Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
File:                     H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json)
Hash identifier:          IewsOqoYlvAtj+CB/EKIyp6jOA0Q6/HIqwDyCNepQyw=
Subject key identifier:   F3:C2:B4:83:D8:D8:B9:7D:76:F0:63:B2:BB:81:E2:FD:AE:0E:93:B4
Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6
Certificate issuer:       /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
Certificate serial:       08B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
Manifest number:          08AB
Signing time:             Tue 10 Jun 2025 20:25:57 +0000
Manifest this update:     Tue 10 Jun 2025 20:25:57 +0000
Manifest next update:     Tue 17 Jun 2025 20:25:57 +0000
Files and hashes:         1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: 5zhv5nvsoC0DmtufnOJLOgDDOLZRdFjVnxgSjYbYonE=)
                          2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 20:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
        Validity
            Not Before: Jun 10 20:25:57 2025 GMT
            Not After : Jun 17 20:25:57 2025 GMT
        Subject: CN=684894d5-3a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:06:5b:b9:d7:35:5d:da:be:16:d3:2a:35:
                    ad:85:4a:b3:bf:d8:7e:53:ac:00:55:ec:a5:37:85:
                    a0:1a:a4:08:66:96:38:19:5b:e3:1f:9e:6f:76:39:
                    cc:96:c9:0f:1b:03:45:c6:8a:8e:16:57:f8:29:80:
                    54:57:64:b1:e8:d7:c8:81:ba:0c:1b:9e:aa:9f:a8:
                    23:c9:bc:93:5a:68:e6:db:db:94:53:b3:07:c5:28:
                    3d:29:f7:7e:2e:5a:da:1e:31:50:9d:f2:fa:c9:06:
                    5b:e2:30:8a:45:d5:6e:68:a1:ba:3b:a2:29:49:5e:
                    4a:3a:76:02:e2:6f:0c:34:d8:e7:be:6d:d9:39:c3:
                    fd:7d:d2:92:47:01:48:ff:0c:c1:81:fa:0f:6e:c3:
                    c0:9b:61:35:59:ff:ee:0a:49:95:28:49:59:5e:52:
                    9d:2a:b8:02:08:89:44:9e:cc:49:2d:bf:cc:83:82:
                    b7:f7:8a:c3:11:85:08:3e:8c:64:bd:7b:2f:c1:81:
                    75:a2:c6:47:53:ae:71:88:bb:bf:a2:7b:16:b9:b6:
                    8a:9d:e4:c2:00:f8:17:a5:37:a7:b8:69:00:bb:e1:
                    c7:eb:17:98:27:be:02:86:ac:71:62:62:4f:1c:6a:
                    27:6c:f8:1e:cc:88:d7:7a:68:c8:96:19:1f:bf:98:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C2:B4:83:D8:D8:B9:7D:76:F0:63:B2:BB:81:E2:FD:AE:0E:93:B4
            X509v3 Authority Key Identifier:
                keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:52:e8:eb:e6:a5:eb:d7:80:00:3d:c1:58:77:8f:05:68:e1:
         21:28:37:f8:5c:61:a3:7d:0a:a0:84:0f:61:66:4f:9d:55:46:
         6e:4b:91:f0:8f:5b:2b:92:59:fa:bc:da:a5:4f:4c:06:19:d1:
         c8:a6:34:9e:7b:78:26:0d:2f:82:2b:0e:d3:58:bb:d7:9a:c2:
         be:6c:c9:9b:92:71:c2:2c:fc:4e:88:70:fb:cc:76:47:23:5e:
         ab:d4:af:ca:36:6b:13:47:c0:3a:99:b3:36:fc:01:57:62:1e:
         36:c9:cb:21:89:99:6d:12:7b:bf:0f:a3:8b:70:d3:19:a2:d7:
         96:fd:0e:3a:b4:2f:75:fd:68:5f:0f:c9:2c:29:c6:e3:2e:f1:
         1a:72:4f:71:97:06:29:23:e4:e8:9b:fb:d5:0e:0b:0e:61:e4:
         e2:f6:fd:fa:66:d0:0a:f3:73:d1:b5:79:a0:00:35:10:b0:ad:
         dd:32:db:98:f7:f3:72:49:ab:15:07:02:2e:d9:64:9b:8b:0f:
         b1:54:0c:b7:b7:ae:41:a4:74:09:97:be:d7:0c:03:17:d1:3a:
         70:b6:2c:79:4d:3e:5e:3b:3a:6e:5a:bc:c3:c4:31:47:c8:dd:
         f9:c5:e6:17:1e:05:d4:ec:b2:89:82:fe:af:d5:0a:fd:cf:c9:
         25:52:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:00:38 2025 by rpki-client