Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
File:                     hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json)
Hash identifier:          ZUyoHM1KUX30fsol6UYm2aCfe+AKp1y6XvT668A9Kbs=
Subject key identifier:   58:67:61:F3:27:28:67:27:B8:47:8A:97:AF:25:B4:5E:D1:A5:A9:61
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Certificate issuer:       /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
Manifest number:          E3
Signing time:             Sun 27 Apr 2025 04:25:07 +0000
Manifest this update:     Sun 27 Apr 2025 04:25:07 +0000
Manifest next update:     Sun 04 May 2025 04:25:07 +0000
Files and hashes:         1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: AvUynxCVrYQTXFG3BnicJAX3H86xXQ5va+J7fvl6sMk=)
                          2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
                          rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
        Validity
            Not Before: Apr 27 04:25:07 2025 GMT
            Not After : May  4 04:25:07 2025 GMT
        Subject: CN=680db1a3-5060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:6a:8d:c2:b5:0b:23:f3:7b:94:4c:7d:00:
                    c1:65:ea:4f:d4:7f:2a:fe:64:ff:c2:68:33:e4:1d:
                    08:c6:a8:e0:44:45:96:4e:45:92:5d:0d:80:58:c5:
                    3c:30:41:05:16:78:fa:4f:e2:05:2d:11:dd:9f:f0:
                    c9:0d:0b:f9:1e:63:bb:77:5c:85:23:c3:63:61:94:
                    32:37:db:ea:bb:fc:7b:9b:8e:74:dd:e2:10:27:7c:
                    dd:bb:b7:02:1f:55:e8:ce:38:7c:06:01:11:fc:0b:
                    c7:a3:1d:6a:ab:66:59:42:eb:d5:bc:02:8f:f4:8c:
                    06:55:b8:5f:62:76:82:a8:3b:79:39:cf:91:89:16:
                    bf:34:88:f1:92:c2:08:5e:8f:c9:e9:e8:2a:34:5f:
                    39:b8:fc:08:c8:bc:58:7f:64:33:8d:d0:7b:bc:8b:
                    08:ba:8e:ff:05:bf:2f:95:9b:8c:0c:c2:67:94:5b:
                    da:27:42:78:72:e9:e0:be:af:d4:3b:23:1a:8a:0f:
                    92:17:30:39:e1:2d:e2:8a:ee:09:d1:87:c6:1a:0b:
                    e5:16:4f:2d:b3:4a:78:fc:9d:7e:f9:80:d5:33:66:
                    46:57:5a:29:67:f8:4d:8e:d3:76:85:b6:6d:65:db:
                    ea:82:da:ae:78:77:e2:af:a7:61:af:51:a2:e4:0c:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:61:F3:27:28:67:27:B8:47:8A:97:AF:25:B4:5E:D1:A5:A9:61
            X509v3 Authority Key Identifier:
                keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:db:17:98:d9:7a:0e:0a:aa:56:0b:c2:19:9e:4a:49:2b:54:
         c0:b1:90:93:e3:c6:3f:9f:fb:c7:f5:5f:c9:de:24:9c:90:fd:
         30:5e:0f:f5:33:f7:d2:4d:8a:e7:11:8a:a9:84:fe:70:c9:77:
         bc:36:fb:9e:7c:d1:b9:82:e9:46:69:64:60:c7:fd:97:c8:16:
         5d:fe:20:e9:c3:89:2c:bb:2a:5a:6b:b3:9f:b9:d4:b8:1c:de:
         52:d4:b9:db:23:91:33:c9:ac:3a:27:7d:39:f1:ee:c2:df:b8:
         71:2c:f7:86:a5:12:50:91:d0:48:c4:cf:d4:32:4f:ae:35:e7:
         97:33:bd:fb:8d:e7:58:97:ee:1a:fd:cc:e8:74:fb:f5:2b:ec:
         de:b1:ec:4a:6a:07:c2:17:2f:0f:9d:fe:17:37:59:13:86:75:
         ce:45:fc:89:55:71:15:a4:8c:40:aa:6e:4a:e0:e5:14:09:17:
         06:c1:38:73:18:ae:03:96:bf:c0:9d:b7:73:2c:0a:17:5b:18:
         e3:36:0d:02:68:af:e6:b4:51:0f:da:1c:7c:ec:59:6d:dd:f7:
         7d:25:8e:5d:b4:8a:5d:8f:20:6e:e8:6a:ad:2b:e0:0e:0f:12:
         82:6f:85:1d:29:c7:2a:85:e1:27:e4:f3:0f:b1:9d:0a:a8:a1:
         b6:af:84:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2
Nzc1NTBBQzgwHhcNMjUwNDI3MDQyNTA3WhcNMjUwNTA0MDQyNTA3WjAYMRYwFAYD
VQQDEw02ODBkYjFhMy01MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYxqjcK1CyPze5RMfQDBZepP1H8q/mT/wmgz5B0IxqjgREWWTkWSXQ2AWMU8
MEEFFnj6T+IFLRHdn/DJDQv5HmO7d1yFI8NjYZQyN9vqu/x7m4503eIQJ3zdu7cC
H1Xozjh8BgER/AvHox1qq2ZZQuvVvAKP9IwGVbhfYnaCqDt5Oc+RiRa/NIjxksII
Xo/J6egqNF85uPwIyLxYf2QzjdB7vIsIuo7/Bb8vlZuMDMJnlFvaJ0J4cungvq/U
OyMaig+SFzA54S3iiu4J0YfGGgvlFk8ts0p4/J1++YDVM2ZGV1opZ/hNjtN2hbZt
ZdvqgtqueHfir6dhr1Gi5AzHjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhnYfMn
KGcnuEeKl68ltF7RpalhMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx
MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0
Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB32xeY2XoOCqpWC8IZnkpJK1TAsZCT48Y/n/vH9V/J3iSckP0wXg/1
M/fSTYrnEYqphP5wyXe8NvuefNG5gulGaWRgx/2XyBZd/iDpw4ksuypaa7OfudS4
HN5S1LnbI5Ezyaw6J3058e7C37hxLPeGpRJQkdBIxM/UMk+uNeeXM737jedYl+4a
/czodPv1K+zesexKagfCFy8Pnf4XN1kThnXORfyJVXEVpIxAqm5K4OUUCRcGwThz
GK4Dlr/AnbdzLAoXWxjjNg0CaK/mtFEP2hx87Flt3fd9JY5dtIpdjyBu6GqtK+AO
DxKCb4UdKccqheEn5PMPsZ0KqKG2r4Ra
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net