Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          u8rwq6nafSGqkKuscmlPE7/Plcjvv0UaofpHFQU+CQQ=
Subject key identifier:   10:C2:52:58:0A:10:C4:FE:34:EC:46:76:A2:10:72:CB:9C:F9:5D:01
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0AF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0AE7
Signing time:             Fri 30 May 2025 19:36:16 +0000
Manifest this update:     Fri 30 May 2025 19:36:15 +0000
Manifest next update:     Fri 06 Jun 2025 19:36:15 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: sF8vhv0NAUm69WSI1BZ8Ruk6YLy1KdvbvA8SnkET6E8=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: r9qAOJLFlfPr/FG83X+BXgaWnTUjc3HThRn1PkvKOaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2806 (0xaf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: May 30 19:36:15 2025 GMT
            Not After : Jun  6 19:36:15 2025 GMT
        Subject: CN=683a08b0-b7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:b0:33:c8:87:31:7a:9c:c8:18:cc:e7:3a:
                    17:ab:4c:02:5f:9a:dc:4a:27:ed:58:6c:0f:84:ee:
                    d9:d7:d0:b2:c7:b4:fd:bb:d3:9a:f3:52:d4:ba:9d:
                    82:21:9f:0a:c1:f5:54:70:29:73:94:70:0f:9a:d8:
                    4f:55:2a:fa:37:75:81:32:f5:61:ca:95:de:f8:18:
                    8d:19:78:3d:8b:1b:57:65:73:bb:33:b1:25:b3:e5:
                    68:22:02:56:e1:59:b3:99:23:f8:af:b8:27:19:eb:
                    2b:cd:89:59:74:ad:22:be:3b:25:99:ae:f9:8a:7d:
                    86:1e:1e:07:8e:1a:49:dd:81:1c:88:27:08:8f:f5:
                    e6:51:f3:34:7f:8e:6e:ee:ed:3a:de:a6:4c:8b:ed:
                    ef:8d:5c:ee:77:01:8b:60:bc:6d:45:41:72:5f:1a:
                    4e:b1:b5:01:cc:25:11:81:cd:73:09:7a:9a:d6:45:
                    3d:f7:a2:3b:16:ce:ac:a1:64:c8:bb:63:bd:fb:88:
                    b5:d1:ce:c6:0c:f0:ed:cd:00:33:aa:03:d7:3b:92:
                    a3:e6:cf:d1:82:13:05:cd:81:98:ea:d8:38:60:74:
                    46:bb:2d:38:b6:9b:27:bb:7f:a1:5d:ba:a3:54:0f:
                    cb:3e:fb:72:c1:a7:bb:df:85:0b:7f:d6:1b:61:d2:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C2:52:58:0A:10:C4:FE:34:EC:46:76:A2:10:72:CB:9C:F9:5D:01
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:f4:06:d7:74:73:97:06:cb:92:92:48:96:fc:55:a4:ad:
         6e:ca:ca:46:e9:ba:13:10:4f:ea:3b:ec:ad:11:f9:cf:8d:f9:
         73:7f:f7:bf:96:b4:18:f2:eb:d4:d6:a3:ba:5d:c6:9e:35:61:
         35:26:dc:0c:99:f2:89:19:fa:af:e1:12:5b:64:99:f8:db:4d:
         b0:ff:ab:5c:c3:84:26:f8:a7:6f:bd:85:07:08:d1:ff:13:d2:
         26:c0:13:10:38:25:49:74:41:2c:16:84:d3:dd:9f:7c:77:17:
         8f:14:71:46:96:e4:82:43:42:a2:33:4e:28:98:5c:0d:e4:37:
         f1:25:56:63:e2:bf:2b:92:39:fa:65:da:f5:3e:ea:11:1a:db:
         0c:26:52:ec:ce:78:4b:0c:eb:9f:b4:05:62:27:a1:ba:9a:0c:
         aa:a1:53:3f:87:7b:75:60:97:74:18:73:83:94:d8:21:06:b4:
         43:b2:b6:a9:a1:9f:8e:58:18:e8:91:bd:b4:fd:64:01:fd:1e:
         6b:30:31:1b:2c:6b:08:e1:51:67:0f:ad:b8:81:c3:8d:62:cf:
         c4:78:a8:d6:99:b0:f1:93:67:72:9b:53:6b:dc:eb:fb:a0:85:
         3a:eb:42:d2:fa:51:62:16:08:4c:ac:73:c4:51:59:21:fe:fb:
         ec:4d:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:44:09 2025 by rpki-client