Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File:                     SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier:          rTHQI9frEGPP+TmEnCicc80PelTsG0iOKlhEJ+CSJNA=
Subject key identifier:   BF:B8:68:78:03:60:F8:EA:14:21:41:6F:8E:EE:E9:B3:38:07:6D:B4
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number:          01C9
Signing time:             Sun 27 Apr 2025 02:06:15 +0000
Manifest this update:     Sun 27 Apr 2025 02:06:14 +0000
Manifest next update:     Sun 04 May 2025 02:06:14 +0000
Files and hashes:         1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: 08T7XmAA1fnfUy5rpyLBrMi7HFjAJZX9eZlZCK6AoZQ=)
                          2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: v/jaXAzZ3zqjA/FFCsb5LG3XmHkZ6SrkiodSFMHoHXI=)
                          3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: AeibaNJLpaTPWil7j4GEFIcO329YJiVNQhWzIDubw3g=)
                          4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: v8Ohi2heIavbMrsxkeCZxN8LxhYk0piFR46tFcvgr/o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Apr 27 02:06:14 2025 GMT
            Not After : May  4 02:06:14 2025 GMT
        Subject: CN=680d9116-db37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:08:15:5c:e3:93:46:24:98:61:0b:5f:35:
                    6c:fd:3b:c2:81:65:5e:78:8f:e8:70:45:38:75:23:
                    a1:08:8a:14:bf:f3:a6:58:5d:97:ab:aa:dc:74:3d:
                    3e:7f:b7:87:e5:1c:7d:96:2e:9d:8f:d0:bb:f5:2f:
                    2e:20:1e:07:8b:65:4d:44:06:6d:e8:c1:81:71:d4:
                    a7:b9:ef:72:42:e6:e7:fc:42:8b:dd:5e:77:8b:ee:
                    29:65:a4:78:8d:b9:01:c3:30:3c:23:05:cd:3f:8a:
                    9c:3f:5b:24:62:de:85:ea:7e:a0:f1:e4:2e:19:f1:
                    f4:73:8b:be:ce:46:94:69:ec:c6:05:f0:b6:e3:aa:
                    f2:8a:27:9e:5b:a6:29:e3:bd:98:44:93:a9:73:52:
                    3a:f9:93:c2:57:74:c3:ca:f4:24:11:db:e5:29:4b:
                    4e:d3:ab:15:da:67:f6:99:85:a0:92:0a:2c:c8:ff:
                    21:dd:b4:31:40:96:e6:ca:d3:54:43:1a:61:2c:e2:
                    82:03:21:eb:19:6e:cb:ba:ce:ae:42:60:9a:da:7f:
                    2e:69:e3:f7:e4:43:1d:49:3c:40:fb:fb:1e:3e:e0:
                    d8:2a:e9:19:be:8a:02:46:ad:e8:51:11:98:9f:e7:
                    ab:8f:38:46:ac:a0:d8:2e:94:9d:50:62:98:cf:5e:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:68:78:03:60:F8:EA:14:21:41:6F:8E:EE:E9:B3:38:07:6D:B4
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:23:bc:5f:c6:bd:01:31:d0:c5:ef:6e:94:13:28:37:df:
         fe:9c:45:3d:0c:97:d8:3f:2b:0e:3b:ee:43:9f:d6:a2:b9:70:
         63:2e:63:b3:30:cb:2d:05:4d:3e:b9:7c:6e:a1:03:56:b2:92:
         68:94:7e:1c:00:88:2b:f0:fc:5b:22:c0:ca:e2:c6:d1:35:16:
         ac:ce:d8:80:d2:9b:70:18:2a:83:d0:ee:fd:d9:c8:23:ce:93:
         c9:2d:75:40:fb:99:18:17:58:1f:19:74:ce:3a:a2:0c:1d:ae:
         c4:91:2e:22:4e:0a:17:37:49:18:ac:94:57:71:77:4e:38:43:
         71:a1:88:ff:b4:17:da:59:c2:13:61:58:ae:a8:fe:e8:7d:d4:
         e3:3c:f9:4e:44:ed:e2:a2:6d:50:47:42:a6:4c:45:dc:be:8b:
         6a:15:e1:45:35:dc:3a:b2:13:a8:e1:b7:f1:27:82:ee:8f:7d:
         55:da:da:2a:b8:9f:cd:7d:3b:07:69:36:41:1a:8d:b8:83:42:
         8d:3f:fb:fb:16:67:00:e0:57:de:b4:da:f9:82:6f:de:21:78:
         b0:cf:9e:90:39:9f:7f:de:49:9f:f4:0a:5e:a0:f0:e7:a7:b9:
         4f:5f:4c:48:26:24:7a:09:fa:ee:dc:35:21:ea:2d:df:ce:19:
         4b:80:a6:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw
QkIyQzUwREIwHhcNMjUwNDI3MDIwNjE0WhcNMjUwNTA0MDIwNjE0WjAYMRYwFAYD
VQQDEw02ODBkOTExNi1kYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlbUIFVzjk0YkmGELXzVs/TvCgWVeeI/ocEU4dSOhCIoUv/OmWF2Xq6rcdD0+
f7eH5Rx9li6dj9C79S8uIB4Hi2VNRAZt6MGBcdSnue9yQubn/EKL3V53i+4pZaR4
jbkBwzA8IwXNP4qcP1skYt6F6n6g8eQuGfH0c4u+zkaUaezGBfC246ryiieeW6Yp
472YRJOpc1I6+ZPCV3TDyvQkEdvlKUtO06sV2mf2mYWgkgosyP8h3bQxQJbmytNU
QxphLOKCAyHrGW7Lus6uQmCa2n8uaeP35EMdSTxA+/sePuDYKukZvooCRq3oURGY
n+erjzhGrKDYLpSdUGKYz15nfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+4aHgD
YPjqFCFBb47u6bM4B220MB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC
OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx
dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAuCO8X8a9ATHQxe9ulBMoN9/+nEU9DJfYPysOO+5Dn9aiuXBjLmOz
MMstBU0+uXxuoQNWspJolH4cAIgr8PxbIsDK4sbRNRasztiA0ptwGCqD0O792cgj
zpPJLXVA+5kYF1gfGXTOOqIMHa7EkS4iTgoXN0kYrJRXcXdOOENxoYj/tBfaWcIT
YViuqP7ofdTjPPlORO3iom1QR0KmTEXcvotqFeFFNdw6shOo4bfxJ4Luj31V2toq
uJ/NfTsHaTZBGo24g0KNP/v7FmcA4FfetNr5gm/eIXiwz56QOZ9/3kmf9ApeoPDn
p7lPX0xIJiR6Cfru3DUh6i3fzhlLgKZ5
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net