Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
File:                     e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json)
Hash identifier:          AQHtxQzh6CghIZXvUQuB0/pzW8S36NiHygIr4jjhQso=
Subject key identifier:   23:DD:03:DD:3C:39:4C:9D:6A:3C:3D:CC:5B:51:98:80:B0:78:84:8B
Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
Certificate issuer:       /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
Manifest number:          015F
Signing time:             Mon 05 May 2025 02:56:19 +0000
Manifest this update:     Mon 05 May 2025 02:56:19 +0000
Manifest next update:     Mon 12 May 2025 02:56:19 +0000
Files and hashes:         1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: zHRf0yAnKT/qoNbLw8waJjmvua3k47Z/GDqkAskCkac=)
                          2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: 1DTHOwSIeyOlP/85nvDSKsIu+CBj2ErQg5LShUWz4KA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
                          rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 02:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
        Validity
            Not Before: May  5 02:56:19 2025 GMT
            Not After : May 12 02:56:19 2025 GMT
        Subject: CN=681828d3-a883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:31:69:ea:5d:98:54:14:65:b4:75:3e:70:
                    dd:4b:4c:88:a6:9d:bc:7d:80:60:b6:7f:cf:89:d4:
                    bb:48:29:6e:8f:85:55:14:ad:92:c7:56:2e:8a:74:
                    9f:b8:cd:b6:63:19:69:b2:d4:32:12:a8:e3:00:cb:
                    50:e2:97:3d:3d:37:ab:cc:61:6f:ba:1c:f0:10:47:
                    f3:92:ad:dd:29:cf:04:ff:c1:06:a2:a9:10:f7:5a:
                    6a:c2:05:a2:e4:de:bc:b3:b9:82:cb:9b:bb:a0:c7:
                    58:c7:a4:5e:49:2a:0d:fa:4c:61:62:13:c1:2b:f8:
                    1a:f0:59:05:b2:95:10:6c:17:b9:18:5f:e4:a3:55:
                    59:ec:b0:bc:83:02:48:3e:08:de:fc:d7:d7:25:e7:
                    a0:07:4c:02:87:9e:9d:82:d5:de:09:1f:3d:19:f1:
                    ed:f5:4e:30:dd:43:4f:4e:5e:65:94:ff:05:b8:a1:
                    07:73:50:de:d0:c2:6a:05:3c:02:b7:bf:d3:4f:98:
                    10:4a:08:d0:f8:06:ce:2e:8c:a3:c4:72:45:3d:4e:
                    9c:91:b0:24:a8:91:78:5d:f0:9c:fd:0a:44:e3:04:
                    14:ee:df:df:b4:0e:db:04:f0:50:5b:50:3e:ec:5f:
                    33:fe:b7:a0:46:84:a9:99:3b:c3:4f:88:d3:bf:34:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DD:03:DD:3C:39:4C:9D:6A:3C:3D:CC:5B:51:98:80:B0:78:84:8B
            X509v3 Authority Key Identifier:
                keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:dc:bd:60:8a:92:7b:a4:8c:00:41:a4:08:08:e9:b8:4e:eb:
         3f:57:27:a1:16:a1:d9:08:9e:6f:b2:6d:7c:e9:78:a1:7c:4b:
         c3:21:06:e3:58:0f:e0:a0:bf:c2:fd:fc:e4:ed:35:c3:67:a0:
         df:24:d5:74:d5:38:38:06:09:51:51:e0:ad:d0:61:4c:5b:12:
         de:4a:1f:b8:f7:71:13:7b:90:0f:63:6f:df:0a:dc:80:1e:39:
         4c:9b:a7:25:06:ce:e8:65:9c:1b:af:30:8d:67:cc:e4:96:f6:
         92:97:94:f4:64:56:24:53:0b:63:b7:3d:ac:8f:31:09:3f:3c:
         a8:28:73:02:13:ed:cc:6f:91:c8:05:15:d9:24:33:1b:d0:ef:
         88:28:a6:09:6f:7c:51:ec:1a:c5:a3:22:58:71:4a:6a:52:02:
         8b:2b:8e:6d:a9:e9:0c:9c:45:38:f2:cc:19:19:9d:8a:2e:48:
         82:e8:e9:50:57:95:92:92:7e:1d:fe:d1:97:c1:57:06:c6:27:
         fa:d8:f0:61:fb:89:80:b8:22:97:09:df:5c:bd:0e:50:34:34:
         ac:fc:11:0f:7b:34:00:83:2b:5c:71:21:a6:d1:47:7f:af:4b:
         7b:42:7c:cf:b7:8c:a1:51:76:c7:f9:99:55:d8:d2:c0:a5:9c:
         27:1e:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:48:03 2025 by rpki-client on console.sobornost.net