Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          LFSVfKLn+oWJ3UQtsKHLgvHUu90DvbSovv0XjTKmdm4=
Subject key identifier:   4B:F0:69:E6:3A:84:71:8E:7E:85:27:E8:A9:2C:EF:71:BA:61:54:32
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0CC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0C01
Signing time:             Thu 24 Apr 2025 19:03:55 +0000
Manifest this update:     Thu 24 Apr 2025 19:03:55 +0000
Manifest next update:     Thu 01 May 2025 19:03:55 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: bhp8cASoCw1Tjs9lr2fMaLVzIw2dKBPhjV3DGVjljQw=)
                          2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: bH9ZC4QgjmS/I58+FDGDPuH33W9RsPxq1Xz3UvWrsE8=)
                          3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: MTAUWchwVeKxoXJgsd9CSOqi1gXkAXO05abtX//8zz0=)
                          4: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: Bbke0XmmIxWIWeMRBoj+nBwWgM3xQtB71wXvSJ5bc/c=)
                          5: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: onKAfoZCCQvGFRb8T+pywq7Otmi4UdU6B4vavVOep80=)
                          6: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: 08kq3N2T6u9VBQ7SP6eASP9Fa/uiNzMCtB0p+sr0X3w=)
                          7: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs=)
                          8: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=)
                          9: 9C294BEEE9B111EF8FD3E36DC4F9AE02.roa (hash: JnGAM1wsHp5wW5YUc/+ZGIE9EUUS5JBbavsugytK8eo=)
                          10: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zZr/wa0m1rFLaToJf+3XeU5H/f8ci0Eq6bfOYc73d3k=)
                          11: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg=)
                          12: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: X9BJWqFkDoO3Z1AnX2rwWIVc/LG4OOcRfPspBGbkn40=)
                          13: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: ddZXmXMp+inqC1tu9O/Re3vjJXmPn1T/+0+8I6WAPIc=)
                          14: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: 2GnDplQiwMAlUAy3xpN879Pw+i4tKoxvTJrAxvUorrE=)
                          15: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=)
                          16: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: bv2/9mHV5hvQUwYa7AUUUWrf3R41IAn85lkqotp1enw=)
                          17: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI=)
                          18: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: obVSxBoAnqffXMDTd+Z9+Lr3d6TSTuDzUuAxF1nefiI=)
                          19: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: qWKBqzVZNaIWfle8O0qZvhFMlwqBUkUBmN22bjyzZlw=)
                          20: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q=)
                          21: DE0563C21F7111F0A41C9D84C4F9AE02.roa (hash: DPPDsUuLV78/5+KBuh51JsOidIpZY5CzHFHdoKE0S1c=)
                          22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: nX+JdTppyQxuLXZd5ew3GC3f/sbog2Yk6PdmM9yWumY=)
                          23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: 4i6VJPAbegLRPG1TiRgqleRdlv3u9kO2DBkdXwrkMys=)
                          24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: 6WaRYsNX6RMzPE3WdzfKlbLBu0LngwxXI10OdHloqKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Apr 24 19:03:55 2025 GMT
            Not After : May  1 19:03:55 2025 GMT
        Subject: CN=680a8b1b-c117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:3d:31:d2:cd:92:df:82:05:8c:21:06:d3:
                    0e:8e:c0:a6:04:7c:4c:88:be:14:0e:db:51:e6:5f:
                    10:61:df:d0:04:8c:4e:e1:90:1c:a9:b3:1f:4c:db:
                    c0:0f:3b:0a:ce:8b:6b:74:e5:6c:62:48:8a:b6:87:
                    f0:3c:9c:df:2b:77:cf:58:4f:80:97:25:fb:f1:01:
                    14:a4:26:80:5e:01:b7:3f:98:e2:e0:fd:f8:21:16:
                    dc:74:be:34:3d:5c:3c:36:1a:52:1d:b1:4a:db:84:
                    f0:0b:35:6e:ff:13:8c:94:63:fe:4e:f1:e6:02:34:
                    2f:98:71:2d:d9:7e:0b:f1:fd:2b:ad:98:fc:32:49:
                    ef:52:67:03:d6:97:b1:19:13:86:da:9f:ab:65:75:
                    a6:6e:7b:4b:46:30:37:f3:2b:6c:d2:d8:1b:ef:7c:
                    0b:2c:b0:2a:6f:86:44:41:a9:30:70:b8:b7:e0:e8:
                    46:01:c9:25:2b:5c:66:5a:01:7e:ed:fa:0a:58:1d:
                    3f:5b:a4:b3:6e:d8:85:06:49:cb:fb:e5:7b:17:49:
                    f0:7b:2b:94:94:60:ab:bc:a3:53:b7:10:cd:90:f8:
                    31:26:3b:6f:d4:fe:d5:32:72:24:82:80:3f:ae:a4:
                    e5:35:31:19:9e:52:0f:3a:38:20:f4:c1:e6:46:b5:
                    c0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F0:69:E6:3A:84:71:8E:7E:85:27:E8:A9:2C:EF:71:BA:61:54:32
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:72:3e:52:78:fe:f3:e5:ac:dc:83:05:bc:77:59:24:21:
         44:ba:e6:a0:5c:11:0d:88:45:32:bd:f3:6b:fc:37:22:85:d0:
         e3:0d:aa:ae:2b:39:49:44:b2:a5:ec:fa:f2:7d:d0:a6:3d:8b:
         5a:3e:3d:89:28:2d:99:cc:db:f2:17:1a:f0:c9:74:74:7e:33:
         5c:8c:46:80:2b:ee:68:57:65:4d:00:9b:20:12:06:68:6a:b0:
         0c:7b:b6:c9:79:c0:8b:0e:fa:bb:76:51:79:44:8a:a9:ac:f9:
         c4:83:5c:39:75:28:14:1f:ae:60:67:0e:96:81:bf:bd:b9:63:
         2d:e9:cf:14:3c:82:6e:c6:93:ef:24:ef:a8:26:59:fd:69:6a:
         af:0b:4b:85:46:b9:fe:ce:f5:14:4c:9a:53:74:22:e2:b7:19:
         b2:38:af:2e:c9:a5:ce:3b:34:37:07:45:e8:29:1c:ac:fe:a1:
         ae:cd:f9:81:57:eb:42:57:c7:77:25:b8:1c:3d:52:f3:3c:a2:
         20:9a:d2:c0:da:e8:9a:d3:7e:18:c7:33:77:cd:cc:06:11:5f:
         e6:4a:09:fc:ac:cf:b8:ac:c4:19:7c:0d:4b:d8:ea:1d:10:a0:
         dc:12:8c:e4:38:31:a3:e5:a0:a6:8b:b6:98:49:e7:1a:1d:da:
         ed:91:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:01 2025 by rpki-client