Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
File:                     HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft (raw, json)
Hash identifier:          91P76TyT0Ctm/PixWteKeo1xpxjjIKlTm2CS1z7K1VQ=
Subject key identifier:   BF:01:5F:DA:29:2B:26:76:62:97:07:4C:79:20:57:44:8B:DE:1C:51
Authority key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6
Certificate issuer:       /CN=A91F3FAF/serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
Manifest number:          0177
Signing time:             Sun 27 Apr 2025 03:19:43 +0000
Manifest this update:     Sun 27 Apr 2025 03:19:43 +0000
Manifest next update:     Sun 04 May 2025 03:19:43 +0000
Files and hashes:         1: HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl (hash: h8Hi2zGlJXh7Vbw6HkjLN2F04+qrtamkPZSsvsAOV8Q=)
                          2: 5EDB6B50EE9311EF8EB9700BC4F9AE02.roa (hash: 7Nat9vEjm3uLFRu4zdaHZeOvfAimC/wAZ4j55cSSDsQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl
                          rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6
        Validity
            Not Before: Apr 27 03:19:43 2025 GMT
            Not After : May  4 03:19:43 2025 GMT
        Subject: CN=680da24f-1e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:6f:ae:ee:48:bf:c9:47:30:95:1a:d6:c9:
                    e0:fd:83:cc:f8:7b:a5:a2:9e:43:47:6d:b5:d0:eb:
                    a9:f5:64:41:49:a9:f1:a8:52:64:be:88:f3:3a:e3:
                    57:62:0a:af:cb:86:08:5d:08:ed:4a:29:a2:f4:0f:
                    ad:94:1f:c4:0e:6c:26:a2:76:2d:94:f1:ce:1c:80:
                    74:55:c6:54:1a:9f:67:88:3d:3a:74:9c:8a:85:cf:
                    d9:6a:62:13:b1:17:65:09:59:2c:58:a0:39:0e:27:
                    cd:6d:78:32:51:45:8a:89:e2:94:eb:2d:c6:07:bc:
                    ad:3c:79:21:75:35:b4:5d:cb:5d:f6:b3:e3:16:49:
                    ed:ee:07:6f:7f:5b:51:cd:6d:16:76:a0:ca:5d:74:
                    61:e9:f6:e4:ed:64:20:b1:68:96:19:b4:3a:e6:fe:
                    41:66:36:98:6e:8f:2d:17:aa:26:d0:82:e0:07:62:
                    27:5e:95:c1:dd:60:a7:26:f8:ce:21:82:39:6b:32:
                    bd:65:c4:59:90:e1:d7:bd:34:f2:7f:86:ec:ba:d5:
                    f7:ea:70:0d:07:c4:b6:aa:42:56:70:75:32:91:09:
                    06:49:f6:0e:7f:7b:f4:54:b5:c8:df:ba:1e:b4:50:
                    0f:99:45:3b:82:b3:3c:d6:2b:4d:1c:ee:3f:d6:9a:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:01:5F:DA:29:2B:26:76:62:97:07:4C:79:20:57:44:8B:DE:1C:51
            X509v3 Authority Key Identifier:
                keyid:1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:30:96:59:aa:47:a0:8d:a5:c1:f7:a7:76:3f:e1:6c:6b:3a:
         31:38:a3:96:c9:a2:ed:e7:c2:23:aa:75:d0:13:7e:9d:be:e3:
         cd:79:c6:ea:97:6a:0d:aa:1e:29:d4:4f:de:6a:c4:b1:30:f3:
         17:cd:03:82:16:94:46:0d:d9:76:a0:19:f2:2f:5b:0e:70:07:
         d6:ab:77:1f:15:af:fd:f2:11:e8:e4:4c:2f:d6:78:8e:23:ba:
         20:ce:04:ba:b9:b3:0e:76:f5:03:3c:55:94:90:8b:89:49:72:
         76:87:c8:84:ea:97:7a:e3:fd:5e:c2:d1:63:b4:66:76:64:db:
         41:58:8d:c6:2e:7c:af:db:35:e3:4d:8b:82:a5:92:14:ef:cf:
         70:a0:ac:bb:23:e4:b8:a7:47:34:f0:72:ff:a2:a1:31:4b:ac:
         c9:2a:32:0f:f7:9a:b8:f4:1e:a0:ee:3a:20:a6:8d:86:3c:21:
         63:e2:4d:60:0b:f8:28:86:05:43:9d:9e:1f:5f:4b:d1:96:3a:
         8f:b7:ca:10:46:be:69:07:6b:88:3b:c4:1f:bd:d3:c3:c9:27:
         6e:bb:e0:72:a1:ca:f1:17:e8:8f:b1:f2:e4:66:55:4d:0e:6c:
         47:d6:ea:70:bc:46:a5:f8:b0:e4:3a:62:4e:23:e8:f4:23:cd:
         1c:f2:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net