Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File:                     mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier:          HjiUTgNs8JxOq9AxHbvnkDs7wzoW9DiT8TpaDIcVi2Y=
Subject key identifier:   A9:7A:A0:90:FF:06:51:95:26:D2:30:82:2D:CF:49:2A:35:A3:CE:73
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       06E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number:          06D7
Signing time:             Fri 30 May 2025 22:13:34 +0000
Manifest this update:     Fri 30 May 2025 22:13:34 +0000
Manifest next update:     Fri 06 Jun 2025 22:13:34 +0000
Files and hashes:         1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: /2l1gfQJjB/uEbvhm/y+0PWNFeH9umFaMKT29vucA9Y=)
                          2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=)
                          3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1765 (0x6e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: May 30 22:13:34 2025 GMT
            Not After : Jun  6 22:13:34 2025 GMT
        Subject: CN=683a2d8e-6128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:dd:5e:1b:3f:75:28:fc:56:0e:83:f2:05:
                    f1:e2:99:5a:ee:3e:6c:eb:41:65:8f:47:bf:09:da:
                    70:c0:cd:a5:09:5a:a1:e4:8b:09:f0:67:8a:26:f2:
                    4e:9d:f2:7b:8a:ad:25:a0:5a:74:d3:16:9d:ca:b6:
                    ad:4c:db:37:c6:f8:df:f7:8c:0a:bb:62:a2:48:e8:
                    f6:8b:10:59:2e:cc:05:d1:c4:b2:f5:5e:c4:5d:00:
                    2d:fb:6d:eb:ba:b2:b4:05:46:3d:25:12:17:40:67:
                    8f:3a:cc:4d:e3:39:5c:3d:e7:5b:2a:e5:6e:24:c0:
                    29:65:b3:5a:34:f9:4c:eb:97:74:63:23:51:7c:06:
                    7d:a1:c9:9c:c4:0e:d1:84:30:49:28:e2:c8:be:1c:
                    29:37:51:bb:e2:79:27:ab:97:e5:e9:20:64:5c:23:
                    c4:0e:8c:8b:37:6d:c7:b9:79:2d:a0:97:bc:0f:a6:
                    78:25:20:8e:55:9d:0a:27:2d:90:a9:88:6d:d6:b1:
                    88:e8:14:2f:21:86:c6:d3:a8:52:eb:82:e0:d1:fc:
                    4c:a0:1d:0d:4b:ab:e7:a1:d3:10:b7:22:15:68:f2:
                    fa:c8:bc:ef:fd:e6:b8:44:7b:92:71:ef:88:d8:8f:
                    55:ff:78:cb:00:1d:53:ec:76:f1:c4:2c:c4:eb:c9:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7A:A0:90:FF:06:51:95:26:D2:30:82:2D:CF:49:2A:35:A3:CE:73
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:12:ee:6c:4f:af:5c:e9:d8:a4:88:dd:ff:81:ef:58:76:f4:
         a5:de:86:fa:59:cd:2f:c2:f6:92:a5:94:af:64:bb:0e:b7:b6:
         5f:30:9a:06:e9:e7:89:45:2f:e6:3b:eb:e0:86:1f:4c:50:9b:
         ea:af:71:1a:2a:d5:fc:84:52:07:8c:2d:8b:48:0b:a7:eb:50:
         3e:02:16:c3:cd:90:e6:be:3c:58:8a:d7:9e:77:4a:14:df:10:
         08:cd:c7:ab:d5:d8:9b:8c:07:fa:d1:b4:f4:2d:a8:2c:e5:49:
         03:a0:c0:e4:42:cd:22:a6:dd:c9:fb:7a:75:e6:f1:8e:62:ee:
         f9:49:59:3b:70:e5:9d:98:b5:e5:d5:89:6b:74:69:85:77:c2:
         69:e7:25:48:15:81:8f:c4:75:60:b1:16:65:f2:7b:a6:15:df:
         a7:f4:10:11:f1:01:0a:c2:75:a4:2d:7a:1a:8e:2c:f0:f8:5d:
         c4:03:2d:ef:7a:bb:c7:89:d2:b4:c4:fe:41:8f:dc:71:bf:57:
         60:4e:6a:f3:d7:7d:d3:a1:e3:65:11:93:c9:71:4c:b0:cb:1b:
         2a:6e:bd:dd:93:00:bb:9b:c7:3d:c2:60:4c:60:fd:14:d9:75:
         56:79:c9:33:09:42:e7:56:7a:36:e2:84:10:d6:4a:1a:30:63:
         dd:14:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:18:46 2025 by rpki-client