Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
File:                     qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json)
Hash identifier:          k31jP0qI0Zj7ZcfFr5XWTGmKpvSEUHzde7TYBK8Ff54=
Subject key identifier:   3F:4F:C6:88:8E:E8:A6:0C:1F:55:BD:1B:CA:41:3E:03:ED:99:04:90
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Certificate issuer:       /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial:       3203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
Manifest number:          31FA
Signing time:             Fri 02 May 2025 15:32:57 +0000
Manifest this update:     Fri 02 May 2025 15:32:57 +0000
Manifest next update:     Fri 09 May 2025 15:32:57 +0000
Files and hashes:         1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: agtDXaItiAInqz5j+LU+Dkm+a9CXHUI3R6DkPz3Prmg=)
                          2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
                          rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 15:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12803 (0x3203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
        Validity
            Not Before: May  2 15:32:57 2025 GMT
            Not After : May  9 15:32:57 2025 GMT
        Subject: CN=6814e5a9-7550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:ef:66:ad:1e:21:f2:d5:99:6b:0a:42:8a:
                    e9:f7:e0:a8:2c:69:11:cb:af:23:83:5c:36:b8:49:
                    50:a9:5f:17:c2:d6:d9:2a:75:7c:d7:35:0c:22:a9:
                    52:79:cf:f6:56:c6:7d:40:c5:d6:ff:17:d5:76:87:
                    6a:fb:1d:0f:63:6f:78:1d:dc:ad:74:15:96:81:e3:
                    4b:13:fb:8d:7e:7f:02:a5:69:2e:2d:41:57:2d:18:
                    3e:d7:6d:83:a3:35:87:70:97:c5:78:69:5c:28:8c:
                    7a:18:bd:0b:b9:c5:2c:f5:ac:be:6a:b4:57:5d:6b:
                    73:4a:e9:7f:fd:59:25:67:5e:4d:1c:61:f5:29:31:
                    e8:16:30:1b:52:bf:13:02:38:4f:6d:39:bd:32:28:
                    46:cc:79:d9:43:ee:0b:82:d1:7e:a0:88:85:92:99:
                    27:b3:89:34:c0:68:98:93:50:1b:7a:a4:aa:46:ae:
                    bc:b1:08:7e:96:b6:64:0d:11:88:01:41:05:8d:5c:
                    6b:89:f8:ac:a3:ff:ee:46:dd:cd:0c:14:71:a3:b1:
                    00:80:01:c5:ab:6f:19:0b:03:21:f8:c3:7c:00:ce:
                    ad:51:d6:a6:cd:48:10:c3:bc:e9:33:7d:88:8b:61:
                    8b:a2:4b:d0:58:d3:7f:0e:fc:d8:0c:23:48:43:26:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4F:C6:88:8E:E8:A6:0C:1F:55:BD:1B:CA:41:3E:03:ED:99:04:90
            X509v3 Authority Key Identifier:
                keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:30:e9:ee:65:98:22:df:32:7e:8d:e7:f2:41:f7:48:12:e7:
         ef:2f:0a:e9:df:a1:13:f6:e8:f8:18:b6:54:49:bf:8d:47:98:
         8b:02:8c:2a:1d:81:d6:9a:e9:9a:45:5a:68:b4:86:d6:57:06:
         19:fb:af:1c:ba:91:4d:ba:ff:bf:a7:bf:e3:6f:e8:e9:bb:2c:
         6c:72:fd:4a:d3:2d:67:4d:03:5c:26:52:79:c5:d8:ea:b0:c3:
         8d:88:2c:f1:e4:8d:17:2e:dc:ca:10:cc:49:d1:ed:0e:3b:09:
         a3:e7:6f:fd:dc:a3:14:42:58:b5:c2:d9:05:56:44:88:fa:d7:
         e6:23:ce:6e:1c:1e:25:49:57:84:cc:b4:13:45:12:69:c8:32:
         4d:3a:49:17:38:2b:77:c3:97:dc:3b:40:ea:9a:4b:68:2c:39:
         25:26:c4:55:8b:25:98:6e:bf:48:fb:63:6b:80:bf:40:7d:61:
         be:ed:e4:cb:8f:e7:29:5d:c0:65:de:08:d5:4e:08:cd:f6:56:
         63:2d:a9:b0:de:7e:54:7a:63:8c:2e:fb:72:b6:80:c8:8d:ce:
         39:c2:d9:1a:01:e1:5c:bd:d9:61:d5:74:ab:49:b3:cd:e6:50:
         9e:60:aa:50:eb:fe:3f:ff:13:14:c6:ae:b0:c8:cd:b3:34:4f:
         49:52:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:51:55 2025 by rpki-client