Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File:                     q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier:          FN3RMTAOpo0z5RiFUchRneEfLTu8abiBDrz6Ak1CXXg=
Subject key identifier:   17:45:F0:DF:DA:0B:E9:55:F0:8D:CD:7B:62:43:35:AB:BF:29:92:F3
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer:       /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number:          0171
Signing time:             Fri 25 Apr 2025 03:12:52 +0000
Manifest this update:     Fri 25 Apr 2025 03:12:51 +0000
Manifest next update:     Fri 02 May 2025 03:12:51 +0000
Files and hashes:         1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: E+7kzF9DmxuxW8ptriYd0EbIQT26HbNHHwuH3cOsXlA=)
                          2: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: kG8HKid+EZkU/hyqnFNZ4Dj2sC9Icf/i925ERR1UGyw=)
                          3: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: 7BVmNepQES6T7o+2bZV/zc2Q9T00B1Q0rsuk0jHEIvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
                          rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
        Validity
            Not Before: Apr 25 03:12:51 2025 GMT
            Not After : May  2 03:12:51 2025 GMT
        Subject: CN=680afdb3-4881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:36:01:f1:6e:0b:f1:18:48:4c:c9:08:66:
                    ec:07:e0:0b:e6:43:d3:9f:8a:46:6d:6f:6d:37:69:
                    7c:a1:40:bc:c6:a8:9a:5e:ea:61:99:38:e3:a2:54:
                    41:9f:86:b3:d0:25:7f:f1:78:3b:68:50:79:61:78:
                    ff:b9:73:fb:d7:37:95:d0:69:67:83:d1:61:d3:df:
                    24:1e:c7:6c:ed:cf:65:d8:ec:6a:c4:d6:fe:7b:73:
                    8f:62:0e:d9:aa:07:6b:1f:b1:fa:ac:2d:5e:b2:80:
                    f6:34:1d:37:69:d3:c7:7d:8c:cf:25:14:6d:7b:01:
                    e6:aa:8f:05:80:6d:7f:59:8a:71:d7:da:74:e2:2b:
                    4b:e1:ea:32:da:f2:b0:a8:e9:44:e8:a6:d7:80:75:
                    9c:44:7e:84:d6:6a:19:f0:2f:de:6d:35:26:0a:11:
                    14:7a:45:c1:1b:db:79:00:a0:cd:61:4e:c9:af:d5:
                    56:ff:68:c5:6a:3c:8f:c3:22:ec:fe:ed:88:0a:80:
                    b6:18:6f:f9:dd:8b:6a:15:b9:4e:6d:d3:c1:68:3e:
                    ea:69:35:34:84:c9:ac:e1:70:ac:16:a7:6c:39:02:
                    2f:dc:ef:52:71:e7:00:ee:9b:af:81:6c:4f:31:99:
                    01:48:d1:41:79:73:8a:a9:11:92:df:d9:45:8e:2b:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:45:F0:DF:DA:0B:E9:55:F0:8D:CD:7B:62:43:35:AB:BF:29:92:F3
            X509v3 Authority Key Identifier:
                keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f2:e0:c1:cf:bc:e1:b7:e4:64:da:30:a1:a2:c9:33:a2:f3:
         95:98:3a:ff:29:bf:70:3e:03:27:1d:7a:c0:14:cd:bc:a0:30:
         38:19:40:79:06:87:86:f0:4f:b1:79:e6:0a:26:f4:6f:d1:62:
         21:a6:8c:b3:3c:38:3c:87:bf:16:a4:8c:f0:4b:68:25:08:6d:
         a3:e1:53:93:bc:79:be:2d:f8:18:58:42:33:85:6d:f1:77:13:
         f8:18:9a:f4:7d:8f:e3:53:67:a1:98:e2:ec:ac:67:6a:30:f4:
         df:cd:77:12:77:6c:09:34:2f:1e:f9:19:90:eb:19:df:94:06:
         0d:97:41:fc:0c:43:ed:4c:79:33:ed:64:aa:86:65:0b:28:d9:
         bc:6b:ad:12:eb:43:4d:0c:86:84:5f:b4:a2:77:7e:e2:42:5f:
         71:ea:39:b4:24:99:e9:c2:4c:7d:41:a2:fa:ef:3f:57:e1:1a:
         24:a3:ea:2d:14:45:d6:f8:a5:3c:6d:fd:e5:68:4f:47:c4:97:
         9e:18:21:53:dc:8a:66:12:94:4f:a4:f0:1f:89:01:9f:f4:0d:
         90:0b:41:42:15:4e:35:98:69:50:88:73:96:5b:a1:84:d2:16:
         25:81:ff:78:41:01:11:ca:10:ee:2d:22:05:1b:78:c2:f1:91:
         3e:ed:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:34:58 2025 by rpki-client