Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File:                     HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier:          0HCetr8MtpkBccKwpbVsJoahC66UMaZo6h28jR37RF0=
Subject key identifier:   B1:6B:34:C1:71:2F:9A:5E:B3:6C:7A:03:E9:65:39:B5:B3:A7:04:FA
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       08BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number:          08AF
Signing time:             Fri 18 Jul 2025 20:44:28 +0000
Manifest this update:     Fri 18 Jul 2025 20:44:27 +0000
Manifest next update:     Fri 25 Jul 2025 20:44:27 +0000
Files and hashes:         1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: dP+W5v4N/yxsUwzXoRjOE62PeO0QMAAX4/XZAwKKtMQ=)
                          2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: pJopSUouAomRS7bBbLiExTbU2TzCWgsGbKH4r8LjMrI=)
                          3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: NDjkgreHok48ic1Su9+HPGIeiSQ2Z7P+GcpTGnpZzHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Jul 18 20:44:27 2025 GMT
            Not After : Jul 25 20:44:27 2025 GMT
        Subject: CN=687ab22c-10d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e5:b6:d0:3f:95:91:4b:78:81:16:67:77:1d:
                    b0:27:02:85:9d:52:3d:18:86:2c:dc:38:1c:47:e5:
                    cf:91:ed:ac:fb:0d:60:b7:da:3f:25:b7:a4:77:d1:
                    f7:98:82:68:8c:e4:10:89:3a:72:b3:d3:04:7e:d8:
                    f6:cc:5b:75:ff:e2:a2:31:b6:36:57:aa:a9:d4:3e:
                    a7:28:39:da:b4:2f:db:78:4d:00:d1:03:01:20:63:
                    64:8b:61:03:e8:42:b1:9a:25:8f:3a:9f:a9:e5:3f:
                    7d:88:80:cb:6f:9b:35:e8:0d:93:66:2c:1f:41:80:
                    44:db:a2:01:ab:d1:8a:79:cd:34:85:d5:08:13:6b:
                    7f:37:24:36:d6:79:96:9c:f0:c2:b8:66:cc:04:96:
                    41:8c:37:5d:78:eb:37:3d:67:51:9d:a0:71:60:2f:
                    b8:d2:e2:e0:3a:20:95:32:6a:5a:cf:76:d2:71:2e:
                    4f:77:b4:72:da:a1:3d:69:12:17:40:c6:db:8f:c9:
                    22:a3:72:77:58:e0:e8:d9:cb:4b:5f:48:ff:dd:8d:
                    00:b6:83:c3:b2:7f:79:86:11:4e:34:b9:b4:cb:8e:
                    f0:a4:e5:98:0d:98:a5:1b:48:63:7b:b9:e9:e1:5e:
                    66:9a:67:9f:8c:46:4d:a6:fd:15:e8:c9:29:5a:fd:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:34:C1:71:2F:9A:5E:B3:6C:7A:03:E9:65:39:B5:B3:A7:04:FA
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:9b:97:b3:0a:5e:4e:29:93:e1:32:3e:98:4a:9b:5f:1c:
         c4:8f:09:fd:ea:be:4e:d3:52:be:85:0f:7c:9c:c6:82:1d:2c:
         01:25:e6:f5:b6:71:0c:e4:e9:45:b3:0e:98:87:3f:81:5b:ce:
         89:c8:b3:3a:eb:58:3b:c6:4e:f6:28:ce:c7:db:a4:1b:66:15:
         4c:90:d5:3f:ea:1a:fb:15:fe:11:67:13:61:56:ae:74:ed:4e:
         5e:3b:2f:7e:ef:fb:66:b6:67:23:3e:89:8a:19:e2:45:4b:9e:
         64:c5:f7:94:f4:a3:c4:bb:83:43:75:81:15:a0:b8:9f:69:e5:
         ad:54:2c:07:5c:68:b7:6e:a9:ef:7f:44:40:ea:f5:b8:2c:3f:
         85:d1:ec:c3:fe:43:90:b0:20:10:dd:d4:45:11:93:38:47:53:
         35:48:e5:1d:14:c3:cd:06:eb:3e:11:8a:76:3c:23:ad:d1:ef:
         df:4a:7d:e9:5d:38:d6:5f:99:ff:89:9d:e4:77:bc:7c:60:a9:
         77:da:e2:92:57:ad:f6:73:22:8f:6b:be:03:c2:2d:b0:e3:a9:
         dd:13:6d:04:da:41:57:8f:c5:c5:ab:ca:9d:c5:ab:3f:e4:a5:
         ac:5f:5e:dd:0a:af:a7:cf:1f:11:b8:9c:bf:f6:d9:3f:31:89:
         00:6e:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:15:46 2025 by rpki-client