Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File:                     Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier:          /w53TPN3saR0maZ0mWtBkrs95JBgqMdprn55UnbzUec=
Subject key identifier:   21:31:E4:61:D6:F3:8B:B3:AF:68:1D:27:2A:E8:AB:92:C9:B1:25:E2
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       06C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number:          06A1
Signing time:             Fri 30 May 2025 22:27:31 +0000
Manifest this update:     Fri 30 May 2025 22:27:31 +0000
Manifest next update:     Fri 06 Jun 2025 22:27:31 +0000
Files and hashes:         1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: PPJs7vZyiFWZrIdqzyiSBwQUduQs9wW9CcAkhdP1pr0=)
                          2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: u+ofbKLYcAYXay4QDo5J92308RfIUZYffrakAkc1/w0=)
                          3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: 00yFzXA+JQ5htpGD8ADiNSIhDTumFOoTTNXL9w2q2PM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: May 30 22:27:31 2025 GMT
            Not After : Jun  6 22:27:31 2025 GMT
        Subject: CN=683a30d3-72d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:43:1c:f8:b0:00:ef:9d:f0:f4:e3:02:e0:
                    e1:b5:fe:16:0b:ae:2e:3a:c0:82:50:2f:bf:8d:01:
                    5e:42:64:29:ce:2b:f9:f1:8b:62:29:53:4d:be:bf:
                    1e:29:78:85:62:1c:e5:7e:68:a8:56:03:35:0e:6d:
                    55:3c:35:4a:25:9e:db:e2:b8:97:d0:da:e9:5f:13:
                    74:0c:cf:90:a3:f2:7f:3c:74:90:86:f7:8f:45:d0:
                    8f:be:7b:06:84:5b:9a:ef:33:02:57:3d:d5:43:6e:
                    c4:89:65:db:28:36:d8:da:dd:8d:60:82:a7:c0:bb:
                    02:37:eb:f3:fb:35:73:a7:b8:85:8f:08:f0:5f:e8:
                    80:bb:a1:b7:5e:49:80:be:a1:6f:90:f0:6b:78:24:
                    58:1c:1e:32:9b:f5:18:1c:c0:47:28:5a:f7:fc:7a:
                    ad:f3:13:d9:38:18:6d:4b:fc:b0:eb:e8:ba:2e:85:
                    7b:fd:3f:34:9f:35:59:4e:41:c0:19:19:7c:5c:e1:
                    f9:f1:0e:7a:07:61:5c:72:c2:c0:5f:d3:42:cb:87:
                    66:62:47:7f:8a:31:ad:fb:af:81:8e:50:1b:e5:86:
                    c7:38:17:7d:ee:02:5e:91:6f:9b:bd:a6:db:02:27:
                    6f:38:f8:73:63:f0:ae:1b:45:aa:12:03:a9:34:ce:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:31:E4:61:D6:F3:8B:B3:AF:68:1D:27:2A:E8:AB:92:C9:B1:25:E2
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:69:5b:a4:11:fd:2d:5f:5b:36:2f:29:b7:b2:a2:25:14:a7:
         12:6b:1d:b0:2b:7d:51:a0:05:3a:6e:b1:ab:86:c5:c7:47:af:
         a2:62:b0:22:6b:4b:7e:1f:0f:b9:28:d2:d3:0e:a6:89:b4:8a:
         c3:19:91:88:50:23:b0:11:31:9b:7a:5e:f7:7f:0b:a6:e9:d8:
         68:87:da:07:12:95:2c:94:a5:62:08:4e:da:7d:84:c7:d1:52:
         a2:c1:64:29:8e:ce:65:06:ea:43:07:b3:42:dc:5e:cf:48:1c:
         1e:87:ec:e5:7f:0b:46:d4:b7:ef:00:54:bb:39:d9:69:9a:f0:
         16:7a:3a:67:53:f9:22:e9:fb:9e:00:21:fa:73:b6:5d:7c:75:
         b6:ec:06:82:23:60:05:87:49:b9:e5:52:4c:30:08:8d:0d:e4:
         bd:bb:4a:29:c4:d4:42:e5:52:7d:3d:5e:aa:08:95:ca:eb:4c:
         05:ed:c8:b7:84:1d:c8:16:c6:70:a4:1c:d5:5d:f3:4d:6b:b4:
         15:09:76:d0:e7:53:cb:fc:b1:dc:bf:de:78:31:15:8d:ad:f3:
         f4:74:76:c6:17:8e:10:a4:56:8d:d8:a9:b8:8c:89:64:ed:1b:
         02:7c:56:5c:41:ea:25:b2:0e:82:5d:3e:8e:c5:d7:db:91:a4:
         1a:84:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:01:13 2025 by rpki-client