Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
File:                     Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json)
Hash identifier:          N/lwrAfhUHenOmQvNFKEEUhF8GT7UWdI1hdIqveta5w=
Subject key identifier:   0C:40:89:43:F3:73:1A:79:25:30:9B:B5:4E:6E:46:7C:44:CC:98:D1
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Certificate issuer:       /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
Manifest number:          E3
Signing time:             Sun 27 Apr 2025 04:25:50 +0000
Manifest this update:     Sun 27 Apr 2025 04:25:50 +0000
Manifest next update:     Sun 04 May 2025 04:25:50 +0000
Files and hashes:         1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: NYyo0XB3uqlqCa4tM8W4WE1eE4RIOR1I/i9N2VTjsnk=)
                          2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: o014SpMqOiTDvJKjuitWu+6F68KRrDYkeyld85oQ3gg=)
                          3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: Gi1fjcJYFrnx1YgdQysI3ht+gEJR9oM+PSXe3rgp9Wc=)
                          4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
                          rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
        Validity
            Not Before: Apr 27 04:25:50 2025 GMT
            Not After : May  4 04:25:50 2025 GMT
        Subject: CN=680db1ce-b0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c3:d0:10:75:1f:60:71:61:9c:9d:15:6c:ea:
                    1a:04:ea:93:57:65:4e:62:d4:30:4a:af:42:db:69:
                    79:60:31:8c:f7:5b:ff:df:2e:e2:5d:a3:23:10:be:
                    65:7f:62:0a:da:4b:5d:75:cd:29:fd:1f:f1:53:70:
                    2d:e0:9a:66:dc:9f:49:15:3f:d3:08:e0:0d:66:61:
                    0d:07:9b:68:d6:26:a9:e8:96:2c:83:11:e1:ac:0f:
                    e2:7b:06:24:d7:62:a7:05:5c:80:11:c0:97:ff:f8:
                    6a:3f:7e:a3:dd:2a:97:cc:22:9a:a5:22:d4:ec:2c:
                    44:67:76:f9:5a:1f:8d:45:07:50:52:e9:13:5e:17:
                    06:d8:9d:bc:8a:71:60:08:b2:75:a3:20:0e:7c:60:
                    f7:e7:a1:78:72:c1:76:00:ea:24:68:50:bf:9b:28:
                    cf:93:4d:56:97:6d:63:12:3c:2b:40:8d:cc:ce:c9:
                    a1:e8:0f:3b:d5:54:b0:b0:67:fd:fe:d9:bf:d0:fa:
                    7e:a8:ca:32:bd:3c:e5:e4:2c:14:02:9b:40:23:36:
                    b3:f8:e1:a0:c5:75:ff:0d:6d:68:7a:c9:0b:15:67:
                    d1:bb:19:b8:d1:ad:46:31:ae:cc:be:b3:a9:6e:b7:
                    8e:b2:34:86:e2:45:7d:fc:ce:0a:1b:f1:b1:b2:0d:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:89:43:F3:73:1A:79:25:30:9B:B5:4E:6E:46:7C:44:CC:98:D1
            X509v3 Authority Key Identifier:
                keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:63:39:f9:bc:c7:17:09:db:6c:86:4b:60:5d:37:f6:6a:9d:
         33:62:04:c0:06:e4:89:5d:27:4e:61:17:e5:9c:f1:c2:be:a0:
         e9:cd:2f:ea:77:2d:10:60:97:65:11:b1:37:9a:c2:aa:15:45:
         8f:1e:24:8c:66:ee:9d:12:3c:e2:f3:a2:f2:61:f8:e2:4e:22:
         76:5d:8e:59:67:4d:31:68:df:3f:1a:9b:74:00:06:68:be:4e:
         1f:62:f3:7c:9c:6c:b8:d8:c4:77:5a:d9:89:fd:6e:9f:49:3f:
         e4:c3:da:d7:83:62:df:b6:11:37:df:95:d0:e3:15:3c:ae:c9:
         95:32:0b:84:19:8f:9b:10:af:a0:66:f8:91:c7:d1:d3:c5:6e:
         81:42:4a:b0:55:ea:33:f3:35:3c:1c:11:79:5c:1e:06:5c:c5:
         02:10:0c:df:d8:14:99:cf:d6:86:bc:e5:9f:6a:66:1a:9f:bf:
         b8:c9:9a:39:89:93:7e:cf:22:01:16:5f:5e:a1:ac:7c:00:86:
         a0:ff:16:05:e4:7d:50:f7:75:e1:65:87:e4:ab:5f:a1:85:39:
         47:4d:84:a3:cb:1e:84:9b:ef:97:21:b8:49:64:f7:d2:b8:30:
         55:10:e5:90:03:c7:13:50:51:80:be:16:5b:d9:d0:f1:f0:b3:
         63:94:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net