Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File:                     qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier:          E23BAI+hONkxvO/jghBlWIzI0kcoZKWdp+527g1veWM=
Subject key identifier:   C4:69:E8:C3:29:1E:C1:96:36:25:5C:44:1B:78:51:01:D5:E9:6D:4F
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer:       /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number:          01B4
Signing time:             Thu 19 Jun 2025 02:41:28 +0000
Manifest this update:     Thu 19 Jun 2025 02:41:28 +0000
Manifest next update:     Thu 26 Jun 2025 02:41:28 +0000
Files and hashes:         1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: l9wL2Nluq4krlIqLjGnbEf3MTX2O5AzSw/E3TqWxfss=)
                          2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: li4OxnhOQgQRujPF67sN5Xz793LOnzHpSZGFaFwRWYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
                          rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
        Validity
            Not Before: Jun 19 02:41:28 2025 GMT
            Not After : Jun 26 02:41:28 2025 GMT
        Subject: CN=685378d8-10b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:ea:e6:00:19:d6:ad:7d:fb:23:a9:06:2b:
                    a7:0c:1b:3a:65:7a:b1:51:fc:e5:14:cb:6c:09:ec:
                    40:9a:e3:0e:8b:a6:38:c9:23:71:0b:c5:68:e3:01:
                    cb:42:b6:99:de:37:95:ff:4e:c5:cd:4b:50:46:c5:
                    1f:58:83:62:3c:99:a2:b9:d0:53:fc:11:fc:95:03:
                    6d:8b:48:da:67:5f:2d:e2:2a:94:b4:b7:c0:de:80:
                    fb:b9:c8:c1:fe:0e:a4:77:6b:6b:1e:b9:9c:51:9a:
                    31:c6:34:cd:d6:17:55:2c:55:a7:7e:73:90:e1:01:
                    e7:78:89:2f:c6:62:5f:ac:46:7b:28:b1:b0:16:89:
                    8d:8a:92:38:8a:39:72:21:67:93:aa:33:36:78:c6:
                    0f:5b:05:d6:31:6a:cd:41:03:ba:ad:b4:1c:fd:ca:
                    01:29:5a:96:6b:3b:8b:ad:7f:b9:b2:9c:c7:83:fe:
                    3e:41:9a:66:ef:b1:a1:2b:a5:bd:36:cb:74:e2:c7:
                    a3:54:bd:96:38:00:a6:96:a5:a8:eb:f8:41:e5:62:
                    55:02:19:45:b4:39:b8:e9:6a:eb:74:22:4f:4c:56:
                    53:3e:6d:72:0a:9b:63:18:34:fa:de:af:d9:61:e5:
                    d7:a6:16:40:95:0a:12:4c:da:85:b6:8e:d5:6b:39:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:69:E8:C3:29:1E:C1:96:36:25:5C:44:1B:78:51:01:D5:E9:6D:4F
            X509v3 Authority Key Identifier:
                keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:c8:40:45:c6:80:24:9a:02:fd:5f:73:0f:cb:96:eb:0e:
         ef:6e:bb:26:51:92:ce:36:43:7d:da:78:54:c7:a9:5c:6e:9f:
         c3:b2:dc:e3:9e:55:4d:6d:49:65:d5:08:77:41:6e:67:2c:d4:
         6d:c4:24:a2:aa:51:be:a3:bd:38:80:4d:5d:fb:de:c9:09:38:
         cd:58:e4:38:de:73:9f:25:8e:8c:39:21:9c:50:5c:bc:cc:3c:
         14:6d:fa:c7:27:8b:a8:99:36:30:ce:18:a7:34:50:7f:29:3d:
         83:28:5c:79:79:a1:57:14:91:ed:57:77:c3:b8:8c:b5:dc:98:
         4d:cb:73:81:3c:10:ae:39:5f:16:10:73:12:db:30:0c:e4:43:
         7d:3c:06:8a:d9:ac:9d:20:38:c6:af:32:00:d7:38:10:43:d4:
         35:08:55:e7:0a:0b:4d:b7:6f:8d:a9:9a:5d:1b:20:8d:af:f0:
         c5:5f:dc:ff:77:6f:d4:7b:36:e1:46:33:fa:1c:42:55:ee:a8:
         48:b4:e1:cf:52:53:2b:28:ab:98:af:95:d4:4f:78:da:20:de:
         66:1b:3e:e0:2d:cc:ac:30:f2:9d:83:79:e3:4d:c1:41:4d:cd:
         d4:0e:c2:30:e6:2b:27:6d:e6:37:a2:c1:6e:d3:19:29:1c:0f:
         86:3d:b9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:22:26 2025 by rpki-client