Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
File:                     HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json)
Hash identifier:          uvwbVqucXqs6rel9jYMrctQ9zZArWDeAnh+8oQO2UNs=
Subject key identifier:   F9:A3:19:E7:EC:0B:60:E6:42:8D:F2:A4:EA:32:2D:DD:B0:9F:E4:D0
Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
Certificate issuer:       /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Certificate serial:       06EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
Manifest number:          06E4
Signing time:             Fri 28 Mar 2025 22:18:27 +0000
Manifest this update:     Fri 28 Mar 2025 22:18:26 +0000
Manifest next update:     Fri 04 Apr 2025 22:18:26 +0000
Files and hashes:         1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: 6gRz6f/DCWgZPOtkNsMQVkbpm0L3bmw2sn53EaJNV5c=)
                          2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: hsjXTWdh2kRzdeWF4Q+QGn60PDeZ8kmbCtOiIhRsRRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 22:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1257
        Validity
            Not Before: Mar 28 22:18:26 2025 GMT
            Not After : Apr  4 22:18:26 2025 GMT
        Subject: CN=67e72032-a213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:1d:19:1f:5e:c2:e3:9b:b9:fd:cb:7e:cf:
                    52:c4:6d:e1:73:4e:ab:d0:a3:ed:c8:1b:7a:bc:8b:
                    08:a5:c5:05:91:c9:89:7f:46:45:b4:79:98:ca:03:
                    0a:92:91:75:0f:2b:df:12:c0:3a:c8:25:c9:d7:4b:
                    70:84:b6:f6:0c:66:57:99:89:34:df:0e:f6:96:41:
                    e1:c1:a0:7a:70:0d:f1:df:54:2a:c3:cb:56:c0:48:
                    59:61:bc:3f:48:d7:5b:ca:45:c6:a7:ac:09:c4:ad:
                    22:ed:c2:88:76:db:b8:51:54:e6:24:87:e1:db:c9:
                    9b:4e:eb:20:7c:0e:3c:7b:ee:90:59:16:65:3e:fd:
                    8f:68:fa:02:76:ee:64:77:a3:ac:c7:70:13:f3:83:
                    e4:cb:e0:26:0b:30:88:f7:53:38:ae:f1:c4:7f:d1:
                    ae:74:47:32:73:fc:5d:bc:be:ab:34:5c:4a:83:d2:
                    8c:b2:74:ac:de:b1:cd:61:f3:37:60:80:e9:2a:d1:
                    b1:39:03:46:22:e2:b0:41:c0:e0:9b:f3:bd:2b:9e:
                    14:ac:b1:63:4d:de:95:bd:b5:ee:a8:c9:69:40:a7:
                    bd:08:c6:98:06:d3:35:4a:3a:69:b1:6e:c4:5c:a9:
                    f7:5e:e3:06:94:87:3a:4b:46:f0:be:81:ae:c7:26:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A3:19:E7:EC:0B:60:E6:42:8D:F2:A4:EA:32:2D:DD:B0:9F:E4:D0
            X509v3 Authority Key Identifier:
                keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c0:44:95:a8:55:f4:36:84:f4:ae:df:fd:04:9c:71:71:2e:
         ba:05:59:5f:fd:d9:bd:6d:b9:6a:f4:c6:30:83:33:ca:0f:82:
         68:93:79:cc:5a:82:47:1a:7a:46:97:2f:d9:6a:51:f3:6f:e8:
         25:98:3f:75:91:2c:26:20:93:ef:7a:90:af:b2:e6:c7:18:52:
         0f:69:a1:6e:2b:f3:da:63:44:4e:c8:2b:71:08:34:ff:2e:8f:
         03:5e:2f:fb:04:7f:38:a9:d1:99:87:11:5f:0f:a7:c2:c2:43:
         b7:41:f0:e9:19:0c:7f:d6:df:fa:01:08:70:da:3e:17:16:64:
         1d:e4:60:a8:7f:7c:a3:4a:ce:dd:d2:1c:34:dd:c4:7c:93:cd:
         f6:29:c1:c5:f2:da:6f:06:84:4f:85:f9:42:86:bd:4a:7b:06:
         cc:7a:47:f1:1a:ba:fc:cf:18:fe:09:06:a8:d1:05:13:c0:ff:
         ff:d2:e5:c5:b5:d7:9c:b5:8b:0e:f8:49:6e:09:96:9c:05:a2:
         bf:3d:11:a8:56:13:d3:4d:e7:0f:03:4e:40:e0:dc:e1:4c:38:
         cd:fc:50:b6:8d:2e:e9:fb:97:e2:fe:06:97:83:2f:01:85:2b:
         b9:70:ad:1b:b3:6c:97:f8:98:3c:1e:ca:e1:a2:aa:80:56:7a:
         bc:45:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:55 2025 by rpki-client