Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
File:                     HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json)
Hash identifier:          p+rRB+cH8spVf3A4DQm0VJNpvFZBQ8XMqddbl8wUovI=
Subject key identifier:   24:94:76:47:C5:BF:12:6C:35:0C:D1:F0:54:58:35:9A:22:E4:D8:A8
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Certificate issuer:       /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
Manifest number:          021C
Signing time:             Thu 03 Apr 2025 01:58:22 +0000
Manifest this update:     Thu 03 Apr 2025 01:58:21 +0000
Manifest next update:     Thu 10 Apr 2025 01:58:21 +0000
Files and hashes:         1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: sLrI/vFnt0S6lf10bq8ch3Bixse4h0t7IHbp3C90FEU=)
                          2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: hGQixG8nIJXVA0JQORYC8z0pOj4UbTutn+kvPqmH25s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 01:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EACB9
        Validity
            Not Before: Apr  3 01:58:21 2025 GMT
            Not After : Apr 10 01:58:21 2025 GMT
        Subject: CN=67edeb3d-2ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:50:41:51:8c:7e:e2:08:b8:f6:7e:e8:24:
                    85:1b:de:fa:e2:72:17:3a:09:e0:cc:9e:89:df:11:
                    4f:bb:54:5f:ef:0d:dc:84:53:ed:b2:9e:c5:d3:80:
                    be:58:1b:d4:4c:89:2c:c6:7f:a2:c0:7b:25:61:ef:
                    9c:01:3b:28:df:9b:b8:e9:87:3e:e7:19:cb:54:3e:
                    7d:87:aa:f9:16:81:54:e1:38:7c:3c:31:c9:a3:3e:
                    eb:ea:1c:ae:b9:ba:a8:9d:0a:ae:d0:28:36:b4:b5:
                    c8:08:08:08:9a:83:b9:df:dc:d3:48:de:19:38:d9:
                    67:32:33:a1:91:08:7f:ae:20:e3:b9:9a:35:b0:8d:
                    f6:6d:b7:ce:18:dc:e0:27:2a:1c:a1:73:43:94:82:
                    a3:c0:bb:7f:8a:54:1b:64:c4:d8:82:9d:ba:17:c4:
                    98:cb:54:96:0c:34:67:1e:30:f0:b3:c1:8f:a5:31:
                    7e:d5:9f:d5:04:18:2b:35:f2:88:d4:0a:42:58:c6:
                    61:37:da:af:c7:bb:25:5f:0a:c1:81:e7:ec:f0:7b:
                    2a:a5:56:0c:89:91:e3:28:1b:11:25:a4:af:c6:af:
                    d4:be:06:1c:03:cd:a7:79:6f:ac:3c:e0:c8:ce:f1:
                    19:5f:06:d2:34:23:ac:d5:41:22:21:8d:50:96:3b:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:94:76:47:C5:BF:12:6C:35:0C:D1:F0:54:58:35:9A:22:E4:D8:A8
            X509v3 Authority Key Identifier:
                keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:82:11:c5:d3:08:c7:8c:79:ba:1d:e8:c5:fa:57:2f:c2:05:
         04:8c:7d:1b:39:86:f9:6e:77:5a:95:13:5a:7f:32:24:19:b0:
         64:65:31:75:6f:52:8d:61:da:57:75:ad:36:24:c4:50:3f:f4:
         8e:e2:45:9b:81:14:43:75:92:27:29:23:d5:79:2b:4e:e0:b2:
         8c:f4:53:3a:0f:86:93:d1:78:0f:44:07:53:dd:fd:59:57:64:
         12:36:17:23:56:57:b7:74:0d:ad:a7:9f:36:54:20:78:38:2f:
         05:e8:53:d8:4f:5e:7e:32:12:4b:05:5a:89:f5:e5:9e:14:53:
         d3:bc:b2:3d:3e:4b:63:c9:38:b0:63:98:87:40:1e:c5:09:22:
         bf:3f:95:d4:55:28:58:bc:da:36:ba:27:86:27:1c:a4:e2:72:
         fc:db:de:ed:13:88:49:02:21:d9:49:ab:f0:f4:c6:eb:59:7b:
         31:88:cc:d2:92:44:5e:48:e3:d2:60:23:e2:ad:70:93:9c:7a:
         99:a5:95:7f:c7:7d:d9:3d:34:b0:e4:50:5b:b1:67:50:02:bc:
         47:79:57:64:33:9b:83:30:72:b3:9f:5f:5e:51:49:79:66:3c:
         56:ec:c0:de:0a:94:4a:53:e7:d6:fd:14:54:ec:54:f4:88:d6:
         3b:f9:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:43 2025 by rpki-client