Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File:                     HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier:          a5IUm/bs/HeGekzAtmoQC4SlaWlIg5tgQiQVPyeRZBA=
Subject key identifier:   C5:51:30:9A:D9:7F:25:7F:22:70:87:65:DD:DE:40:E6:D8:A1:39:6C
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number:          012D
Signing time:             Sat 29 Mar 2025 03:58:43 +0000
Manifest this update:     Sat 29 Mar 2025 03:58:43 +0000
Manifest next update:     Sat 05 Apr 2025 03:58:43 +0000
Files and hashes:         1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: vhcwMKC12UeByXMR4BuQ48bL+b6F51ieLTT+IQUOFDo=)
                          2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: kMBmqA1/dyDv1ZADsMkGis7eLU/R9lLG3vYr3JHV36o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D
        Validity
            Not Before: Mar 29 03:58:43 2025 GMT
            Not After : Apr  5 03:58:43 2025 GMT
        Subject: CN=67e76ff3-a2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:2f:be:ab:f2:7e:0b:30:be:29:07:65:0f:
                    b6:df:43:f8:35:16:0d:06:24:c7:cb:4c:91:b7:ca:
                    f7:42:e0:da:1f:61:b7:12:c5:2d:3b:b2:47:1c:29:
                    d7:11:6e:c5:35:eb:1d:a3:2c:98:8a:88:1f:16:46:
                    8b:51:cf:d1:ad:45:a9:02:3f:29:29:9e:19:49:8a:
                    4d:b4:43:b5:8d:e3:4d:5a:c1:b5:c3:ca:d2:e5:ac:
                    a1:81:f2:ee:e0:f1:91:39:e1:56:4c:6c:24:33:3d:
                    8b:23:d4:e5:70:60:48:91:37:14:c0:20:cd:a8:32:
                    15:c6:01:b0:f5:f0:f7:42:75:af:07:d8:e3:13:d3:
                    1b:a0:5a:8f:70:06:9c:d5:b8:ac:19:db:1e:15:02:
                    33:de:d2:63:0f:90:4a:35:76:cf:eb:9c:bf:09:b0:
                    fe:d4:8f:37:fe:83:90:b9:40:49:80:9f:7d:2d:c7:
                    e7:09:9d:1f:3e:9e:eb:3d:8a:f2:3f:e6:f9:6c:bc:
                    9c:09:6a:e9:dd:55:8d:2e:cf:0b:0b:ce:91:c7:c9:
                    cf:3c:61:75:06:fe:73:89:d3:22:11:b5:3b:fd:d3:
                    8f:43:7c:85:d0:4f:78:eb:19:4c:6c:42:f2:f0:6e:
                    af:29:c0:5f:ad:7a:91:10:29:4e:d2:e9:de:de:39:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:51:30:9A:D9:7F:25:7F:22:70:87:65:DD:DE:40:E6:D8:A1:39:6C
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a8:3f:a7:50:20:34:a1:ed:19:b2:33:5b:52:15:d4:78:4f:
         e5:dd:5d:b6:b6:07:e1:95:b6:97:11:bc:47:9c:f9:45:7f:67:
         4b:e7:c4:17:8d:e1:db:87:c4:9a:e4:6f:27:96:26:f5:82:37:
         fe:4e:81:7b:9a:7c:2d:29:4b:e1:54:21:d2:e4:4d:72:34:3e:
         b8:92:e8:a8:6a:91:b3:c8:14:c2:9f:2e:fa:d4:75:be:36:44:
         bd:ad:fb:11:ac:e1:d3:e7:a8:8f:63:5c:31:3c:03:90:a2:cc:
         29:6f:79:53:82:0d:51:be:db:5e:2e:c4:c7:d9:ef:b5:46:2d:
         a7:69:fe:da:34:de:73:f0:de:3d:00:61:04:74:c3:ce:6a:7d:
         f1:04:ad:e5:c1:85:c7:62:cc:18:8e:cf:66:2f:b9:6f:ec:c0:
         79:84:9c:24:52:a3:8e:db:1d:0e:0e:e0:83:fe:b0:5d:91:6d:
         4b:d8:53:b7:3e:e9:4f:7f:a1:4f:82:dd:cd:ef:87:b5:d3:a0:
         39:70:66:63:e4:a4:cc:89:49:6b:fd:41:8c:98:07:f9:c9:d8:
         9e:fb:58:88:97:11:d7:d0:9c:dc:85:89:1a:2a:2d:d0:f5:58:
         f5:d5:d1:e6:11:5a:61:bc:ef:49:a8:1c:0c:a3:19:2f:39:fe:
         f8:6d:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:14 2025 by rpki-client