Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
File:                     hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json)
Hash identifier:          HSCQJ0zyA8va2+Jadj++5rGOO7xVavw0G+aiFupql6Y=
Subject key identifier:   B9:90:F5:D0:CE:97:76:6D:33:89:50:A5:D4:D3:ED:08:36:C0:D4:CC
Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00
Certificate issuer:       /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
Manifest number:          013F
Signing time:             Mon 09 Jun 2025 03:26:50 +0000
Manifest this update:     Mon 09 Jun 2025 03:26:49 +0000
Manifest next update:     Mon 16 Jun 2025 03:26:49 +0000
Files and hashes:         1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: ES+uI2NMu3TvIHK7MB3Y0pLpRhQe9DMZquHmXVHpnfo=)
                          2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000
        Validity
            Not Before: Jun  9 03:26:49 2025 GMT
            Not After : Jun 16 03:26:49 2025 GMT
        Subject: CN=68465479-731e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:44:01:79:80:74:81:72:77:1a:bf:cc:ef:
                    28:ca:80:c1:ac:6f:a9:ff:b3:90:f6:19:2b:9c:5c:
                    7f:a2:6a:7c:3d:b6:0d:bb:95:f6:98:11:eb:b8:7c:
                    31:f1:9f:2c:c4:47:f6:24:5d:3b:c2:9f:44:87:ea:
                    e7:bf:90:8e:2e:01:be:82:37:2a:0c:cd:ae:09:ef:
                    95:02:f0:db:66:74:24:ce:29:da:eb:af:f8:2f:a0:
                    e9:98:7c:ef:63:5e:fb:23:84:8d:6c:b7:3b:59:2a:
                    ff:43:4b:72:d0:db:40:67:fd:30:e0:34:7a:94:c1:
                    94:e9:13:6b:a0:4e:73:1f:b8:17:58:fd:1e:e0:34:
                    58:37:3c:32:22:c5:75:47:32:b5:19:86:85:c8:bc:
                    50:37:b9:88:1a:f3:60:25:bc:62:98:b2:29:2a:c8:
                    8f:02:94:c0:e3:b5:ab:90:63:64:c8:c6:04:32:db:
                    55:ee:67:9d:45:9b:4a:33:05:d7:0e:20:c9:e9:c2:
                    f9:91:7d:89:38:b9:25:cd:5e:c0:aa:fa:40:81:3e:
                    e0:b7:cd:1a:14:79:76:c8:9f:6a:09:0a:8b:27:d8:
                    ab:f7:2d:4b:39:c5:2c:8f:39:b3:5d:e1:7f:35:04:
                    14:f8:04:46:87:90:7d:36:65:e6:26:7b:88:90:1c:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:90:F5:D0:CE:97:76:6D:33:89:50:A5:D4:D3:ED:08:36:C0:D4:CC
            X509v3 Authority Key Identifier:
                keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:0a:c2:62:30:c1:80:81:48:a3:4f:5e:2f:bd:73:9d:cf:
         63:53:c7:68:9e:5e:19:9e:ea:85:05:62:49:02:e3:ee:db:74:
         34:a5:88:81:1d:f1:a9:13:51:df:1e:74:7b:b5:0f:96:01:5d:
         8e:8e:76:e2:57:40:33:71:fa:f0:97:22:97:d6:66:b8:11:84:
         60:89:48:13:57:5d:6e:72:03:fc:55:4e:3f:a8:5d:05:22:e8:
         48:32:4e:a0:e8:e4:28:97:50:d1:a1:e1:08:47:d2:70:88:ee:
         43:fb:bb:c1:21:44:ff:d4:b8:61:1c:c9:2f:bb:08:69:02:b2:
         f3:94:74:20:bb:49:e9:53:06:c0:d4:b5:ff:03:de:e9:c5:56:
         cc:09:51:07:ab:a4:c0:1b:4f:de:54:70:e5:c5:71:91:4e:2b:
         e2:56:b7:fa:22:27:03:4f:ff:ae:cc:a8:07:be:2f:24:2d:60:
         4b:26:68:55:3f:13:a6:11:7b:de:61:76:8c:ef:1a:25:f6:fc:
         cc:01:af:b5:7c:9b:e7:37:d0:46:28:54:8f:f4:60:e4:7d:20:
         e6:bd:cc:47:48:4b:c9:61:8a:34:a2:b3:9e:a5:4a:d3:30:ca:
         d6:18:44:ce:82:f2:1a:94:41:76:38:b1:2d:85:c9:8d:ed:6b:
         da:4c:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:39:32 2025 by rpki-client