Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
File:                     HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json)
Hash identifier:          A1VjRETxmN8E6RrE2VDeb5eJYpYSn8LV2zjApfG7ngU=
Subject key identifier:   6A:CB:00:9A:C9:B6:56:B2:6B:BB:BC:EB:41:68:3B:34:96:F0:18:71
Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
Certificate issuer:       /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
Manifest number:          39
Signing time:             Sun 27 Apr 2025 06:22:16 +0000
Manifest this update:     Sun 27 Apr 2025 06:22:16 +0000
Manifest next update:     Sun 04 May 2025 06:22:16 +0000
Files and hashes:         1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: o3mCLH4bN27wZrMiKAZANPAPyJeCkr4Grb6ha2tMCZg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
        Validity
            Not Before: Apr 27 06:22:16 2025 GMT
            Not After : May  4 06:22:16 2025 GMT
        Subject: CN=680dcd18-28e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:1a:32:51:76:03:d5:d4:cc:01:34:b3:f4:
                    8f:68:0e:75:1c:96:26:cd:15:5b:61:b3:08:82:a6:
                    c2:2c:3b:99:b3:fc:3a:d6:23:b7:77:11:a4:98:a1:
                    0e:77:0a:d8:95:6d:5c:9a:ff:dc:d2:4b:57:1f:6c:
                    02:d1:7d:47:5d:da:63:13:0f:37:c6:66:ab:6b:ef:
                    63:7b:12:fc:fb:62:df:43:d5:d4:b7:01:b2:52:95:
                    47:a6:83:76:98:d0:06:bb:27:09:c0:1b:78:28:10:
                    32:f8:e5:3e:fa:77:79:d5:0e:4c:62:b5:da:f5:b9:
                    bf:c0:2a:bc:d0:a4:2e:40:71:f2:06:5b:72:d0:77:
                    c2:18:5c:6d:38:ad:48:77:74:54:57:63:ce:31:ff:
                    86:f7:40:e8:ff:4d:cc:77:84:66:17:d6:22:5d:d7:
                    d8:08:b7:30:c5:9b:91:70:d8:11:69:c3:5e:bb:59:
                    4d:8f:f3:2a:9c:0c:4b:c1:cd:50:eb:e4:a5:ce:ae:
                    29:da:22:a8:0a:42:c5:c1:bf:ab:16:0a:02:25:27:
                    25:e2:15:af:1e:f2:60:ec:47:01:d3:73:d8:65:96:
                    94:88:99:a9:95:74:32:13:bd:67:7c:b0:dd:56:8c:
                    27:74:88:b5:7a:27:f1:37:33:ee:a7:2c:42:67:10:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CB:00:9A:C9:B6:56:B2:6B:BB:BC:EB:41:68:3B:34:96:F0:18:71
            X509v3 Authority Key Identifier:
                keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:96:34:00:a6:de:2d:fd:79:5e:2f:e4:6d:f8:b0:7d:14:d8:
         a5:18:9d:ac:61:e2:c5:21:f5:cf:8c:78:26:4f:18:e2:30:95:
         e3:7c:4b:b2:b5:83:63:f0:3d:10:dc:d0:31:3b:b8:57:5d:71:
         85:5e:87:bc:2a:47:26:3e:1f:d8:14:6c:2d:ec:61:ef:27:23:
         d1:eb:2a:96:f1:19:69:0b:8a:ca:da:fd:69:62:c5:86:8c:bd:
         ca:c2:4c:7b:fb:a7:21:a8:97:4c:23:a7:78:5a:0e:4c:fe:2d:
         2f:90:f3:18:52:d0:e8:03:df:82:87:cc:39:63:99:51:75:04:
         f5:54:92:e8:be:9c:5b:75:5f:51:85:96:d2:ab:0b:8e:33:00:
         bc:0d:cf:03:6d:f5:d5:1a:76:d2:f4:42:88:54:d0:14:d1:e3:
         ed:0f:48:3c:21:b8:d3:5e:0b:36:c8:5e:0b:c2:df:9c:a1:22:
         96:62:f6:d8:31:b6:d6:d0:fb:80:1c:fb:e4:20:eb:7a:7a:db:
         34:f9:3c:2a:f9:ff:70:06:62:63:0c:ae:b1:90:cf:e2:aa:82:
         95:cc:32:1e:7a:e8:f1:35:6f:9d:62:b2:4d:3d:14:97:9d:45:
         ad:ce:20:7e:ad:2e:77:f0:8d:36:20:34:ca:8c:b9:a1:48:d6:
         96:0c:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net