Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
File:                     -1Hou5mkLX1_xMVwQZv3TIbTr9w.mft (raw, json)
Hash identifier:          jPbPgmId/2XLaQctzHgl8YhMPTSG2AQe2S5i2a9YarI=
Subject key identifier:   2C:55:0C:93:E8:E6:EC:DF:92:CA:9C:E3:E6:56:5B:E7:1D:E6:36:77
Authority key identifier: FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC
Certificate issuer:       /CN=A9192739/serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
Certificate serial:       061E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
Manifest number:          0617
Signing time:             Fri 30 May 2025 23:02:08 +0000
Manifest this update:     Fri 30 May 2025 23:02:08 +0000
Manifest next update:     Fri 06 Jun 2025 23:02:08 +0000
Files and hashes:         1: -1Hou5mkLX1_xMVwQZv3TIbTr9w.crl (hash: oUHWhnxYVk31e7D8CaOb8152wtg/mYtIkeaWNrxORxE=)
                          2: A2835E90A0B211EBA87FF23EC4F9AE02.roa (hash: VRjoLmafAxq4ektn9uauBKFkk07qZLl2+f3SufQLeJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl
                          rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192739, serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
        Validity
            Not Before: May 30 23:02:08 2025 GMT
            Not After : Jun  6 23:02:08 2025 GMT
        Subject: CN=683a38f0-3d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:09:bf:c2:75:b4:08:15:0c:94:f1:5c:b6:29:
                    fa:96:cd:84:86:39:07:4f:a0:76:2d:c5:38:d0:c8:
                    37:05:5e:e2:d5:0e:ca:a5:4d:87:ea:5f:40:d7:bd:
                    a4:4b:df:c1:b2:30:25:a7:92:fa:ae:7d:4e:ec:20:
                    af:96:d7:4a:81:b9:c4:78:f2:0d:31:a4:62:81:13:
                    80:f3:a4:10:73:7f:5f:d8:1f:8f:eb:6a:a2:fd:c1:
                    0c:cc:5a:86:de:bb:ed:11:89:94:c2:89:b4:ad:6a:
                    f4:32:4c:9d:24:ca:83:4e:28:5c:4f:d0:c1:b3:de:
                    01:31:b4:f3:d1:79:e1:ba:c7:30:9a:0f:c8:98:d5:
                    6d:56:18:48:14:89:1a:ec:8c:f0:ef:b4:24:7e:19:
                    a6:2c:32:88:e5:de:ef:25:ba:9a:c2:8a:3d:22:e1:
                    8c:21:78:45:85:5c:97:c7:ff:f0:20:33:c0:6f:5c:
                    46:1e:09:5f:a4:24:d3:47:65:18:06:12:8e:03:11:
                    9a:dc:f7:b3:de:9c:28:34:a7:26:b6:44:48:85:03:
                    eb:3b:49:f1:e3:6d:74:c6:0a:ed:30:0b:f0:90:ca:
                    81:98:46:bd:ba:23:fd:a1:e9:48:c3:6b:98:b3:6f:
                    f4:a6:fe:fd:83:ea:dd:5d:64:e3:61:b5:99:5a:41:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:0C:93:E8:E6:EC:DF:92:CA:9C:E3:E6:56:5B:E7:1D:E6:36:77
            X509v3 Authority Key Identifier:
                keyid:FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1d:ac:34:e1:64:b2:f4:5e:3f:87:f7:6a:14:90:af:d8:e8:
         6a:d5:23:d1:a5:06:ff:48:bd:d8:80:e6:91:c5:fa:99:84:28:
         e1:7e:c8:08:c9:c9:ba:8b:d4:0e:56:27:f2:90:2f:b4:5a:00:
         a1:79:bd:bf:10:b1:c2:cd:0b:78:65:cd:69:36:94:cd:99:ed:
         22:ec:8c:25:3d:45:6b:28:8f:5d:c4:06:cb:c4:b1:06:4c:a5:
         e4:b7:32:81:a9:5d:b7:98:9f:5f:60:3a:a7:5f:17:3a:ee:b8:
         34:01:db:59:c9:9c:33:fa:35:de:f2:60:df:86:a7:6c:6a:41:
         75:25:eb:32:df:07:b6:dd:7c:4e:a5:3b:64:37:54:47:d8:1b:
         c6:0e:60:22:39:e0:0e:87:48:3f:99:01:12:7d:bd:5e:47:39:
         82:3d:7a:e4:07:4a:7d:b1:f2:5d:08:c6:92:c6:32:fa:9b:ec:
         97:0a:a9:75:c6:08:42:cc:00:af:8c:ac:2c:d5:1d:6e:02:42:
         01:63:f7:69:02:67:5d:40:c2:fc:9b:a9:80:0c:65:18:b2:24:
         7a:1d:c9:d1:63:a9:23:53:4f:57:82:f6:06:29:59:0a:dd:4a:
         fb:1e:5e:88:9b:08:03:ec:69:37:41:ff:10:a6:98:7b:2b:2b:
         63:8f:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:31:51 2025 by rpki-client