Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
File:                     g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json)
Hash identifier:          Tfh3M9spY0+WCIVm2/pspFZ3qLn73T6z9iU6ktakqaM=
Subject key identifier:   F0:D5:7C:CD:D3:9D:46:2D:E6:54:15:78:D3:C0:61:2B:6A:BA:79:12
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
Manifest number:          0163
Signing time:             Sun 27 Apr 2025 03:08:43 +0000
Manifest this update:     Sun 27 Apr 2025 03:08:43 +0000
Manifest next update:     Sun 04 May 2025 03:08:43 +0000
Files and hashes:         1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: e+NmoFO7UwllO16Gut4wWspXuFZMUaunVJNLIh0xz34=)
                          2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 0HkSWoIqELp3ylHO6VoceHK/AkbpkOqVqSCheHiI6Uo=)
                          3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: n8VX91JedlAvIqLFu7Bl3QhQfuPAxDc2ekOd4lvr+ec=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
                          rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Apr 27 03:08:43 2025 GMT
            Not After : May  4 03:08:43 2025 GMT
        Subject: CN=680d9fbb-de01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:89:15:69:40:94:e8:54:ed:e1:10:6a:bf:
                    55:32:69:1e:67:51:ec:f4:cf:6d:88:a0:c2:fe:c5:
                    b4:5e:cd:99:93:13:63:05:26:32:be:9d:e2:33:f5:
                    71:bb:64:78:9f:99:28:97:88:f7:d6:e1:1b:e2:f0:
                    b1:ab:40:ac:4d:7d:1d:86:bb:2d:87:8c:db:24:33:
                    f6:0c:ac:f0:d1:cb:10:aa:b8:a3:de:29:48:2f:11:
                    e1:66:ad:19:5e:d1:be:b3:5e:e6:27:94:87:e8:e0:
                    80:3a:f7:13:32:98:ec:eb:ba:da:f7:67:b6:3b:6a:
                    a9:cd:35:97:9a:76:d0:65:cd:ce:d4:84:06:65:25:
                    00:7b:2f:1e:76:a1:30:43:b3:c4:65:0b:12:5f:ae:
                    b6:a1:f7:14:cd:b5:3e:e5:ce:40:aa:83:8a:01:3c:
                    3a:06:55:ab:45:71:ec:49:58:d8:f4:d1:dd:e5:d4:
                    77:ff:b0:a1:47:1f:45:80:c8:a6:f7:ef:31:e9:bb:
                    b8:46:41:83:b3:be:f2:27:8c:ed:a6:7a:24:12:07:
                    f9:b3:02:bc:3a:0f:0a:ee:10:46:13:f8:38:a7:20:
                    58:ca:00:1b:88:51:7a:a0:37:c3:ce:86:ff:7e:6a:
                    51:bb:be:20:a0:73:c6:75:34:ab:66:5a:29:5d:c0:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:7C:CD:D3:9D:46:2D:E6:54:15:78:D3:C0:61:2B:6A:BA:79:12
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:32:3b:38:8b:d8:0a:61:51:62:b0:6e:14:08:76:91:da:a3:
         e8:cd:b3:83:aa:e2:b8:43:c3:39:11:56:7f:e4:73:5a:43:27:
         c8:bb:5a:4c:1c:c1:53:ff:89:c5:3a:d2:72:08:ec:f1:4b:eb:
         42:1c:30:5b:93:ae:c2:91:75:9d:c9:b1:96:fd:25:7c:4a:64:
         7a:17:e3:02:17:60:f6:80:25:aa:ab:30:48:05:58:a4:45:f8:
         cd:c8:46:91:d4:89:d9:a4:6b:a5:b8:4e:b4:4a:0d:c1:b2:61:
         22:d9:e5:5a:c3:7e:62:56:3d:f3:31:e1:40:05:10:dc:80:26:
         8c:3c:b4:1d:61:e4:60:b5:f8:50:06:02:9a:7b:77:4c:ed:27:
         2a:54:aa:26:09:7d:fc:1d:93:c6:4f:99:84:2c:d2:ec:df:9a:
         ee:eb:c1:1a:98:29:e1:59:13:4b:9b:81:c3:2a:17:42:44:cd:
         f7:4f:37:13:d9:11:03:dd:e5:15:2e:6d:76:6a:7c:29:af:09:
         6e:cd:6f:8a:fb:68:ac:91:fd:d4:cc:89:47:43:3a:fe:99:ba:
         eb:b9:44:d4:49:4e:29:41:48:5d:13:66:8e:b6:7d:d8:76:ca:
         a3:2d:03:bd:ce:01:d8:be:58:ff:f3:d3:7a:aa:a9:23:59:e0:
         e9:ce:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net