Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          Wb9bqeEXg1ppoPfIPS/TZmjbogvRz+zCD6Mf3iS1p0A=
Subject key identifier:   53:8C:BD:53:E6:D4:5D:A6:B4:F6:53:39:EF:35:B3:1F:EE:D1:FA:32
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       05C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          05C0
Signing time:             Thu 24 Apr 2025 22:54:36 +0000
Manifest this update:     Thu 24 Apr 2025 22:54:35 +0000
Manifest next update:     Thu 01 May 2025 22:54:35 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: 5UyE52o7BbKgcqegwmvq1FaSZBnWiW1U7S61l4ncOks=)
                          2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=)
                          3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=)
                          4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Apr 24 22:54:35 2025 GMT
            Not After : May  1 22:54:35 2025 GMT
        Subject: CN=680ac12c-c189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:4a:a8:0e:a7:2d:9a:16:59:6c:44:01:56:
                    ab:80:e9:4e:aa:bc:9d:0a:82:67:80:1e:be:63:83:
                    0e:d2:ba:bf:c3:d3:07:e4:05:bf:ea:72:31:e4:c2:
                    5f:93:10:f6:f0:b9:20:c7:09:79:16:61:c5:3c:e6:
                    90:f4:11:fe:9b:82:d8:f8:06:16:30:ed:bd:76:58:
                    76:5f:e9:36:5a:6c:9c:48:34:6f:07:c2:97:c9:74:
                    5f:4b:cd:51:ea:d1:4a:cf:25:60:1f:af:0c:ee:0f:
                    51:c6:80:44:8b:5d:9c:bc:b3:51:af:2a:29:b2:aa:
                    41:31:e4:c4:ff:41:b3:61:9b:79:2e:03:5c:f1:d7:
                    72:8f:20:ed:fa:b2:be:08:28:87:bc:4c:2e:59:f0:
                    6c:4f:40:30:38:a7:75:73:4e:f3:a5:49:c2:82:5f:
                    6a:20:1b:71:80:ab:62:91:51:ac:e4:f5:b1:11:5d:
                    eb:d1:65:f3:b5:f8:31:5a:29:38:c4:28:4b:9b:64:
                    61:9e:81:67:27:83:e9:58:ed:58:e7:eb:ae:6f:cf:
                    b3:32:38:be:9e:4e:5a:d0:28:fa:6d:27:84:46:96:
                    f0:97:af:37:13:72:70:de:08:ad:7c:8b:e8:a0:95:
                    09:ae:e0:14:f1:62:1e:ea:f4:07:6e:7c:5e:40:c1:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:BD:53:E6:D4:5D:A6:B4:F6:53:39:EF:35:B3:1F:EE:D1:FA:32
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:62:a3:71:df:c0:09:b0:20:03:92:f5:fa:6a:df:0e:25:6a:
         43:20:b0:aa:5c:13:ee:76:a9:4e:c5:4a:82:7b:2b:e6:9e:fa:
         d1:ed:75:ca:1b:1c:5b:7b:03:15:7c:78:56:37:44:ac:88:9c:
         e7:36:ab:e1:56:4e:86:e1:23:cf:dd:eb:8a:74:24:a6:8c:7f:
         21:23:48:2f:c9:63:83:f8:d3:e4:06:e4:eb:fd:bb:6b:03:ee:
         36:83:73:10:7f:1e:fa:5d:63:93:7d:83:02:0d:77:9e:15:a1:
         b6:65:b4:f2:40:21:c1:31:39:15:67:5c:71:f7:19:7a:85:51:
         03:20:c2:af:ed:1f:d5:fe:6a:88:ec:cf:94:28:39:c1:9c:6f:
         59:50:03:c1:03:24:1d:16:ff:34:61:0b:b6:5e:0e:34:57:ce:
         6f:a3:af:42:c6:b0:d1:14:dc:63:ef:a5:3c:4e:1b:92:95:bf:
         47:55:68:57:2c:08:1f:4a:81:2e:33:9b:d7:4c:3e:ce:01:53:
         3e:b0:48:32:89:7c:68:9c:7d:b0:2a:21:e7:3b:0c:e3:7d:f4:
         ff:c7:9d:78:ea:de:0f:89:ba:75:90:dc:9b:1b:9a:4d:0c:e9:
         e4:60:17:ae:9f:32:33:74:5d:24:d1:b0:dc:b4:b1:2a:a1:a2:
         a8:53:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:04:40 2025 by rpki-client