Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File:                     q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier:          kTJ47dSCJdlxHPe6pTEWTr19aY8v2PnS/YnY4AasZwk=
Subject key identifier:   DE:C3:1E:8F:90:D7:A0:43:CC:C6:5F:65:D5:78:E2:2C:B9:6E:3F:B3
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number:          0714
Signing time:             Sat 26 Apr 2025 21:35:24 +0000
Manifest this update:     Sat 26 Apr 2025 21:35:24 +0000
Manifest next update:     Sat 03 May 2025 21:35:24 +0000
Files and hashes:         1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: 2UpB6Hj8inEAUfKvRNwsM3syxtTnTo6cRtpu5FMBru8=)
                          2: 1E812B043A9611EB8CD4224BC4F9AE02.roa (hash: 2rloIWspoTdsayqQCE8TDyVLzZgtkvVp6yhHBSi7B7A=)
                          3: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: TlDhnldYuakAwxJhMCiNbVx6zqDuO+DOexXHVfVHcu4=)
                          4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: R7FrPdkL1ySrHNC5nrqzQKSqKbGci3RcVPsSdrI/vVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 21:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Apr 26 21:35:24 2025 GMT
            Not After : May  3 21:35:24 2025 GMT
        Subject: CN=680d519c-582e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:29:94:94:04:20:ab:56:35:15:2e:83:40:
                    d4:34:12:24:ee:80:c2:f8:da:33:d7:2d:ad:d9:21:
                    cb:92:23:f2:1c:c9:76:fb:85:20:8f:a9:a3:9c:b9:
                    86:59:67:ab:20:1a:9d:0d:47:cb:e4:ab:ca:51:a6:
                    be:58:b2:b3:e5:76:f3:31:0c:fd:76:44:d9:8e:bc:
                    ee:46:77:26:50:a5:74:bf:01:a3:f3:ae:17:ab:e8:
                    03:33:38:ad:97:28:30:9a:95:9d:30:8a:42:83:9e:
                    32:7a:28:bc:39:2d:2c:6f:1b:5b:7d:bf:62:c5:0b:
                    fb:a2:dc:a3:62:d6:5a:ed:0e:ab:4a:52:fd:1e:37:
                    99:90:16:20:64:e4:d2:fb:7c:3e:20:8f:54:15:96:
                    26:53:e9:65:82:03:87:7d:2f:96:6a:6d:03:6d:d1:
                    15:ac:c0:e6:0b:6d:a9:7a:75:04:bc:f9:3e:04:dc:
                    3d:8b:e1:41:8c:62:fa:dc:5a:07:33:57:ef:58:b4:
                    7c:b2:27:81:d4:a3:e6:60:52:93:10:24:f2:a9:f3:
                    46:86:60:ad:35:dc:65:a9:52:7a:8c:e6:84:c7:83:
                    df:80:8c:17:b5:d4:43:61:9e:04:6d:75:8a:2b:f4:
                    89:f5:5e:59:fe:2f:de:92:c7:cb:5e:8c:b8:02:a7:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C3:1E:8F:90:D7:A0:43:CC:C6:5F:65:D5:78:E2:2C:B9:6E:3F:B3
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:39:a5:c9:22:fe:c5:42:0f:a6:2b:58:0a:13:c5:55:f6:21:
         b1:d3:c8:03:11:ce:06:00:85:4d:29:29:5b:b7:4a:c2:c2:6b:
         e4:9c:d2:dc:a3:44:6f:72:4a:21:6c:0f:be:10:d4:2a:64:47:
         0a:64:a7:42:52:b2:3f:d4:be:4b:45:ad:60:87:60:ab:8c:9f:
         5a:67:78:b7:3a:85:3e:c1:dd:07:87:d2:18:fd:fd:7d:86:96:
         13:2d:67:d4:20:98:e1:4c:e3:71:04:51:2b:87:94:ed:40:f6:
         80:7f:5e:3f:66:d7:3b:fa:9b:53:aa:02:2d:60:36:09:d4:c5:
         80:09:2f:f3:ce:df:b6:2e:56:6f:e2:7c:11:e2:c0:53:4e:67:
         06:be:ea:84:3b:cc:ad:a2:0a:df:c1:06:a2:c6:2d:35:f1:58:
         d6:ef:8b:5a:42:02:8f:e3:ef:fa:ad:fa:63:37:b2:58:49:55:
         c4:28:fa:0e:d9:d3:4b:c8:c1:41:83:35:a3:51:9e:57:18:36:
         3b:42:1e:75:0c:e9:f6:13:11:03:44:b7:b6:ed:33:88:86:4b:
         5f:d1:20:bd:91:21:4d:4a:b8:29:12:ee:9e:10:fb:df:4d:0d:
         b5:47:f4:7e:6e:fb:aa:f7:5f:78:7c:64:4f:c3:ae:5d:af:65:
         3b:24:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:23:53 2025 by rpki-client