Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File:                     hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier:          azDN3fewrMj4tnG+tVyyLuL01jHAwdrWCexgJWY5xVM=
Subject key identifier:   8F:55:1B:A9:F5:02:06:AA:D8:2A:68:62:C9:E4:10:5D:3E:38:8D:7A
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer:       /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number:          E0
Signing time:             Thu 21 Aug 2025 05:57:47 +0000
Manifest this update:     Thu 21 Aug 2025 05:57:46 +0000
Manifest next update:     Thu 28 Aug 2025 05:57:46 +0000
Files and hashes:         1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: /98Y/Nl+iN7MTgDhwnpslSiYvUOqUDw8XLNdl+PHRic=)
                          2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=)
                          3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
                          rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 05:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
        Validity
            Not Before: Aug 21 05:57:46 2025 GMT
            Not After : Aug 28 05:57:46 2025 GMT
        Subject: CN=68a6b55a-c425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:ce:b3:c9:92:44:e0:7c:57:bb:dc:1b:10:
                    02:a8:70:aa:aa:04:00:a8:ca:db:d9:c9:4a:2c:9b:
                    cc:3a:d3:bf:83:32:2e:6f:d0:b2:df:89:1e:cb:90:
                    0b:3f:a0:7e:86:c0:40:38:40:7a:fe:c0:bf:93:1d:
                    61:2e:6c:5c:a3:87:c4:e2:3c:d3:39:68:5d:d7:9d:
                    05:84:73:23:57:88:f8:b0:e6:e3:0c:63:24:9a:56:
                    4e:66:d5:78:1d:16:43:5d:6f:3c:ee:5f:fe:5c:39:
                    54:92:ed:2f:7e:e3:51:7e:79:0c:46:7b:53:e5:8c:
                    c5:ba:7c:1d:e0:61:0f:dd:f2:2d:8a:29:15:2e:47:
                    75:cd:dd:4e:f2:90:4e:7d:5b:34:cf:59:61:bc:01:
                    ce:df:ff:2e:03:ef:af:4d:91:85:89:58:9d:11:a3:
                    8c:0a:87:f7:f3:97:d6:ae:e4:86:ff:cd:13:30:2b:
                    6f:ff:f9:b1:29:59:db:a6:cb:c1:eb:11:85:9f:88:
                    08:92:f6:a3:93:cb:d4:4c:11:90:d4:21:05:23:2b:
                    81:fd:29:b2:bf:a4:e8:b4:7b:89:1f:01:0b:c5:49:
                    78:ca:7e:42:35:f6:d7:2f:fd:87:0e:32:93:56:60:
                    d2:93:bf:43:6d:36:dd:a1:ee:53:05:65:47:a3:f7:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:1B:A9:F5:02:06:AA:D8:2A:68:62:C9:E4:10:5D:3E:38:8D:7A
            X509v3 Authority Key Identifier:
                keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:93:34:4d:cd:c8:7e:29:4e:58:6f:7a:9d:8b:07:8d:37:1f:
         34:90:35:6a:50:4c:8c:86:d9:bd:18:b5:b6:bf:f8:94:90:22:
         b6:77:fd:57:10:22:f1:7f:c4:4b:70:6c:cf:7e:15:f8:18:2f:
         23:d8:eb:87:68:52:5e:fa:51:12:98:3a:41:2a:87:52:5f:7b:
         7b:0e:ef:84:46:35:0e:6e:22:17:bf:8c:93:d3:dc:61:fe:7d:
         de:b4:37:2d:d0:99:76:b2:46:37:a8:12:7d:95:a7:86:a6:e6:
         0d:1c:f8:59:a6:0e:cd:e1:f1:00:21:77:c2:3b:02:3e:22:6e:
         3e:22:4a:01:b3:74:6a:80:09:f9:7c:99:16:bf:c7:60:65:16:
         42:8d:95:77:4d:60:38:b2:14:7e:c3:79:c5:e1:1f:cd:ee:7d:
         e3:dc:d5:41:df:e4:34:da:da:29:94:a7:f8:a5:6d:64:a7:77:
         b5:b7:96:f9:3d:e5:30:8f:a7:63:66:fb:b2:58:97:d8:a2:aa:
         96:4f:5a:b1:e9:04:8a:b1:b1:8b:0b:0c:ac:3a:3a:85:84:c9:
         92:6a:77:c0:5f:6a:d2:4f:b7:cb:40:33:13:81:46:59:56:a2:
         c2:f8:0c:c1:1e:35:e1:ca:ca:6d:06:32:06:58:ef:f9:2d:96:
         8e:4b:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:22:29 2025 by rpki-client