Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
File:                     ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json)
Hash identifier:          wcpSWYvQh2mj9Gwte7P9/YOPNUhqic4ypnxghC/igCo=
Subject key identifier:   40:AB:7F:89:5A:0A:EB:4B:82:04:C2:8D:74:D6:25:76:A9:9C:C6:A8
Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9
Certificate issuer:       /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
Certificate serial:       1719
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
Manifest number:          170E
Signing time:             Thu 12 Jun 2025 16:35:46 +0000
Manifest this update:     Thu 12 Jun 2025 16:35:46 +0000
Manifest next update:     Thu 19 Jun 2025 16:35:46 +0000
Files and hashes:         1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: V9m6EUzy5Sy49ex6gxCy4gu0PdcM6eRJvSWpv1CLVAI=)
                          2: 89317668E87B11E785247983C4F9AE02.roa (hash: QoI3M9VOUs5JmUvtm4ggvS0vOfMTJHqMj+I41B3uqls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl
                          rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 16:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5913 (0x1719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
        Validity
            Not Before: Jun 12 16:35:46 2025 GMT
            Not After : Jun 19 16:35:46 2025 GMT
        Subject: CN=684b01e2-3cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:7c:b1:2d:7d:a7:6d:52:a9:07:28:a6:3c:
                    29:04:8d:55:84:3e:15:36:89:89:4a:91:df:55:b8:
                    3c:1b:8b:bd:02:86:b7:8e:cd:25:2e:8e:c8:e0:e3:
                    e5:80:6b:5b:42:71:6f:cb:af:24:34:0e:4b:7b:12:
                    3c:b8:93:08:b0:3e:39:a9:81:36:34:6a:56:7f:6a:
                    f6:27:a1:43:a6:49:2c:e5:6b:f9:30:fd:d1:1d:37:
                    f0:bc:20:d8:6b:a8:b6:e8:58:7c:4a:2e:17:ff:95:
                    65:e7:d5:81:43:80:eb:65:b0:8e:12:dc:40:c9:d3:
                    ef:4b:7e:48:5a:0c:34:5e:f0:e5:54:22:4d:2a:ad:
                    47:e5:0b:ce:54:7d:ff:dc:53:d2:56:8f:f7:09:d2:
                    ee:4d:d6:a2:63:4a:de:9f:56:92:bd:d4:07:d6:72:
                    5a:d4:98:3c:ad:ba:e9:c0:8d:9b:fb:cf:27:7d:f1:
                    6a:0c:a5:61:a7:bc:70:3f:6b:ac:90:83:57:f5:87:
                    97:f2:52:31:f6:d3:0e:03:bb:d8:29:7d:c2:dd:bf:
                    9a:5f:74:cf:1d:04:e1:19:0e:64:da:01:8e:92:44:
                    c9:c1:d1:b6:66:98:d0:81:78:8b:7f:1e:f2:cb:ae:
                    7a:31:7e:04:d2:f8:20:30:80:b2:62:60:3a:a8:e3:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:7F:89:5A:0A:EB:4B:82:04:C2:8D:74:D6:25:76:A9:9C:C6:A8
            X509v3 Authority Key Identifier:
                keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:53:f7:90:88:d6:6e:8e:ac:0c:a3:f0:61:71:f9:38:cc:d8:
         0d:d7:32:32:14:6f:45:0c:c1:19:77:b3:d8:c6:bf:26:63:33:
         65:b8:2f:1e:f0:38:74:f3:e0:ef:ab:69:83:7c:ab:6a:e5:a0:
         96:70:cb:4d:c5:65:a1:04:aa:98:c4:8a:1f:a2:51:64:0e:c6:
         40:ae:66:d7:de:5a:05:8d:40:c0:66:08:c4:13:32:d5:b0:1a:
         88:81:16:b3:f2:34:b9:95:21:e7:35:dd:7a:c2:79:15:ca:fe:
         56:79:b9:c0:90:48:3b:55:3b:90:80:5e:0c:65:34:e8:bc:ed:
         08:93:65:d1:38:4e:83:57:94:7f:57:48:ca:ba:61:b3:dc:88:
         ee:01:00:69:72:fc:7f:95:c8:4b:c4:27:f7:3c:68:8f:99:88:
         64:76:f3:44:23:a9:74:ea:31:82:00:43:bb:15:b7:6a:b4:f8:
         e5:7a:29:ea:e2:a1:07:63:cb:6c:17:2a:25:d0:a5:f1:87:06:
         e0:e5:e3:fe:c0:60:09:41:57:12:05:9d:3f:53:63:2a:b6:2b:
         be:f5:63:ac:ac:d2:ba:20:78:43:4f:7f:6e:89:88:c8:72:21:
         ca:00:05:13:c8:1b:b0:d1:9a:b1:8e:4d:7b:df:50:88:96:e0:
         a7:6d:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:57:02 2025 by rpki-client