Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File:                     HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier:          xuwjJt311EVb4sUWxauuviQVSXHkCdpWf+xQzofC1BE=
Subject key identifier:   F8:44:0D:46:A3:7B:77:FC:B3:8B:FF:64:52:49:1C:C9:98:B8:30:3E
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer:       /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial:       0B64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number:          0BA5
Signing time:             Mon 28 Apr 2025 19:27:32 +0000
Manifest this update:     Mon 28 Apr 2025 19:27:32 +0000
Manifest next update:     Mon 05 May 2025 19:27:32 +0000
Files and hashes:         1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: C9pQ8FMlepLMw9ON3E9JjbA9UdUbxL+x6Iq98H6ti1E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2916 (0xb64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
        Validity
            Not Before: Apr 28 19:27:32 2025 GMT
            Not After : May  5 19:27:32 2025 GMT
        Subject: CN=680fd6a4-0b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:b8:1c:6e:ca:cc:13:4e:cc:e1:53:c8:2c:
                    ab:ff:3a:c8:18:4a:8d:4c:08:fe:0f:d2:c8:26:ea:
                    ce:2c:3a:22:45:d7:83:86:ac:b3:df:8e:62:bc:ea:
                    a6:f3:cb:bb:ca:8e:43:63:88:4a:12:df:a2:5c:e5:
                    0b:ce:2e:41:3c:8d:ad:a0:24:09:bb:31:d6:4b:78:
                    f4:79:6d:2e:fa:97:f8:bd:c9:53:7b:77:57:e9:e9:
                    08:05:f4:8d:4f:75:ad:35:61:ba:5e:9b:34:23:e8:
                    f0:9a:31:b4:8c:f2:b8:29:e6:cc:7d:a8:0b:01:14:
                    ac:db:6d:e6:fb:40:b5:e7:a0:23:c1:49:53:fb:5d:
                    4e:8a:bc:03:97:3b:9f:74:aa:0e:21:a6:1c:05:f3:
                    05:03:00:84:51:bf:ee:b3:c4:b4:54:db:65:8c:ec:
                    83:65:98:f9:4f:02:6b:71:65:ee:d7:90:b0:5f:a0:
                    aa:a1:df:77:a5:4b:c3:9b:ed:08:21:a2:4a:e8:b8:
                    1f:d5:49:19:2c:ac:a6:0f:79:37:f8:ef:6a:e4:59:
                    a5:d7:d9:41:1b:ac:c8:1f:00:1a:a2:94:03:b4:7d:
                    65:b1:eb:78:3a:fa:66:7b:f4:99:0a:18:80:d0:53:
                    ec:c9:80:a4:e2:58:f7:8f:35:61:cd:32:6a:22:ee:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:44:0D:46:A3:7B:77:FC:B3:8B:FF:64:52:49:1C:C9:98:B8:30:3E
            X509v3 Authority Key Identifier:
                keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e1:9b:8f:60:b4:e0:67:90:6e:68:15:00:3a:9b:5a:2d:bf:
         a7:01:91:02:82:39:c6:64:06:6c:9a:6b:17:10:90:0c:cf:35:
         93:97:2c:3d:f7:fb:f3:77:e9:2f:e5:49:bd:ad:b7:8d:1c:6d:
         61:13:82:39:0f:75:e6:e4:ee:f9:2d:03:f2:1d:bd:67:62:91:
         16:01:2c:f4:bc:67:bb:9b:11:a5:dd:08:b0:a3:22:27:35:8b:
         19:ea:ba:c9:68:85:05:19:f2:0d:b1:3d:65:a7:34:0d:5c:6b:
         44:ef:22:2d:b6:44:8f:7b:12:0b:0c:2d:1b:9a:b0:0f:af:43:
         d4:3e:83:f0:19:9a:74:07:9f:b8:f9:0a:7f:c4:0d:94:d0:b5:
         b1:7f:70:1c:8c:db:95:1f:6a:21:a0:5e:ff:f6:f8:b3:44:e0:
         1b:98:b5:f4:f5:ce:14:f9:7c:fa:26:bc:84:7d:1c:50:d4:c1:
         e2:95:1d:c9:fb:2f:de:da:38:9b:aa:23:71:17:f0:ef:86:79:
         78:bf:0c:20:a2:8f:d6:95:4f:70:84:6d:ab:60:85:29:f5:56:
         ff:64:3c:32:8c:39:81:6f:a7:b0:86:c9:36:d4:61:90:2f:03:
         5d:7e:f8:a8:0f:34:13:cc:8c:1e:9f:b2:c7:9e:00:b9:d3:3e:
         f8:3b:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:41 2025 by rpki-client on console.sobornost.net