Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft
File:                     CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json)
Hash identifier:          /s6T7H0aR3GpK5SBU4IAetPfF+Pkvyt/UDtt8+FMUMo=
Subject key identifier:   B4:FE:B7:44:1B:58:72:7E:1C:87:37:A7:80:CD:AF:A2:F0:BE:7A:F1
Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB
Certificate issuer:       /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft
Manifest number:          01BA
Signing time:             Fri 25 Apr 2025 02:23:32 +0000
Manifest this update:     Fri 25 Apr 2025 02:23:32 +0000
Manifest next update:     Fri 02 May 2025 02:23:32 +0000
Files and hashes:         1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: +kv0i4jy0RJ7u9qaxIYxIiVTKslnxBLQYiJ38mhOpiM=)
                          2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: m6rZeuVTK1YDhuaaIVhiTv3yauwN9+tcZ5dIfBdhpRQ=)
                          3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: mAZNBvYiKFXdkzpTN4tNBsnyhqKr4h/2Tyrx/kSmdy8=)
                          4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: Vaf4WstL1N3DSV5lZGZocpmDqTwW1A3D3RH6q2VNIFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl
                          rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB
        Validity
            Not Before: Apr 25 02:23:32 2025 GMT
            Not After : May  2 02:23:32 2025 GMT
        Subject: CN=680af224-b78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:4a:77:f5:ca:5a:e8:1c:3e:89:22:c0:e1:
                    69:9f:96:69:5a:c3:2c:c8:f1:9f:29:56:56:a2:3b:
                    3e:3a:46:67:81:2f:cb:08:82:09:5c:9d:f9:92:5b:
                    65:9e:20:46:7a:1e:b7:30:51:36:4f:f4:2b:be:34:
                    bf:10:a5:2e:c8:24:ad:26:b4:60:93:43:49:18:e4:
                    cb:55:89:d4:08:fe:a9:eb:33:3e:e9:5d:81:5f:c7:
                    1e:3e:c8:c8:5f:82:92:a5:25:9a:97:57:de:27:cd:
                    28:b4:5f:29:91:23:2e:d5:9c:07:03:52:e6:e0:af:
                    1c:47:0d:f6:de:fd:37:b5:46:12:78:46:9a:42:f2:
                    b8:0f:87:26:86:e8:dc:6b:14:68:7a:b9:63:5b:fc:
                    89:61:53:d4:3a:fc:fc:a8:c5:d2:a7:b4:d1:5e:91:
                    38:94:9b:64:b3:b1:95:35:de:79:90:3e:70:0b:b9:
                    2f:87:72:7e:11:2d:96:ce:05:e9:bd:5a:9d:4a:99:
                    40:6c:97:76:f2:b7:37:ac:a1:5e:c3:18:af:c0:8b:
                    5c:5e:6a:31:b1:91:f4:51:58:77:75:73:41:bf:29:
                    07:d5:5c:89:aa:f7:69:09:ba:15:f8:e4:2b:30:c4:
                    37:1e:79:62:29:d7:22:6a:3f:3b:1b:82:76:d0:28:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:B7:44:1B:58:72:7E:1C:87:37:A7:80:CD:AF:A2:F0:BE:7A:F1
            X509v3 Authority Key Identifier:
                keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:41:e9:0a:d0:70:49:34:66:a3:6d:b4:a3:8c:da:26:0c:
         54:fe:6a:72:a6:86:ef:a7:b9:22:e7:b9:36:a9:3e:71:42:45:
         84:c1:c3:ef:6f:f1:18:a6:cb:ee:a8:94:8e:4a:b1:d8:23:02:
         f9:07:25:c6:e7:6b:ec:dc:bb:43:94:dc:84:21:5e:8c:d1:73:
         8e:73:f3:1f:bc:d7:ce:1b:5d:60:4d:a5:f5:69:ff:c9:b7:e3:
         dd:83:07:a5:a0:07:18:c1:2c:1f:83:a4:32:66:73:d8:de:30:
         4f:7a:b2:a4:1a:58:f3:cf:06:11:3d:56:24:40:96:07:58:67:
         64:16:7a:ce:7a:7f:ee:22:bd:5f:fb:54:cc:7d:a4:bf:a8:a6:
         4b:f5:fc:7f:94:1b:0f:01:19:af:39:8f:ad:b8:ac:fc:55:0c:
         69:32:ba:62:34:37:a6:36:f8:6d:77:bd:c6:9b:2d:45:1f:b1:
         00:6f:00:d3:18:7d:a6:e5:01:0c:20:ff:09:2d:0d:e1:89:81:
         08:8c:29:04:b0:31:55:d8:a5:c1:f4:b2:d5:f2:0d:9f:23:4c:
         cd:1f:5e:97:29:f5:8b:e3:10:81:5e:c8:a7:a5:0e:9f:65:0b:
         94:94:10:12:aa:78:52:4f:a3:79:7c:97:77:0d:2a:8c:01:f2:
         46:32:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:25 2025 by rpki-client