Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
File:                     6HvQXvddUFllr1CWfUKLtf_-HME.mft (raw, json)
Hash identifier:          x8A8PsOp33to21wPe0l4kh8rDxwWMzB6ztPHgel96fE=
Subject key identifier:   27:90:20:54:10:E6:91:C0:67:9A:A5:53:EB:70:22:12:AC:DB:C2:EA
Authority key identifier: E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1
Certificate issuer:       /CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
Certificate serial:       096E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
Manifest number:          0968
Signing time:             Mon 28 Apr 2025 20:37:26 +0000
Manifest this update:     Mon 28 Apr 2025 20:37:26 +0000
Manifest next update:     Mon 05 May 2025 20:37:26 +0000
Files and hashes:         1: 6HvQXvddUFllr1CWfUKLtf_-HME.crl (hash: 6etryZPP3pQk5h4QugOgwNuNBC06r4hsXMvR/fSbbv4=)
                          2: 03643212905F11EA94823C28C4F9AE02.roa (hash: 32+oXxBFhxUG2PWTRaAsdjIfsPq4UsynI3l5ImWQiRY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl
                          rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112327, serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
        Validity
            Not Before: Apr 28 20:37:26 2025 GMT
            Not After : May  5 20:37:26 2025 GMT
        Subject: CN=680fe706-be87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:70:59:48:0c:94:5b:2f:dc:6f:53:7e:b9:
                    17:04:2d:5b:c0:64:c6:a4:13:12:29:15:c9:ad:0e:
                    e1:62:70:38:84:f7:82:b9:f3:fc:7b:17:4a:d5:e0:
                    65:90:a4:3e:9f:9b:ce:59:48:4a:a8:ec:36:2f:d6:
                    08:5a:ae:85:18:7c:8a:1e:b1:bd:43:72:a4:bb:19:
                    01:1c:31:39:96:d0:6b:ca:81:5d:eb:70:08:72:04:
                    13:db:b9:41:0c:c0:06:79:6f:47:c7:db:2f:79:c7:
                    24:91:ab:17:a6:8c:0d:c0:77:d0:90:21:36:c6:59:
                    1e:48:a5:88:b1:0b:23:7f:48:29:b5:25:b9:af:df:
                    f8:64:82:27:be:fc:b8:12:14:2c:b2:77:9b:5f:eb:
                    ce:eb:bb:be:ab:7d:95:18:f5:c8:eb:fc:e9:0d:d1:
                    8f:93:9d:d0:49:a3:29:11:23:96:1d:b7:ce:06:28:
                    a0:c0:6a:c9:76:25:1a:25:0a:e9:85:e4:04:c4:c5:
                    23:21:90:95:a3:d5:a2:4f:79:26:99:f9:bd:f3:8f:
                    18:f3:ae:20:30:b8:36:ba:17:ad:a6:5b:e2:29:d0:
                    fe:1c:f6:8a:b8:5d:76:d6:a2:e6:af:37:02:75:c5:
                    91:13:86:25:6e:63:16:0b:84:0e:f4:bc:58:c1:41:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:90:20:54:10:E6:91:C0:67:9A:A5:53:EB:70:22:12:AC:DB:C2:EA
            X509v3 Authority Key Identifier:
                keyid:E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:d7:c9:fd:34:fd:ff:79:c9:04:a7:b1:20:17:92:ab:f7:
         04:e2:4d:68:0d:31:fc:75:5d:5d:83:2f:96:58:69:69:58:09:
         02:c4:7d:53:0e:41:1e:14:ad:e5:52:23:2a:bb:45:00:90:0d:
         e8:7e:54:d5:fc:05:03:64:02:12:01:3b:35:52:1c:a1:ef:9a:
         81:66:43:5f:dc:83:67:b8:ff:65:68:a8:6e:06:f5:f6:74:bd:
         d1:ac:47:d5:fc:7a:8f:91:14:02:0a:1e:7e:9a:29:ce:86:ab:
         ee:69:3f:99:5f:7d:74:8d:1b:0b:c6:a1:56:86:da:7d:a9:ed:
         a2:fc:10:f6:72:38:38:7b:9f:5a:db:db:00:13:bb:7a:e5:36:
         32:38:89:61:31:cf:61:5c:55:8f:16:e9:3d:8e:e3:ab:9f:44:
         5a:2d:f2:34:d7:c7:82:32:25:b9:b0:12:b4:d2:cb:e2:b5:db:
         f4:60:4d:9a:ba:da:b8:5b:43:da:90:73:e0:fc:80:1e:fc:f0:
         15:2d:b7:05:b4:02:78:51:b3:0b:e9:d6:16:90:0a:5f:f3:ec:
         9b:fd:0e:8e:5b:85:b3:54:c0:96:73:39:ae:ec:62:f2:3f:e5:
         d2:53:5f:ec:67:28:cf:08:75:ad:99:7f:c3:12:ec:de:12:a0:
         f8:31:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:04:46 2025 by rpki-client on console.sobornost.net