Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
File:                     g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json)
Hash identifier:          MmdSstlxtgiSYtND+LH3L5lVk+GshibYAu+gNgTMFOo=
Subject key identifier:   81:27:8F:4F:90:70:C9:BF:36:D1:C6:5F:84:32:CF:AE:71:85:D8:F2
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
Manifest number:          0162
Signing time:             Fri 25 Apr 2025 03:19:28 +0000
Manifest this update:     Fri 25 Apr 2025 03:19:28 +0000
Manifest next update:     Fri 02 May 2025 03:19:28 +0000
Files and hashes:         1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: isuo3nlzQ+1qCi0cXw0C9YATjiKPg4oY5boy3/rnPb0=)
                          2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 0HkSWoIqELp3ylHO6VoceHK/AkbpkOqVqSCheHiI6Uo=)
                          3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: n8VX91JedlAvIqLFu7Bl3QhQfuPAxDc2ekOd4lvr+ec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
                          rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Apr 25 03:19:28 2025 GMT
            Not After : May  2 03:19:28 2025 GMT
        Subject: CN=680aff40-0e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:42:4e:39:82:d3:35:50:f2:ff:04:63:1f:
                    35:92:e4:8b:58:49:90:61:ec:d3:9f:e5:13:58:c7:
                    29:5f:67:e4:c2:42:ae:ed:b9:91:57:d7:fa:aa:2d:
                    47:47:16:be:72:b1:12:42:b0:15:79:b3:a6:84:cb:
                    72:b2:35:89:c4:52:5b:ac:84:99:1d:fd:cf:e9:3e:
                    d3:aa:44:18:21:2a:75:71:4b:b4:ad:71:2f:a0:01:
                    34:bf:dc:d5:86:52:70:19:86:d6:18:2b:ea:ef:3f:
                    66:ae:5b:8c:0d:08:25:72:1a:bb:cd:06:2a:dd:97:
                    43:c3:42:12:9f:92:fe:63:e8:7b:f8:6e:91:ec:93:
                    fe:2c:de:67:1f:b6:5f:52:9f:c5:cc:8a:ba:61:07:
                    66:78:12:fd:92:1e:b1:47:1d:5f:40:4c:5e:ca:cc:
                    1f:96:09:4a:22:cb:ef:08:37:79:5c:82:8e:8c:5b:
                    50:ab:0f:6d:27:c2:a1:23:1a:f9:8a:22:63:78:d6:
                    b4:bb:c4:33:b9:f8:ae:ab:2c:2e:e7:56:74:3f:92:
                    7b:4c:5f:83:65:99:42:72:9c:7a:23:9c:25:d5:dc:
                    98:7b:bc:a2:a9:b7:a9:39:b3:9a:fa:84:9d:42:fc:
                    b8:f6:70:30:8c:e0:03:be:dd:ad:42:ad:7e:97:04:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:27:8F:4F:90:70:C9:BF:36:D1:C6:5F:84:32:CF:AE:71:85:D8:F2
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:89:43:3d:c8:62:5a:d1:18:74:87:41:53:e7:08:a2:b7:64:
         7a:11:29:97:ad:9d:4f:cb:55:c1:ec:f5:3e:0d:7c:6d:02:27:
         26:d4:ad:8a:cd:44:da:44:16:14:76:3f:0a:49:e0:9b:fd:1d:
         8f:e7:7a:dc:d5:c8:b5:cf:d5:c9:56:8c:51:3b:26:b7:7f:c0:
         c3:83:86:85:4d:b4:53:1d:3f:de:d6:71:60:f8:df:b0:36:4c:
         6a:26:03:be:c4:12:38:0f:c3:a8:dd:ea:02:b4:06:3a:fd:20:
         bf:8e:20:87:0d:8e:7d:57:65:1b:d2:c6:dc:c4:45:12:9c:a5:
         d2:f3:73:d7:f5:89:c6:d0:14:83:58:43:92:ba:47:2d:69:6f:
         7f:58:8e:80:05:7c:64:da:00:09:fa:4f:89:ab:9a:fb:24:72:
         7f:93:fd:a3:e2:7b:9f:96:f5:66:80:4c:b1:3a:86:77:93:34:
         2e:11:3b:f4:24:87:10:72:18:f9:70:93:04:b2:2c:3f:55:d5:
         10:f2:b1:e4:cb:16:ef:d3:62:93:f8:fa:4c:dd:af:9f:0b:29:
         34:40:c8:57:7c:c1:92:f2:d9:94:4a:ec:e1:cf:3d:32:37:77:
         83:6e:d1:82:5d:d8:32:a4:e2:8c:3b:1c:a1:12:29:f3:74:11:
         ca:ab:11:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:46 2025 by rpki-client