Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          IN4WYv1YrtgwRDPMUrOzmY4rOyDTAaQqxfZI8Z+gpMo=
Subject key identifier:   82:42:17:64:B6:38:96:81:8A:AF:4D:76:75:DB:A6:26:78:94:C0:E7
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0AE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0AD8
Signing time:             Mon 28 Apr 2025 19:48:39 +0000
Manifest this update:     Mon 28 Apr 2025 19:48:38 +0000
Manifest next update:     Mon 05 May 2025 19:48:38 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: Pw9OASTZb4FJ6vqfpN2PqD45JaIPajPaUUGKynNUsDg=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: r9qAOJLFlfPr/FG83X+BXgaWnTUjc3HThRn1PkvKOaU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2791 (0xae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Apr 28 19:48:38 2025 GMT
            Not After : May  5 19:48:38 2025 GMT
        Subject: CN=680fdb97-1c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:a4:14:c4:b3:3c:2a:69:31:4f:ff:2b:a4:
                    50:bb:04:3d:f8:bb:46:57:e5:93:e0:f0:63:32:b9:
                    d1:4d:ab:4c:67:16:1c:cc:2f:24:b6:2e:c8:d3:b8:
                    15:e5:79:ae:51:9d:d6:56:3e:7c:3e:e0:48:7c:ab:
                    67:87:ee:d6:58:73:4b:04:da:10:9f:8e:11:37:6b:
                    e2:41:24:dd:f0:19:ce:75:47:92:08:73:2f:6d:71:
                    1a:9f:0b:37:02:f5:88:b6:ea:e2:7b:80:41:d1:e4:
                    b0:59:72:a6:e1:31:3b:44:4c:f1:31:18:83:a4:9a:
                    9e:03:32:0d:bf:70:d1:22:62:e4:c7:f2:d0:a6:ee:
                    69:6f:c1:2b:fb:bb:0a:e4:b8:41:b3:8d:40:1e:ef:
                    e4:ab:73:7d:36:de:03:c5:11:63:b8:54:58:79:83:
                    b2:55:61:b5:73:50:e7:ff:dc:56:d1:4d:3e:32:a3:
                    1c:37:0e:89:f8:df:db:19:d9:df:f6:60:99:44:5f:
                    54:f9:e0:40:d7:fe:a0:a4:ac:dc:b9:ae:79:ba:df:
                    ca:31:6a:75:e1:e3:76:b8:69:6e:b0:71:b9:d7:60:
                    c7:ad:51:05:d5:9b:f8:a4:72:93:51:04:68:ab:6a:
                    2e:05:37:93:55:c8:77:f5:8b:29:57:2a:ac:e2:24:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:17:64:B6:38:96:81:8A:AF:4D:76:75:DB:A6:26:78:94:C0:E7
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:70:19:61:d6:68:3b:75:2c:6d:8c:92:87:bb:0f:62:d5:
         e8:65:3e:83:4d:10:0d:52:34:7f:76:01:34:d4:b5:b8:75:93:
         c9:51:42:6b:41:f5:be:cd:2e:8d:27:59:47:78:e6:fc:11:2a:
         fe:81:1a:da:46:de:b1:11:ac:fc:9a:bd:fc:c2:96:7c:ea:7f:
         b6:bc:35:0f:40:4c:cb:d7:de:61:b0:d3:98:65:38:e5:f1:74:
         24:64:45:7f:1a:b7:ed:44:43:dd:96:dd:e3:a8:5d:a8:99:8a:
         1f:e7:d3:cc:be:94:76:65:33:75:47:75:68:4c:b6:0c:cd:1b:
         7c:68:6f:c1:92:d7:8f:84:18:95:5f:7e:68:e1:8b:07:22:f5:
         78:c5:bb:1f:cd:b5:01:f4:c8:ef:66:57:9e:74:e8:49:64:8d:
         92:ad:17:0d:9d:51:d0:4b:4e:82:fa:dd:82:a4:cd:de:b2:66:
         b0:bc:5f:3b:18:84:49:f2:88:42:74:50:4f:47:16:8b:f0:f8:
         55:02:92:4e:fc:13:74:4e:ac:36:44:30:2d:47:e0:08:18:63:
         26:f5:49:5b:91:f0:6a:e6:8d:87:95:ec:dd:f8:60:37:04:41:
         79:4d:86:48:c0:1a:2d:23:aa:c9:9e:bf:1e:a6:8f:24:98:ce:
         e6:3e:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:22 2025 by rpki-client on console.sobornost.net