Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File:                     qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier:          3kXwrriYrpJpmADWH7lhyXQTAKBMxj6h6kMCK/34dtg=
Subject key identifier:   77:5F:D5:1B:FD:BC:37:92:0E:50:FF:B3:DD:B6:EF:B3:6A:8A:C6:28
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number:          0102
Signing time:             Fri 25 Apr 2025 04:15:13 +0000
Manifest this update:     Fri 25 Apr 2025 04:15:12 +0000
Manifest next update:     Fri 02 May 2025 04:15:12 +0000
Files and hashes:         1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: LrsaAHS7BKOINm37DrRm17qVEq/s+2hMGAXLGIPilck=)
                          2: E13D8940342E11EF84328672C4F9AE02.roa (hash: ktd5mpPgnA7DVPoDoDI59fbIVSssBE9h3J/Qc3SNd4I=)
                          3: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: 57MB5MLOBu0rlKWbYAUFlVy0tWIAfHRyTSUm9GeesCE=)
                          4: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: 53exXb+y74MMiXd9WVR4Lvbmf3aqTfFbV9OKgS6dCTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Apr 25 04:15:12 2025 GMT
            Not After : May  2 04:15:12 2025 GMT
        Subject: CN=680b0c50-bfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:72:1a:ee:cc:bf:7a:5d:a5:02:e7:a6:1b:
                    55:ca:81:41:b1:3e:33:d4:c5:12:92:92:6c:eb:51:
                    f3:a5:7a:ea:98:f6:19:85:17:27:2d:8e:35:32:da:
                    c2:1f:db:5b:0c:65:db:9d:61:23:6d:b5:d0:76:b8:
                    92:64:90:ab:de:0c:ff:bc:21:e5:8e:b5:b4:ba:9d:
                    e6:44:56:67:82:43:d6:b3:e6:47:a0:57:fd:ad:2f:
                    9c:ef:21:59:c2:d2:39:18:25:64:36:b3:83:7a:5e:
                    84:78:45:01:e4:bf:f4:b6:95:85:82:8a:31:aa:f6:
                    30:e4:d4:9b:39:65:57:bc:12:8d:75:dc:9d:a9:85:
                    f7:cb:a2:58:2f:d4:ec:a7:0e:f3:aa:95:c5:f7:79:
                    0f:da:a4:a3:5d:f7:d1:7d:3a:c9:45:73:f3:17:f4:
                    d9:80:a9:03:ec:cb:53:e3:9f:51:2d:d6:65:20:3f:
                    12:4b:3f:86:2b:1c:dc:dd:4f:95:f5:2f:96:4e:2f:
                    5d:f1:b8:ab:0e:d8:37:06:4c:70:c6:20:07:5c:49:
                    59:a3:11:4c:3e:a8:9a:88:3a:62:ab:ec:17:a6:15:
                    16:f4:e9:d2:24:cc:52:05:27:c7:62:5f:f2:8a:99:
                    45:64:31:5b:c7:ba:cf:6f:be:91:56:05:e5:37:b7:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5F:D5:1B:FD:BC:37:92:0E:50:FF:B3:DD:B6:EF:B3:6A:8A:C6:28
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:02:3c:7c:fd:5c:bc:06:db:39:72:ed:c6:01:87:62:67:eb:
         d6:3f:2b:6a:ae:22:18:9a:be:5a:02:a2:92:95:3c:5d:41:1b:
         f5:6b:4d:ef:bb:c0:c7:7f:fb:33:d0:cd:a2:8b:f6:33:d2:39:
         cc:a4:5b:fe:1d:ae:85:a8:40:57:58:16:77:38:80:33:ed:07:
         3f:8b:4a:eb:b3:9e:3a:0b:5a:ef:3e:4f:31:f2:03:fb:f5:b7:
         a5:8d:75:ae:e7:8b:68:69:34:34:0e:87:bc:ec:8d:6e:fe:c4:
         84:60:d9:c8:4f:92:9a:87:71:f2:19:04:71:7f:f4:1c:c0:0a:
         b9:96:62:35:d9:3c:3c:41:b9:24:e9:3b:47:60:f7:48:86:e0:
         0e:35:6a:25:a8:d8:fe:0a:2e:3e:6c:0f:18:54:b7:d7:61:b1:
         a6:ec:4f:11:53:8c:14:30:c7:da:75:44:46:32:03:ef:39:c7:
         28:e1:ab:7c:27:66:c2:8f:eb:c4:e0:97:4b:40:68:13:3d:05:
         12:9c:93:dd:09:d6:7c:7f:f9:7b:82:2e:fa:b8:01:9c:6f:94:
         4d:99:6e:57:f6:41:f1:0b:00:7a:07:20:4e:00:30:2c:b3:14:
         0f:fa:17:fa:f8:87:ef:a9:fc:09:5f:12:ad:20:c9:37:06:f0:
         63:53:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:04 2025 by rpki-client