Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File:                     HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier:          3fN9HP8yJ0/p3fuo2raQPWpj7+cdzN9i1pvwd3iOwE0=
Subject key identifier:   93:5F:6A:16:CF:C0:8D:31:A4:25:B6:E7:EC:01:2B:76:1F:34:39:CB
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer:       /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number:          013E
Signing time:             Sun 27 Apr 2025 03:25:29 +0000
Manifest this update:     Sun 27 Apr 2025 03:25:28 +0000
Manifest next update:     Sun 04 May 2025 03:25:28 +0000
Files and hashes:         1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: VjN6SkJu8GHaN8hQBC1LGBCs4SZOP9U3HTgmkLWTr70=)
                          2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: kdsA/bny2SyuYzwYvWjWWNRHht/7GqZqRAtQE/oZ56I=)
                          3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI=)
                          4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: jLjyxuzoihO6U4uZj4lE+4ZXFm13Tj1cLNw88yjt4fk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
                          rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
        Validity
            Not Before: Apr 27 03:25:28 2025 GMT
            Not After : May  4 03:25:28 2025 GMT
        Subject: CN=680da3a9-abb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:f7:93:3e:d0:35:01:29:18:df:e9:f2:19:
                    0c:97:a2:48:ed:fc:ba:bb:da:46:97:25:e9:40:b4:
                    3a:41:93:aa:03:1c:b5:38:00:8f:b8:7f:13:d1:3c:
                    bf:d7:77:08:6e:c3:4f:1b:ae:c9:0b:ae:91:75:66:
                    32:0b:0d:e6:b4:60:b6:06:9f:57:fb:7e:27:4c:63:
                    53:26:51:af:71:1a:45:90:b5:c0:d4:d2:0f:19:58:
                    98:fc:f6:78:0a:11:25:d1:a7:ca:61:64:4b:c8:24:
                    7f:9b:68:e1:57:f9:43:f6:0b:a1:09:e8:ed:d1:ce:
                    8c:72:b5:43:da:b0:78:ed:9d:8c:ea:2a:78:25:2c:
                    69:a0:d3:9e:a2:f9:9c:12:d4:4b:68:72:36:7f:2c:
                    4e:9b:df:b3:28:3b:e1:6c:23:ef:a5:98:74:2a:26:
                    57:79:96:4b:e5:42:21:1f:bb:58:38:eb:0b:ac:c6:
                    44:1a:fd:a2:04:fd:8a:0b:05:b2:4d:3f:d1:40:d2:
                    20:a7:fa:6c:e7:5b:1a:2f:99:31:df:6b:81:68:7f:
                    44:67:ce:d7:1a:73:55:7e:b2:14:2f:98:06:d7:9a:
                    58:0e:01:75:88:05:97:e7:8f:42:31:d2:f2:4a:1d:
                    52:72:a5:df:d0:9a:8f:4f:6a:2b:86:4a:f0:7c:90:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5F:6A:16:CF:C0:8D:31:A4:25:B6:E7:EC:01:2B:76:1F:34:39:CB
            X509v3 Authority Key Identifier:
                keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ba:f0:dd:2d:49:75:7d:4b:f7:b0:75:ed:49:4c:d1:6c:36:
         9a:6f:ad:8c:5b:68:54:31:91:e2:38:02:ce:03:90:b9:83:b2:
         59:cd:dc:9b:6f:cd:27:43:40:17:af:2a:08:cc:d0:d0:8d:3c:
         ec:cc:4b:1a:df:38:bf:d4:cf:be:ab:ee:e9:fc:22:87:7d:98:
         a0:9c:06:85:17:9d:40:b9:f3:ce:90:37:04:a2:5b:a4:7e:a0:
         1a:8a:ce:21:84:e8:f3:ff:07:0a:bf:8e:1d:34:d8:55:33:53:
         ba:9f:31:d8:68:68:81:e8:3b:98:4f:64:42:da:6f:7d:a2:ac:
         8e:a6:a6:e7:2a:ad:a7:d8:17:da:58:ae:72:5e:d6:03:10:c6:
         a7:67:0f:03:50:b3:57:9d:7d:4a:6e:e6:52:74:12:3f:0e:cf:
         54:68:90:54:0b:5a:b2:62:b1:d8:81:60:38:2f:30:e4:15:f6:
         7a:54:cd:ce:f2:51:ea:b1:92:3b:88:f0:f7:38:be:df:0a:9d:
         91:3a:98:ba:a1:3b:04:67:6c:72:cb:e5:9d:c9:e7:c3:72:05:
         16:07:82:11:bb:e1:28:ab:ba:da:f2:31:a4:e4:6e:3e:ec:fa:
         1f:e2:80:b0:a1:c9:ae:c1:59:70:59:76:80:0b:83:45:c5:bd:
         78:4c:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:02 2025 by rpki-client on console.sobornost.net