Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
File:                     HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json)
Hash identifier:          TFzd76hy3osblTkab0YawxIoJ3Tl7fHcFHPmcm/0DVw=
Subject key identifier:   25:CC:10:8A:27:16:1B:9B:89:1B:EE:45:9E:EE:10:43:48:91:43:29
Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
Certificate issuer:       /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
Manifest number:          011C
Signing time:             Sun 27 Apr 2025 04:05:05 +0000
Manifest this update:     Sun 27 Apr 2025 04:05:04 +0000
Manifest next update:     Sun 04 May 2025 04:05:04 +0000
Files and hashes:         1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: rvNzK4WAMFncj8vYXu4SonDdD//MmZpXMRJrZVhzCh0=)
                          2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: YC1hPH8mghnTJjDQYho998bjw91B3zrCEFjA4fVmKFk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
                          rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
        Validity
            Not Before: Apr 27 04:05:04 2025 GMT
            Not After : May  4 04:05:04 2025 GMT
        Subject: CN=680dacf1-3511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:75:67:61:e4:38:66:d6:37:b5:53:5d:80:85:
                    5f:57:da:d0:75:f5:1a:0f:42:7b:e5:39:b7:bb:08:
                    fa:24:60:ae:54:58:ff:8b:72:1c:09:41:96:0c:0a:
                    e7:21:05:1d:18:01:06:d3:8a:71:89:4f:25:69:59:
                    f2:b6:0c:b7:02:96:9c:2a:a8:36:00:0d:0c:e8:80:
                    17:bd:1b:05:69:ac:14:6f:0a:5d:d6:50:9f:df:d4:
                    d8:21:ca:53:72:70:b6:b9:31:16:a2:cc:f8:6d:91:
                    ac:4b:ed:c9:fd:90:79:96:0d:b7:f1:74:42:fb:78:
                    44:4b:be:9d:5e:76:8c:42:fb:f2:79:e8:7d:0d:3e:
                    53:ea:a5:03:83:99:97:f7:5e:02:b3:38:91:61:d8:
                    3a:7e:8e:b3:9e:71:b4:c4:fe:43:22:32:88:aa:ef:
                    c9:a1:a9:6b:9e:18:ec:44:75:72:0f:fb:9e:c7:1c:
                    f2:86:a3:74:63:fb:98:46:a4:81:cf:d5:c5:40:2a:
                    d1:be:44:70:85:49:25:06:ff:c5:45:db:a0:dc:21:
                    f8:67:9d:58:45:02:da:19:8d:34:b4:72:3a:3d:c6:
                    3b:f0:17:3c:39:c3:3f:4d:da:b8:14:36:0c:36:47:
                    db:1d:1a:be:ce:c5:b8:19:76:d9:eb:0e:83:28:f0:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CC:10:8A:27:16:1B:9B:89:1B:EE:45:9E:EE:10:43:48:91:43:29
            X509v3 Authority Key Identifier:
                keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:44:1a:28:c2:b8:df:8b:5a:ac:f3:97:5f:58:7c:16:bb:70:
         47:fb:ae:b1:84:86:18:92:fa:aa:c6:44:f4:61:33:23:bf:32:
         14:52:59:56:6a:9c:b8:65:72:86:1c:d0:35:8c:3f:12:8e:92:
         fd:ed:a9:35:12:27:17:0f:82:d9:3d:72:0e:6d:55:3e:2c:e5:
         95:0d:76:9d:04:5d:4d:a3:fe:bc:e2:48:c3:bf:7d:ae:7e:67:
         f7:72:69:b0:b3:e0:cb:ad:db:52:bc:57:16:7a:d6:c0:7f:cf:
         05:cb:b2:0d:e7:80:44:f4:0f:aa:fc:c7:02:0d:4e:1c:e7:34:
         53:ef:0d:3f:7c:32:fc:fa:b5:6e:96:3b:ab:24:f3:6d:e2:20:
         4e:31:1e:de:df:12:ff:f6:78:51:21:28:a7:8c:e5:51:af:ab:
         83:ec:6a:f0:83:4a:e8:8f:fe:6b:c3:19:dc:2c:ce:10:a1:74:
         34:5d:50:1b:78:15:23:26:7e:4a:3f:aa:48:cf:cd:b7:1a:33:
         89:be:f5:55:ac:a2:f5:6c:4f:14:9f:51:a9:5c:23:b6:23:84:
         68:c3:28:49:e6:70:d7:6a:40:d0:7f:60:98:39:7a:4a:f1:16:
         bf:4a:d3:b1:8c:d9:3f:cb:fe:af:17:81:7c:b0:00:9a:89:90:
         54:e1:be:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net