Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
File:                     mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json)
Hash identifier:          oatjwhwoumo2eDn73IRFli/D44C8lcJNf1KP4Ojj7mA=
Subject key identifier:   70:7C:38:BE:7B:22:1F:3C:22:63:99:A5:5F:41:78:EB:CD:B5:AB:03
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Certificate issuer:       /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
Manifest number:          F1
Signing time:             Wed 23 Apr 2025 04:23:51 +0000
Manifest this update:     Wed 23 Apr 2025 04:23:51 +0000
Manifest next update:     Wed 30 Apr 2025 04:23:51 +0000
Files and hashes:         1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: uYovoFBooVoh703eqS0FOc/seWo8JPhTts8vHoXsXu8=)
                          2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
        Validity
            Not Before: Apr 23 04:23:51 2025 GMT
            Not After : Apr 30 04:23:51 2025 GMT
        Subject: CN=68086b57-67f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:2d:14:cb:fb:5a:84:7a:6a:de:f3:bd:5f:8c:
                    d8:b9:57:9d:15:27:7e:af:73:5d:7d:7c:a9:ec:bc:
                    ff:8c:2e:76:7d:8a:fb:19:7e:8b:60:38:e1:86:81:
                    f8:e9:1f:9d:31:1c:26:01:98:50:0f:99:84:71:3a:
                    9f:c1:8e:1e:50:c6:6c:88:2d:14:d1:68:20:56:02:
                    19:ca:b0:5b:08:1c:ea:e4:30:24:89:c7:bc:c7:8d:
                    5c:a5:72:5d:79:4d:75:d1:a2:d3:05:8a:06:c8:f2:
                    79:50:1e:d3:2a:ee:29:6d:bb:d4:3d:71:75:a3:f4:
                    07:99:0f:01:1f:74:33:1e:77:f3:ea:56:98:35:be:
                    73:37:cd:8f:44:dd:85:a9:dc:2d:fa:6b:42:d7:c7:
                    34:26:72:1b:92:14:86:7a:e0:d8:5b:14:cf:12:fa:
                    7b:c8:8f:62:4c:a0:79:2a:ba:15:c6:87:16:f9:e6:
                    ab:ba:ec:56:13:3a:36:9a:23:c4:5e:ba:f1:7a:f1:
                    5e:33:6b:35:f9:2d:1b:ef:2f:da:f2:b0:24:38:63:
                    52:d9:59:b2:cd:0d:b9:a9:ef:9e:cd:0d:50:a7:cb:
                    98:1b:eb:e5:12:cb:80:a8:29:27:8a:53:07:3b:aa:
                    06:e4:a5:e9:21:0e:94:91:da:8d:a5:de:05:ec:51:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7C:38:BE:7B:22:1F:3C:22:63:99:A5:5F:41:78:EB:CD:B5:AB:03
            X509v3 Authority Key Identifier:
                keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:36:db:e9:04:21:dc:93:9d:26:8e:11:87:a5:c5:c0:9e:
         28:9c:c9:ee:d7:f3:c7:f3:c7:92:ef:1e:10:35:b4:36:ce:9c:
         50:d2:98:61:99:a6:cb:28:64:50:64:df:5c:e0:be:2a:d9:f9:
         87:b2:33:c5:de:7c:15:e4:3d:2a:04:64:09:54:2b:7a:2f:f3:
         f9:ab:32:a1:fb:ed:d1:09:f6:6d:0b:58:58:80:29:7f:84:46:
         ac:1c:6a:15:4d:1c:81:98:da:1d:de:96:31:96:d7:3f:68:e2:
         6b:8a:d6:99:bd:ba:3d:83:9f:9e:27:49:e6:ce:78:79:91:62:
         88:b5:8b:26:cc:c9:96:14:c2:2b:b9:d2:a7:be:25:ce:3f:7a:
         0f:56:94:4c:4b:22:f4:45:a0:2a:74:ba:15:84:fe:01:b7:11:
         a6:f1:d3:16:4e:5a:26:4b:3b:4c:6f:83:d9:e2:8b:80:2c:06:
         77:46:e8:88:7d:6c:6d:c5:2f:95:66:cb:cb:59:8c:55:fd:5a:
         63:59:ec:ec:50:6f:7d:71:fc:bb:e1:f3:7d:bf:d5:9d:e2:82:
         f1:46:01:3c:4d:50:88:62:d8:9d:07:b0:c2:c6:86:f6:d2:d7:
         c2:28:9f:d6:27:4c:c1:2a:91:0f:6d:97:34:13:5f:4f:6f:a0:
         d3:bb:f4:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC
MDcxNjhGM0IwHhcNMjUwNDIzMDQyMzUxWhcNMjUwNDMwMDQyMzUxWjAYMRYwFAYD
VQQDEw02ODA4NmI1Ny02N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+i0Uy/tahHpq3vO9X4zYuVedFSd+r3NdfXyp7Lz/jC52fYr7GX6LYDjhhoH4
6R+dMRwmAZhQD5mEcTqfwY4eUMZsiC0U0WggVgIZyrBbCBzq5DAkice8x41cpXJd
eU110aLTBYoGyPJ5UB7TKu4pbbvUPXF1o/QHmQ8BH3QzHnfz6laYNb5zN82PRN2F
qdwt+mtC18c0JnIbkhSGeuDYWxTPEvp7yI9iTKB5KroVxocW+earuuxWEzo2miPE
XrrxevFeM2s1+S0b7y/a8rAkOGNS2VmyzQ25qe+ezQ1Qp8uYG+vlEsuAqCknilMH
O6oG5KXpIQ6UkdqNpd4F7FGucwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB8OL57
Ih88ImOZpV9BeOvNtasDMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw
RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3
NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtjDbb6QQh3JOdJo4Rh6XFwJ4onMnu1/PH88eS7x4QNbQ2zpxQ0phh
mabLKGRQZN9c4L4q2fmHsjPF3nwV5D0qBGQJVCt6L/P5qzKh++3RCfZtC1hYgCl/
hEasHGoVTRyBmNod3pYxltc/aOJritaZvbo9g5+eJ0nmznh5kWKItYsmzMmWFMIr
udKnviXOP3oPVpRMSyL0RaAqdLoVhP4BtxGm8dMWTlomSztMb4PZ4ouALAZ3RuiI
fWxtxS+VZsvLWYxV/VpjWezsUG99cfy74fN9v9Wd4oLxRgE8TVCIYtidB7DCxob2
0tfCKJ/WJ0zBKpEPbZc0E19Pb6DTu/Ss
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:38 2025 by rpki-client on console.sobornost.net