Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File:                     HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier:          GpJ3k/8JSOAWGy8u7dNJFx2O8FLlTO2+3Pnx8kPnx9s=
Subject key identifier:   0B:94:7A:24:74:B2:26:9F:AA:06:AD:91:3C:E2:76:8E:8A:48:78:62
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer:       /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial:       0B6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number:          0BB3
Signing time:             Mon 12 May 2025 18:56:36 +0000
Manifest this update:     Mon 12 May 2025 18:56:35 +0000
Manifest next update:     Mon 19 May 2025 18:56:35 +0000
Files and hashes:         1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: clc4twyygd/BvChQMphgJf86KMT6K5OfgH5MFvTjR/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2923 (0xb6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
        Validity
            Not Before: May 12 18:56:35 2025 GMT
            Not After : May 19 18:56:35 2025 GMT
        Subject: CN=68224463-bf26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:4e:32:3a:40:61:39:71:57:22:ea:24:9b:
                    19:a8:94:d2:ab:a8:ea:d0:79:0f:3d:55:bf:d9:93:
                    b9:0c:bb:00:aa:59:26:15:64:b1:a7:68:7c:f4:8e:
                    70:77:44:de:13:af:99:89:c9:39:ee:51:98:50:00:
                    3f:e2:af:f7:3c:4e:2f:dd:0f:28:36:a2:55:c4:3e:
                    11:fd:68:1e:37:39:22:c2:ea:de:de:89:9b:81:47:
                    16:de:fd:2b:98:f4:6c:ad:d3:af:4b:9b:b0:ac:e2:
                    eb:ed:24:a0:43:ae:fd:0d:1a:85:1a:3e:af:15:a4:
                    5f:32:3e:2d:a7:9c:4f:6a:c3:3b:df:69:4e:79:3b:
                    1a:67:06:dc:c9:10:8b:52:90:d0:00:50:73:3d:d1:
                    ce:30:1c:86:3d:ce:fd:24:8f:aa:e4:bd:e1:17:e4:
                    28:01:10:31:ca:b3:ba:46:5a:f6:dd:52:57:f8:e9:
                    7d:bc:10:19:1a:73:28:65:ec:a8:de:e0:ac:dc:41:
                    7a:88:a3:6d:34:b0:7d:f4:1d:74:78:02:8f:af:6a:
                    03:0e:cc:cc:6f:08:53:f3:f9:67:b8:cf:53:75:23:
                    2a:9f:8e:fc:cc:83:81:f9:39:65:37:f3:ff:d9:b4:
                    f3:5a:15:1d:51:55:d3:f5:b3:e4:b0:5e:68:1c:08:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:94:7A:24:74:B2:26:9F:AA:06:AD:91:3C:E2:76:8E:8A:48:78:62
            X509v3 Authority Key Identifier:
                keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:89:e5:a1:c0:08:2d:f1:08:52:89:f7:e2:87:7b:a2:f3:74:
         1d:44:a9:36:41:3d:12:d4:2f:f0:49:22:12:9f:dd:02:4f:99:
         00:25:6b:de:6e:14:1a:20:4c:15:34:4a:1e:5f:79:be:eb:74:
         25:28:33:ab:cf:3e:ae:4c:33:40:45:dc:04:c5:2d:06:b0:d5:
         62:3c:2c:fb:38:27:7f:cf:df:71:70:48:02:45:8d:e7:29:11:
         19:91:4b:af:c8:4a:17:44:a8:5a:7c:61:fe:dd:47:a6:ad:84:
         d3:2e:2b:f7:86:bf:22:3d:3a:bc:58:3b:c5:fc:fd:56:a0:3c:
         9b:e9:f7:d5:f6:85:0d:ba:9e:20:7b:08:bb:32:a6:68:2e:db:
         09:20:b5:90:e3:f8:9f:3b:9b:09:ed:6e:c7:89:4c:c6:68:10:
         19:70:aa:b5:5d:3e:e7:80:e1:60:cb:88:d5:5a:3c:19:f2:05:
         b4:0d:90:99:39:7f:33:15:48:80:40:9e:05:6c:6b:15:47:44:
         fc:7b:e2:1d:de:20:ec:f9:c4:46:02:48:8f:d9:72:44:8b:94:
         7d:30:ed:68:8a:0c:66:6e:9e:cb:61:76:36:44:74:c8:de:f2:
         40:0d:ab:2b:4a:a9:30:8d:59:76:35:a2:a9:ad:3f:24:81:cc:
         f6:92:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:39:29 2025 by rpki-client