Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File:                     qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier:          xEYTvVwUTKPC1DD0n+V4VauOGM59UiehcryVnUj1LcI=
Subject key identifier:   88:05:18:48:CA:BC:25:93:66:17:60:D8:C8:AF:7C:3C:26:49:B5:FA
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       083F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number:          0828
Signing time:             Sat 14 Jun 2025 20:37:10 +0000
Manifest this update:     Sat 14 Jun 2025 20:37:10 +0000
Manifest next update:     Sat 21 Jun 2025 20:37:10 +0000
Files and hashes:         1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: kZkw/zxLs7BxexC/n+Z4EVg2SBd79oMOFzUcrfMUdkc=)
                          2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: QEmg34gYMLcRImmZXOGPqukjodjpiHJ4l1SGgXAsmiI=)
                          3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: d2hFjD7xeVN3cyOnjASfx1gXiQEjM5kCyEH2NHogTpU=)
                          4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Jun 14 20:37:10 2025 GMT
            Not After : Jun 21 20:37:10 2025 GMT
        Subject: CN=684ddd76-dbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:4e:83:b1:8b:21:65:f2:06:ed:f6:00:84:
                    f3:1b:e2:a5:54:ec:05:92:9a:5d:aa:d7:c0:cf:44:
                    44:38:dc:b8:ca:62:5d:4a:24:d4:a7:a5:0e:49:e2:
                    03:28:bf:7a:a6:d3:2d:75:d6:0d:51:26:95:34:94:
                    c0:4c:64:57:ae:e3:0a:69:8b:55:82:89:5c:16:de:
                    f2:10:96:b5:ac:7b:35:86:7e:21:4b:f0:73:f2:8e:
                    15:43:6a:55:21:ea:95:ee:52:0a:08:58:82:39:81:
                    b8:53:6b:ab:b4:4f:04:2a:d1:ea:50:33:5f:5a:8b:
                    23:a4:03:8a:33:05:cb:de:d6:0f:89:a8:de:a1:84:
                    0d:68:28:f7:54:27:13:f7:53:56:03:73:b3:ad:8a:
                    29:93:07:c9:53:b6:e4:7b:1a:88:78:17:d3:65:a8:
                    e8:34:a8:4e:00:15:16:83:d6:3b:d1:b9:5c:cb:40:
                    ce:78:ed:7f:6c:e0:b2:48:8c:81:95:35:71:92:33:
                    46:99:b5:f0:af:4d:35:6e:70:01:34:9b:fd:df:96:
                    6d:82:c4:8a:3e:18:f8:49:39:60:c6:9e:d8:0b:10:
                    dc:10:92:f7:07:ba:f9:1e:c9:af:2e:7b:4b:8d:ed:
                    4a:f0:c4:95:0d:d8:25:b7:f8:c9:6b:74:07:d2:df:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:05:18:48:CA:BC:25:93:66:17:60:D8:C8:AF:7C:3C:26:49:B5:FA
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:99:0a:bb:03:0f:6b:87:87:6d:de:9b:1a:0e:f4:23:ad:d7:
         42:4e:31:86:3a:98:ea:bb:c8:fe:4e:e5:d8:54:a0:5d:b2:dc:
         c6:65:6e:45:47:1d:c9:87:c4:67:cd:80:8b:70:59:c8:4c:fd:
         61:ee:2f:73:d6:24:08:ea:de:15:fd:66:15:99:c3:06:07:e3:
         cd:79:74:5c:37:eb:f8:f8:84:ac:f1:b3:a4:10:6d:79:da:e1:
         d4:aa:5e:9a:f4:70:cc:65:c0:2f:5b:f8:e3:44:53:fb:db:9f:
         98:d3:4f:eb:99:9c:dc:f4:3c:95:19:10:c4:3a:90:a8:cb:e3:
         83:e0:c5:e2:f7:06:f7:75:f7:c2:0e:f7:63:cb:c6:1f:9a:8e:
         78:07:70:60:50:a8:98:21:5a:17:06:39:60:92:81:22:ba:be:
         b1:07:2f:cc:c0:f0:17:fa:a4:a3:46:8d:09:9b:30:2e:d3:23:
         53:fb:5c:82:a2:7e:15:4b:3c:e2:cd:b2:e4:74:71:53:cc:96:
         ce:bb:e3:e9:5e:88:63:a5:c9:79:73:82:d7:ee:9e:16:28:77:
         96:ae:39:39:c0:bc:b2:95:14:75:de:8c:6c:64:97:58:67:1b:
         12:2e:c9:f8:aa:cf:c8:a9:8a:6f:40:dd:22:c4:6b:42:87:da:
         62:61:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:41:48 2025 by rpki-client