Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
File:                     1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json)
Hash identifier:          6m71qtqjXL+jXEZ78YNEq1Serc7nHk5VhxuQKlkhJjY=
Subject key identifier:   74:31:74:5A:A9:05:33:B3:0F:CA:4E:86:97:95:86:64:26:1E:7D:01
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Certificate issuer:       /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial:       0309
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
Manifest number:          0305
Signing time:             Mon 09 Jun 2025 00:48:41 +0000
Manifest this update:     Mon 09 Jun 2025 00:48:41 +0000
Manifest next update:     Mon 16 Jun 2025 00:48:41 +0000
Files and hashes:         1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: o+kam9ZmgAxSn0c74DY0rIlA+nK8dVCy81Abb1LqjfE=)
                          2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
                          rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 00:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
        Validity
            Not Before: Jun  9 00:48:41 2025 GMT
            Not After : Jun 16 00:48:41 2025 GMT
        Subject: CN=68462f69-e748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:f7:4f:32:35:dc:64:f2:f7:82:02:3c:95:
                    85:11:ec:97:5f:d6:df:49:0a:19:b3:ee:a9:82:ce:
                    e3:74:c9:1c:2c:7b:ea:f8:a3:67:6c:bc:39:19:f3:
                    f5:1c:90:25:cd:c4:63:9f:4d:2b:8f:b9:d6:b8:4e:
                    ca:9d:45:10:6b:02:b2:ce:8b:c7:da:b8:68:0a:5e:
                    12:5f:99:ea:da:51:1b:6e:d9:fe:bd:86:c6:c9:2e:
                    64:49:15:d3:b9:78:1d:b7:11:b6:40:59:7e:a4:23:
                    06:5f:33:22:59:f0:e6:bd:6f:be:a4:d7:4e:32:df:
                    78:e9:8e:6b:a5:95:9e:af:9a:61:ef:14:d9:6a:4b:
                    69:b3:9a:17:18:14:0a:a1:d0:f5:6e:59:9c:6e:6c:
                    89:8c:eb:b0:3c:24:1b:c0:d4:e8:ea:46:f2:48:70:
                    8d:aa:c2:1f:60:e2:f0:f0:fe:1b:4d:0a:db:62:67:
                    03:7f:a7:13:c5:cc:dc:e4:1a:04:ef:2c:d6:a5:bc:
                    d0:22:cc:b6:c3:2b:bc:3e:9e:0d:14:43:9c:1f:b3:
                    86:1e:72:4a:69:c7:99:83:b7:c0:5e:84:46:67:6e:
                    5c:0b:f1:b3:6d:46:7d:08:f3:b8:e4:3e:6b:8e:66:
                    5c:67:b2:3d:9a:11:82:b0:e5:4a:08:b9:01:89:f4:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:31:74:5A:A9:05:33:B3:0F:CA:4E:86:97:95:86:64:26:1E:7D:01
            X509v3 Authority Key Identifier:
                keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a3:bd:4f:28:03:98:60:24:f8:bc:79:f6:42:e3:6e:94:5f:
         22:08:52:57:7a:ee:2b:0e:5c:34:1a:0c:a9:01:c4:2b:45:9c:
         90:93:5a:5e:26:be:ca:84:29:12:3b:05:6e:ef:98:fb:9d:13:
         3d:cc:76:70:c1:c6:aa:83:fb:6a:ea:dd:e5:55:a8:18:b5:cd:
         0f:f0:c7:1f:6a:e0:5f:46:8a:b9:c8:59:49:b2:5d:3e:39:83:
         ab:66:6c:44:cc:d4:f5:e1:49:01:af:3e:d6:1a:5b:5f:a3:e8:
         71:53:c9:04:8b:27:77:11:50:8c:fa:62:b7:10:31:95:c6:e5:
         93:4a:a6:a2:94:73:19:9f:4f:cb:b2:c7:70:23:59:f3:d9:8a:
         ca:73:73:b7:62:a2:0f:36:26:d4:bb:a9:34:73:b3:b4:1c:ac:
         7e:a2:bc:5a:98:3c:5a:a0:e6:4b:35:4f:cc:48:b7:d9:9a:61:
         d8:d3:53:9b:96:41:56:32:82:94:d1:50:08:9f:cf:c9:be:98:
         cb:f8:ca:34:6e:ac:63:c7:28:44:78:96:d1:58:56:fc:b1:ae:
         68:c7:11:61:59:e3:70:62:c2:64:39:c1:fe:4b:b8:97:60:7a:
         0e:01:13:ff:f5:74:95:68:b6:e6:71:0b:c1:30:c7:f2:c5:48:
         93:ec:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:31:49 2025 by rpki-client