Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
File:                     hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json)
Hash identifier:          JSk3x18jHi69lcbJ3t6PrWzN4NqLeMsjH6/piA6/lJI=
Subject key identifier:   E8:78:57:3E:B6:02:FF:3C:F8:5A:17:2A:42:F6:64:4D:B6:3E:EF:80
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Certificate issuer:       /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial:       035D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
Manifest number:          034D
Signing time:             Sun 27 Apr 2025 00:41:35 +0000
Manifest this update:     Sun 27 Apr 2025 00:41:35 +0000
Manifest next update:     Sun 04 May 2025 00:41:35 +0000
Files and hashes:         1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: m1OzIXeABUoweOkbLEV9WrZ0H5GalGCbsVkw31ZqGtk=)
                          2: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=)
                          3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: 1pOI0527imuvZcTDV+q5rDya5atw0bipn9DUjAh03Hc=)
                          4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 88ko9UJFFNtj+HS4XzX5w+1kD78T/NOvmunkaebMytY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
                          rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
        Validity
            Not Before: Apr 27 00:41:35 2025 GMT
            Not After : May  4 00:41:35 2025 GMT
        Subject: CN=680d7d3f-b4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:fd:17:5a:09:e8:03:7f:3f:0e:e7:df:43:
                    cd:18:a0:85:62:72:c2:4f:33:a4:b6:87:b1:8d:09:
                    6d:22:92:08:11:3b:dd:f8:d8:04:19:fa:24:32:40:
                    77:02:b8:25:8f:b0:f2:e1:32:da:de:f9:88:62:f3:
                    3b:81:b4:34:7f:b4:1f:4e:58:8d:89:33:cc:ed:b9:
                    ea:2f:0d:d7:2d:f6:38:1c:65:ab:82:4f:d8:e7:8b:
                    ee:87:6a:2d:56:51:a4:27:03:a2:ec:94:fe:d1:b4:
                    07:84:18:7a:8c:28:8d:ce:f2:fd:4e:c1:d9:22:55:
                    f7:4d:bc:31:a1:6c:76:57:c5:6b:e4:4e:be:ba:2b:
                    84:64:a2:0e:45:69:df:62:c1:ea:be:2c:53:92:54:
                    18:d6:15:8e:bc:ef:c6:5f:ea:76:fe:90:e7:93:2a:
                    6f:f8:65:83:33:b1:c0:cd:14:b4:8d:a9:bb:21:d1:
                    43:fb:96:93:23:d5:81:b6:1b:b0:f8:55:3f:73:ab:
                    0f:a4:3f:00:5a:aa:4b:da:0e:20:0f:39:8c:d4:fc:
                    f4:fa:62:92:bd:70:01:c1:98:e4:62:62:37:61:c9:
                    1e:e8:32:69:c0:bb:f4:49:a3:11:0d:18:64:95:89:
                    2f:bb:58:6c:60:9b:80:b3:6e:e4:0e:76:20:b6:92:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:78:57:3E:B6:02:FF:3C:F8:5A:17:2A:42:F6:64:4D:B6:3E:EF:80
            X509v3 Authority Key Identifier:
                keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b1:ef:18:f9:53:12:0c:d5:37:09:0f:03:3f:32:05:8f:01:
         77:5f:1e:1b:a8:82:df:38:52:bf:a8:1f:69:47:31:a1:2d:5b:
         31:0b:e2:ad:af:4b:eb:4c:b7:12:0d:2a:d5:e8:70:c4:4c:4f:
         73:59:83:3a:46:6c:dd:d0:46:46:7b:fc:14:72:d8:57:37:85:
         1b:7c:53:64:65:0a:f3:fa:c8:76:b8:e9:8b:2f:c2:20:59:bd:
         99:16:37:50:de:38:a5:7a:49:65:d4:5d:0e:31:93:68:4b:54:
         70:70:85:e5:f7:b6:aa:c2:2e:8b:d5:cf:cd:2f:61:cf:88:b8:
         46:ad:b9:21:53:2a:fe:40:89:eb:ee:f7:db:04:88:d3:22:4f:
         1a:37:cc:aa:6d:bc:a5:ac:6d:2e:5e:32:a0:53:1d:e6:d5:a2:
         04:61:d7:3c:8e:17:0a:0a:68:06:18:c8:52:96:2c:0f:2d:19:
         3c:93:8f:c1:46:38:3f:f9:2c:53:34:51:13:73:3b:08:e4:96:
         21:98:60:34:35:fa:4c:c6:d7:47:dc:b8:3e:54:f5:92:32:44:
         f2:d6:f6:e4:49:74:df:42:ad:2a:eb:a2:73:4c:a6:2e:6e:bb:
         d9:fd:4d:4b:58:5d:78:43:ad:d7:6c:71:ae:22:49:51:30:6e:
         57:00:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:58 2025 by rpki-client on console.sobornost.net