Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File:                     HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier:          A9Q1UVRYvFh/6srixrVb/9WvXWI+/GbsRubYC6ZFeUA=
Subject key identifier:   B1:69:58:5F:B3:EA:CC:B2:EA:0A:1C:BE:E3:EE:40:CA:DB:CB:64:1C
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer:       /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number:          013D
Signing time:             Fri 25 Apr 2025 03:35:57 +0000
Manifest this update:     Fri 25 Apr 2025 03:35:56 +0000
Manifest next update:     Fri 02 May 2025 03:35:56 +0000
Files and hashes:         1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: CgmIpRaW5D3BmI0txeKTe1+P+DVd/zbgNYjh673jhoA=)
                          2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: kdsA/bny2SyuYzwYvWjWWNRHht/7GqZqRAtQE/oZ56I=)
                          3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI=)
                          4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: jLjyxuzoihO6U4uZj4lE+4ZXFm13Tj1cLNw88yjt4fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
                          rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
        Validity
            Not Before: Apr 25 03:35:56 2025 GMT
            Not After : May  2 03:35:56 2025 GMT
        Subject: CN=680b031c-fa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:93:fa:74:0c:94:5f:f2:1c:0f:5f:c7:f2:00:
                    be:b6:60:b6:6a:82:af:42:72:0d:d9:46:42:17:11:
                    5c:95:05:cd:5b:e8:3f:b6:9c:37:97:66:a4:78:3d:
                    16:02:07:03:8a:d5:61:af:04:e4:ee:08:02:04:9a:
                    43:c5:60:e7:e2:b5:8f:2f:b9:d5:cc:7b:e3:2e:1e:
                    c0:26:26:38:00:e5:e7:e6:c5:17:f6:ae:07:56:3b:
                    54:a4:64:fd:4a:73:9b:5b:15:82:f0:94:ad:83:f0:
                    59:d2:09:63:d0:d3:ad:9a:89:c7:16:84:01:a0:db:
                    42:d7:b6:f7:9b:81:76:f5:5a:c7:58:6e:cd:40:f1:
                    f8:e8:10:f9:6d:92:6c:28:fd:2a:f3:45:0e:3a:99:
                    02:f9:52:44:a4:3a:a6:81:49:21:fb:ca:c0:d3:85:
                    6d:a6:2c:15:89:03:e4:3b:0f:ea:1c:74:21:30:af:
                    fd:ea:4e:4d:37:4b:d8:5c:f8:01:0d:3f:65:9b:46:
                    6a:9a:5b:8a:73:aa:cc:5a:0b:7a:70:90:95:41:41:
                    de:5a:55:68:30:19:30:6c:80:f3:d9:b8:d4:0a:62:
                    a6:96:bf:9d:1b:31:97:f1:73:46:3a:62:2d:d2:cd:
                    0f:39:23:ef:fe:a2:02:10:11:38:a7:2c:13:d0:8b:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:58:5F:B3:EA:CC:B2:EA:0A:1C:BE:E3:EE:40:CA:DB:CB:64:1C
            X509v3 Authority Key Identifier:
                keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:87:cd:57:d9:37:b9:3b:c0:b6:08:b3:72:84:ae:6e:83:fa:
         09:2f:d0:ad:54:0a:9c:b8:f6:1c:aa:19:7d:3b:65:0d:e7:3d:
         03:3e:d1:dd:28:82:7d:c4:48:54:78:ec:dd:44:4c:91:5f:8a:
         0c:1c:93:20:47:45:e5:2c:c1:60:96:e0:e5:78:f9:84:21:6a:
         da:16:9c:42:d4:ef:9f:4b:e2:74:f0:ca:71:4e:87:31:f0:75:
         c9:11:e5:46:59:3d:cb:3f:c2:c3:d2:a4:09:f1:63:65:6e:9c:
         c9:a8:96:1f:31:1f:34:98:d0:96:06:d4:a1:f4:48:95:52:cc:
         42:bc:d9:0a:69:35:02:38:ff:ed:d2:10:be:75:cd:dc:b1:77:
         08:6a:0a:95:63:fe:74:1d:a6:29:c3:1b:2f:aa:d0:cf:00:d8:
         9e:35:d5:27:3a:13:86:d3:67:77:e9:75:6b:c6:79:08:66:a0:
         e6:7d:fa:1b:02:85:a7:f1:ec:bb:01:fc:99:dd:d3:44:1e:2f:
         fa:d0:2a:0c:38:ae:24:51:15:07:a3:72:3a:23:ae:a1:af:26:
         4a:5b:e5:97:3d:0d:c2:88:de:ab:f3:e3:07:0e:51:43:ff:fe:
         31:a4:1c:25:9d:6a:fd:61:10:0a:f2:d2:59:46:19:77:ca:b5:
         0e:de:5f:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC
NzgxMDUwNzAwHhcNMjUwNDI1MDMzNTU2WhcNMjUwNTAyMDMzNTU2WjAYMRYwFAYD
VQQDEw02ODBiMDMxYy1mYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA55P6dAyUX/IcD1/H8gC+tmC2aoKvQnIN2UZCFxFclQXNW+g/tpw3l2akeD0W
AgcDitVhrwTk7ggCBJpDxWDn4rWPL7nVzHvjLh7AJiY4AOXn5sUX9q4HVjtUpGT9
SnObWxWC8JStg/BZ0glj0NOtmonHFoQBoNtC17b3m4F29VrHWG7NQPH46BD5bZJs
KP0q80UOOpkC+VJEpDqmgUkh+8rA04VtpiwViQPkOw/qHHQhMK/96k5NN0vYXPgB
DT9lm0ZqmluKc6rMWgt6cJCVQUHeWlVoMBkwbIDz2bjUCmKmlr+dGzGX8XNGOmIt
0s0POSPv/qICEBE4pywT0It29wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFpWF+z
6syy6gocvuPuQMrby2QcMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw
MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX
N0xQcTduOHNxWDYzZ1FVSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkh81X2Te5O8C2CLNyhK5ug/oJL9CtVAqcuPYcqhl9O2UN5z0DPtHd
KIJ9xEhUeOzdREyRX4oMHJMgR0XlLMFgluDlePmEIWraFpxC1O+fS+J08MpxTocx
8HXJEeVGWT3LP8LD0qQJ8WNlbpzJqJYfMR80mNCWBtSh9EiVUsxCvNkKaTUCOP/t
0hC+dc3csXcIagqVY/50HaYpwxsvqtDPANieNdUnOhOG02d36XVrxnkIZqDmffob
AoWn8ey7AfyZ3dNEHi/60CoMOK4kURUHo3I6I66hryZKW+WXPQ3CiN6r8+MHDlFD
//4xpBwlnWr9YRAK8tJZRhl3yrUO3l9T
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:35 2025 by rpki-client