a4:60:94:84:75:91:4f:65:78:40:e0:49:a4:56:d8:54:
         6f:0c:bd:a9:dc:33:09:a9:be:c1:fb:10:04:15:ff:21:c6:13:
         e3:5b:4b:7a:00:f4:b3:6a:00:d4:50:9c:bd:52:64:cd:bc:a8:
         f9:95:7e:f5:c0:16:92:79:9c:52:3a:5e:f0:76:a7:ad:ff:af:
         47:70:24:32:aa:09:9f:7c:51:60:d0:aa:20:49:19:74:19:bd:
         bc:e5:92:01:4b:4c:33:ba:de:a9:fc:5e:2e:d4:35:7d:67:f9:
         e7:5b:3e:75:b2:b5:12:da:5c:e4:7c:c8:57:3f:c2:6d:09:a4:
         06:86:1b:5c:f7:e2:86:78:fa:60:0e:eb:82:dc:ab:ec:67:02:
         5f:4f:7e:f9:a1:23:09:23:dd:f2:76:e6:4e:96:b9:ee:71:cf:
         19:32:9a:ce:03:49:e4:f6:e4:fe:dd:42:fd:4a:d1:81:5e:a8:
         07:65:40:70:95:53:32:92:52:5d:e2:44:fe:80:b8:a5:16:3a:
         65:43:43:11:e8:2a:e6:b4:5f:c3:56:2e:23:8f:ae:8c:0b:85:
         be:5c:2c:93:57:43:76:3c:61:4d:bf:64:75:ab:a5:61:e5:54:
         13:cd:73:8a:6f:5f:90:92:7d:0c:57:67:c4:da:35:3c:a5:13:
         03:e2:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:37:46 2025 by rpki-client