Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
File:                     hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json)
Hash identifier:          JLSuMJC+97p8Im8Qc8uaD5LZLBq09eALw6jfMHY4+8M=
Subject key identifier:   78:37:6F:95:0E:80:AB:32:03:4D:A9:3E:6C:95:94:48:6E:2E:B6:E4
Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
Certificate issuer:       /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Certificate serial:       0F92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
Manifest number:          0F7E
Signing time:             Fri 30 May 2025 17:44:36 +0000
Manifest this update:     Fri 30 May 2025 17:44:36 +0000
Manifest next update:     Fri 06 Jun 2025 17:44:36 +0000
Files and hashes:         1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: XEi08RxPqQxgWGci76To4Z9XezXQi6uqggzq0TjAobc=)
                          2: 0DC698EAAEF011E99D5EFB71C4F9AE02.roa (hash: Gd1MGVjBlHDrAPvjMKgg4lOzvec6N9agUffub5BmpEc=)
                          3: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: VgSqSz98AwrxUV81np8oJVgRErJmYI+BzJGwTzFUnSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl
                          rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3986 (0xf92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
        Validity
            Not Before: May 30 17:44:36 2025 GMT
            Not After : Jun  6 17:44:36 2025 GMT
        Subject: CN=6839ee84-7210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:c2:9d:6f:52:4b:1c:5b:7e:84:36:5f:6a:
                    86:51:a5:bd:76:3e:89:a3:4d:7c:c0:4c:59:72:48:
                    3a:5b:1b:01:89:58:85:61:d8:85:e3:c8:5c:6a:d2:
                    3e:61:f8:9d:36:21:f8:1c:b9:8c:5f:4b:4e:35:d0:
                    cc:c5:bc:b5:ce:95:3b:05:94:2b:29:28:5e:b1:22:
                    26:a2:47:73:c4:63:4c:eb:6f:ea:d5:55:7c:ee:74:
                    88:ca:8e:98:57:c1:0d:f1:03:de:2b:66:23:23:98:
                    0c:0e:ec:05:c2:9e:81:75:28:99:be:a2:76:1c:8a:
                    ed:fa:99:ad:dd:fa:dd:b8:00:3c:b2:84:22:72:55:
                    3c:4f:9c:4e:b0:70:e1:ec:fa:d7:39:aa:9d:58:83:
                    f1:94:9c:fe:0f:c0:41:c4:03:06:68:01:ab:43:cc:
                    e0:c1:74:e9:14:fa:2a:9c:04:19:fe:cc:a5:99:55:
                    9b:cd:21:7b:92:bc:16:e4:1a:14:58:b6:1c:d1:0d:
                    4c:90:84:6c:fc:22:65:0d:f7:84:0b:c1:b9:df:53:
                    eb:6c:7a:bc:e4:ec:6a:65:d8:fe:5b:35:df:07:14:
                    52:21:f0:e5:21:09:bd:18:6e:4f:1e:ee:ce:19:6b:
                    42:22:c7:26:af:cc:2c:56:bf:58:13:6d:31:c7:87:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:37:6F:95:0E:80:AB:32:03:4D:A9:3E:6C:95:94:48:6E:2E:B6:E4
            X509v3 Authority Key Identifier:
                keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:23:88:7e:a5:84:8b:96:16:58:b1:01:56:36:70:6d:ac:
         c0:08:ef:30:ec:e0:1b:ce:df:4f:ad:db:40:90:eb:cc:ca:4a:
         58:be:f2:0a:89:ef:d4:33:f6:95:6e:aa:05:27:08:11:f2:6d:
         29:7e:8e:ba:47:92:66:68:e1:e0:19:07:0c:e5:38:73:9d:69:
         f1:bc:4e:41:0b:7e:00:27:9e:fd:32:d6:56:49:af:a8:5b:cc:
         cd:08:07:f7:3f:c5:1e:a5:d8:d8:87:a8:c8:7d:48:85:43:32:
         26:13:0b:03:9a:35:89:7c:f6:ba:a9:03:fa:05:8d:18:6e:34:
         af:b0:70:b5:7a:3c:ef:db:45:9a:cf:75:fd:d0:f8:60:7d:67:
         9e:1a:c0:b3:9f:2c:64:65:da:8e:fe:2b:cf:e2:cd:5d:62:ac:
         0e:99:f0:31:43:92:ea:15:eb:7b:62:e4:1f:60:5c:73:3f:e0:
         45:d9:26:e5:36:48:d0:7d:66:c7:93:db:61:b7:a3:c7:ff:c9:
         40:d1:15:f5:0e:4b:2e:77:28:32:ce:43:99:73:6e:59:7e:23:
         46:c2:18:04:82:02:71:1d:b7:df:1f:86:0d:7f:f8:f0:ed:a3:
         e5:e6:dd:c3:19:cb:90:d9:86:6f:a0:f1:03:07:a2:74:c3:47:
         52:17:7f:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1
OEQ1NDg1NjUwHhcNMjUwNTMwMTc0NDM2WhcNMjUwNjA2MTc0NDM2WjAYMRYwFAYD
VQQDEw02ODM5ZWU4NC03MjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA01zCnW9SSxxbfoQ2X2qGUaW9dj6Jo018wExZckg6WxsBiViFYdiF48hcatI+
YfidNiH4HLmMX0tONdDMxby1zpU7BZQrKShesSImokdzxGNM62/q1VV87nSIyo6Y
V8EN8QPeK2YjI5gMDuwFwp6BdSiZvqJ2HIrt+pmt3frduAA8soQiclU8T5xOsHDh
7PrXOaqdWIPxlJz+D8BBxAMGaAGrQ8zgwXTpFPoqnAQZ/sylmVWbzSF7krwW5BoU
WLYc0Q1MkIRs/CJlDfeEC8G531PrbHq85OxqZdj+WzXfBxRSIfDlIQm9GG5PHu7O
GWtCIscmr8wsVr9YE20xx4cq0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg3b5UO
gKsyA02pPmyVlEhuLrbkMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0
MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QThCRS85MDE5RDEyMDY0MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZR
clpBSHhDQTJkbUpZMVVoV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBaYCOIfqWEi5YWWLEBVjZwbazACO8w7OAbzt9PrdtAkOvMykpYvvIK
ie/UM/aVbqoFJwgR8m0pfo66R5JmaOHgGQcM5ThznWnxvE5BC34AJ579MtZWSa+o
W8zNCAf3P8UepdjYh6jIfUiFQzImEwsDmjWJfPa6qQP6BY0YbjSvsHC1ejzv20Wa
z3X90PhgfWeeGsCznyxkZdqO/ivP4s1dYqwOmfAxQ5LqFet7YuQfYFxzP+BF2Sbl
NkjQfWbHk9tht6PH/8lA0RX1DksudygyzkOZc25ZfiNGwhgEggJxHbffH4YNf/jw
7aPl5t3DGcuQ2YZvoPEDB6J0w0dSF38L
-----END CERTIFICATE-----
Generated at Sat May 31 16:50:42 2025 by rpki-client