Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          WNLTnbuzpPtcDKzxMhWz3FfQ0hREdejlYzvAwT1Gh7o=
Subject key identifier:   0F:04:01:10:25:4F:F9:87:2D:35:04:00:08:F3:88:31:70:B4:D5:7E
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       0967
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          094E
Signing time:             Fri 30 May 2025 21:00:55 +0000
Manifest this update:     Fri 30 May 2025 21:00:54 +0000
Manifest next update:     Fri 06 Jun 2025 21:00:54 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: BeS3DhrGLqArKPu/ueAORPrMYJ6Rlpjg8ykkvN915IE=)
                          2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: wci0Xfqzo59Y8jWuwf9OlzNgtFeflA2lDlymuLqWFus=)
                          3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: vQbCuWQwTDhbmdI3t8jm44MzJ+6k3uWJJXIQLGrnQxI=)
                          4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: dKpKNCrURAsBv07U8aimKZSBpZKUHuEP819khAXBuFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: May 30 21:00:54 2025 GMT
            Not After : Jun  6 21:00:54 2025 GMT
        Subject: CN=683a1c86-a0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:2e:96:23:be:cf:5c:9c:c6:27:f3:36:51:
                    df:1a:10:d1:25:53:33:f9:c1:3d:a9:cf:9b:9f:c4:
                    91:ff:f0:74:07:f6:50:13:b4:53:fc:ad:b3:7b:08:
                    5b:89:19:7f:a3:85:6c:f8:60:2a:dc:d8:91:ea:f5:
                    db:88:4e:61:12:09:13:db:cb:f0:77:d0:0a:dd:b8:
                    c4:9a:a2:ea:94:26:8f:1f:df:d9:d4:0f:7d:89:ae:
                    5e:00:e1:40:96:c9:38:cc:56:dc:54:05:29:08:6a:
                    a2:9c:19:71:43:67:c2:f0:f9:7b:67:64:85:a6:7f:
                    01:98:e0:84:44:2c:7d:a9:3c:3f:94:14:02:a6:81:
                    bc:1a:0e:50:d3:16:c8:fb:81:41:cf:8f:ed:90:9a:
                    fa:f9:18:13:59:ea:99:e4:b5:c2:12:1f:5a:92:15:
                    e0:d9:c0:3c:7c:a2:87:36:1e:0c:3a:a5:87:85:27:
                    80:ec:44:c9:e5:3b:2c:54:5f:41:9a:99:94:e3:c2:
                    f4:1d:11:f5:89:7d:40:c0:89:d0:4d:75:3f:99:11:
                    e3:55:0a:45:44:16:d0:8f:a0:dd:61:6e:45:4e:92:
                    54:0c:54:d9:aa:c9:1c:6f:68:9f:c7:16:6a:a6:06:
                    e3:40:59:62:b9:2e:c9:28:0b:b6:b6:6a:ea:d6:6c:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:04:01:10:25:4F:F9:87:2D:35:04:00:08:F3:88:31:70:B4:D5:7E
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:51:19:4e:58:7a:d7:fc:1e:60:5b:f9:9d:06:1f:30:37:79:
         a9:40:8d:ba:07:63:55:76:fc:7c:ec:51:13:7a:ee:9e:cc:fd:
         14:02:d4:fe:f9:24:4e:e7:c0:72:f4:cc:22:f6:4f:e4:de:e6:
         79:55:b5:de:ed:e2:5d:cb:6f:e3:5d:74:1d:25:a9:b8:45:a4:
         d0:fe:4a:e6:d6:2f:de:75:ad:79:26:7b:e1:49:4c:bb:0b:8e:
         47:b0:1e:75:9e:86:a0:a1:48:32:49:67:8d:39:9d:a2:77:a5:
         7a:f1:a9:0d:cf:e1:4a:a7:d8:bd:a2:3d:3e:d8:0e:4d:a6:f4:
         2e:23:9e:f4:43:c9:fa:2a:b5:57:c5:7b:a5:2e:3f:77:56:2b:
         5a:a2:6d:7d:0a:33:fd:5b:48:86:14:b6:18:c6:19:28:dc:4f:
         6f:c8:e9:7c:15:95:ec:cb:15:4b:cd:39:ea:1b:9f:dc:4e:4d:
         43:bb:ef:d7:72:0d:1e:3c:8f:d7:88:26:b3:e7:3b:ca:fe:8f:
         be:4a:30:3f:5e:18:55:5f:61:ac:cb:00:9d:71:43:94:d1:d4:
         c1:59:fc:09:94:c0:a3:fc:39:52:90:c5:51:50:61:ef:62:9d:
         65:08:ea:fc:e6:b4:1e:f0:5b:28:e3:f9:be:6d:93:d2:39:17:
         6f:3f:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:39:53 2025 by rpki-client