Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
File:                     qtqjxEEWYN9cNEipHISuV1eibhM.mft (raw, json)
Hash identifier:          utfIJ8OJT9Kn9pjVISqUSosQSnMhVOajiD2jY2DO4ok=
Subject key identifier:   9A:26:76:C5:5C:D1:32:34:2E:C8:AC:85:C4:CD:E2:E4:0D:83:4E:A3
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       06A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
Manifest number:          0693
Signing time:             Thu 24 Apr 2025 22:03:14 +0000
Manifest this update:     Thu 24 Apr 2025 22:03:14 +0000
Manifest next update:     Thu 01 May 2025 22:03:14 +0000
Files and hashes:         1: qtqjxEEWYN9cNEipHISuV1eibhM.crl (hash: 0EowfyZoBRLmtQ/BoK4HqiKKmt6Ca1Pf6P2/4sOs33c=)
                          2: E349FB7A6B8B11EBA041C843C4F9AE02.roa (hash: pH5N/Qx1YY5gq3cEOXWljF1Kkz3BHRfE8oyjPHPjT5Q=)
                          3: E4C0040A8C8C11EBB81BA228C4F9AE02.roa (hash: zHLsyhTV60ZHxvQdwbDX5bbqYkoP6kC08f+Bv/mppKY=)
                          4: 9D181A24D78211EC944E227FC4F9AE02.roa (hash: yUMXKBsm+dh5a8mwbXbljjnmOf1V4J6P/dOjZa9dbcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D, serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: Apr 24 22:03:14 2025 GMT
            Not After : May  1 22:03:14 2025 GMT
        Subject: CN=680ab522-bf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:ea:9f:2c:8c:7a:bc:69:61:18:99:0e:01:
                    f7:d0:9f:13:8a:82:c0:9c:64:be:63:e6:e2:a8:f0:
                    2c:79:d9:39:a2:15:06:c4:fd:1d:bd:2c:32:98:82:
                    7c:a6:b5:b6:09:c2:a8:cb:67:7c:5f:77:d0:46:f7:
                    94:75:54:a3:b8:32:8d:07:0c:e5:58:82:bd:55:55:
                    f8:ce:c0:96:bf:f8:9f:da:c1:e5:7f:e6:49:e3:ea:
                    4f:05:4d:e7:77:39:80:cf:23:9e:9b:56:ce:85:96:
                    52:2e:62:1b:01:6e:d1:f4:37:ca:38:4b:6b:53:94:
                    9e:f0:33:e8:6d:a2:37:cd:b8:4f:8b:82:7f:99:4b:
                    3e:90:18:9e:5d:4b:63:2f:5b:aa:e0:7e:09:be:f3:
                    fc:67:7a:45:fb:fb:7c:b7:aa:4c:38:b0:59:6e:b3:
                    11:73:25:5e:8c:d0:03:85:48:0b:a7:e0:a2:3a:5c:
                    63:b2:1a:8c:15:53:c5:ce:7c:f1:d7:4c:87:f2:62:
                    7b:b4:e8:59:8a:ab:4c:53:77:59:4e:e3:83:19:60:
                    b1:d0:ee:9d:cc:10:12:de:d9:e0:f2:ec:ff:0a:de:
                    53:0b:a2:0e:aa:6e:29:90:03:cb:2a:73:30:43:bb:
                    bc:38:18:f9:65:1c:78:8d:e2:61:60:0b:c7:c5:ac:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:76:C5:5C:D1:32:34:2E:C8:AC:85:C4:CD:E2:E4:0D:83:4E:A3
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:24:4a:75:6e:50:9f:d4:8a:39:33:6d:4d:ba:17:55:b5:52:
         7f:63:cb:4e:b4:84:6d:19:88:b5:5b:6a:ab:44:12:fa:40:7c:
         19:d3:27:cd:cf:07:b4:d1:0b:c4:3c:12:1f:03:b2:9c:b3:b4:
         f5:9f:5a:97:01:f3:69:3b:cc:81:ae:83:81:71:fa:ab:1b:35:
         f0:b9:95:5f:88:93:d1:73:8c:f6:99:55:f0:9f:dd:43:ad:06:
         2e:a5:bf:96:9b:1f:d1:2a:a8:0c:90:b2:c4:c8:42:c2:05:f6:
         38:86:a9:85:bb:94:27:82:07:df:24:b2:a7:4a:54:fc:b7:e5:
         c5:66:c1:72:4e:46:d6:3f:67:a7:22:b5:7a:3a:52:7b:a4:ac:
         8e:14:e7:e1:aa:5a:13:78:ab:d8:1c:68:e8:da:aa:74:df:5c:
         f2:31:7d:81:f5:f9:58:30:6c:7c:53:fe:54:ed:04:90:48:99:
         02:06:b1:17:d5:55:e0:15:64:96:03:a6:01:3a:6b:fc:e8:b1:
         6a:1a:8a:fc:c1:37:ce:03:d0:fc:88:6d:e0:81:67:7e:bb:70:
         94:c3:d0:7c:03:30:38:d1:48:78:40:68:ff:de:f9:56:aa:ef:
         44:4d:31:9f:a5:f8:44:ab:c2:87:ea:54:75:6f:61:32:5a:a0:
         a2:c2:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:18:33 2025 by rpki-client