Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          SM5WUkSc0O+kZMVj11FQ+qMab9LLP//MLG64rX7N5+c=
Subject key identifier:   4F:70:29:B9:6C:11:64:BC:F5:68:E6:CA:B9:29:D1:5C:A2:CC:7B:96
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       0955
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          093C
Signing time:             Sat 26 Apr 2025 20:02:15 +0000
Manifest this update:     Sat 26 Apr 2025 20:02:14 +0000
Manifest next update:     Sat 03 May 2025 20:02:14 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: ej6pXroKtSa7s2eg9xB/rwj+YQv5P0crEm0QRW6OQMU=)
                          2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: wci0Xfqzo59Y8jWuwf9OlzNgtFeflA2lDlymuLqWFus=)
                          3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: vQbCuWQwTDhbmdI3t8jm44MzJ+6k3uWJJXIQLGrnQxI=)
                          4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: dKpKNCrURAsBv07U8aimKZSBpZKUHuEP819khAXBuFw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389 (0x955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Apr 26 20:02:14 2025 GMT
            Not After : May  3 20:02:14 2025 GMT
        Subject: CN=680d3bc6-7d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:50:0d:cf:72:a4:f3:51:73:8d:e5:23:aa:
                    93:d1:aa:a4:65:fe:a1:84:fd:6e:b7:f2:26:6d:f6:
                    69:db:82:75:c1:3f:6f:e5:dd:8a:f8:2a:d9:9f:0e:
                    ea:0a:0b:17:60:d1:4c:bf:1a:1b:68:4f:e0:5f:be:
                    92:38:6b:61:19:9f:d0:6d:bc:fb:19:a5:c2:78:97:
                    ba:6c:d2:fd:23:24:06:c0:c6:e8:7d:40:5e:52:1a:
                    57:d0:63:68:a3:7d:11:2a:a3:02:58:db:71:c7:cb:
                    19:2b:f8:1e:12:7f:76:da:9a:2c:8f:55:c5:dc:17:
                    96:b5:c6:7c:7a:eb:a2:ff:a0:2a:d7:9f:57:f3:bb:
                    10:05:b8:a3:d4:a6:f8:ab:f0:87:72:cd:b1:b5:25:
                    95:b2:2b:0d:62:89:5d:4d:c8:01:36:c7:cd:2d:66:
                    38:80:c2:63:c3:33:ce:d4:11:90:80:05:16:86:17:
                    68:01:f2:c1:6c:e2:75:ff:e6:3f:a9:d3:97:f6:ac:
                    7e:c1:69:bc:7e:8b:4b:26:3c:78:ed:e8:4b:e8:ed:
                    89:8c:74:9a:7f:93:06:b8:5a:0a:3f:4c:fa:77:57:
                    ae:a0:4f:93:0a:04:4b:d3:2c:b4:01:dc:a1:f6:4d:
                    1f:f1:a3:4d:86:09:1a:e0:81:7f:9e:cb:cb:e0:50:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:70:29:B9:6C:11:64:BC:F5:68:E6:CA:B9:29:D1:5C:A2:CC:7B:96
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:8a:50:34:cc:61:c0:07:97:ab:b1:d5:28:ba:9f:b4:23:
         de:e6:f9:bf:cc:fb:53:2a:e0:b4:15:40:a4:da:05:77:66:f0:
         b0:67:1b:5c:29:d0:63:a3:d7:e1:ee:d1:7c:98:f3:96:68:b3:
         9c:67:6a:6b:c3:d4:f2:27:08:9b:56:57:e4:2f:22:05:20:7a:
         62:5b:66:29:b6:b9:fe:04:4c:22:88:56:42:8b:18:c4:b8:bc:
         f7:7e:46:44:e3:cf:d0:e2:a8:a3:52:b1:58:da:50:54:4f:07:
         ef:5c:12:26:52:0e:a0:dd:3c:f7:ec:ce:97:bf:d7:4d:91:e4:
         86:c4:79:ed:7b:7c:dc:20:3b:61:ad:2e:48:b5:8d:ec:4a:70:
         ee:57:44:7f:54:64:a1:8b:cd:b1:c2:47:aa:c0:4d:1e:bc:3f:
         c1:a6:bd:6e:d7:43:d8:c6:6b:3b:66:6a:e2:d6:49:1a:f2:34:
         55:13:cb:17:82:0d:23:c5:b2:67:ed:b9:76:8e:9d:ad:2e:9f:
         a7:70:12:7c:2c:4f:60:ee:44:4d:6b:43:95:7e:fb:46:44:ac:
         fe:a9:1f:3b:6c:19:3e:b0:5c:c5:6b:47:28:b1:11:be:e1:df:
         06:c6:be:78:e9:ed:00:a0:30:1a:88:45:d5:e0:87:0c:83:0c:
         71:a2:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net