Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File:                     qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier:          lwU08gBXSib1D+rxd2jqur3EnbJJGGJB4z8mq2jG7e0=
Subject key identifier:   B0:F0:89:14:6E:95:C2:46:0C:2A:D4:83:25:64:BC:9F:8B:45:A6:16
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer:       /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number:          019A
Signing time:             Sun 27 Apr 2025 02:32:09 +0000
Manifest this update:     Sun 27 Apr 2025 02:32:09 +0000
Manifest next update:     Sun 04 May 2025 02:32:08 +0000
Files and hashes:         1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: W86TTquJRgANSmwFCgEZ+tSIrLrsJV547ujQj4FFJYs=)
                          2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: li4OxnhOQgQRujPF67sN5Xz793LOnzHpSZGFaFwRWYE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
                          rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
        Validity
            Not Before: Apr 27 02:32:09 2025 GMT
            Not After : May  4 02:32:08 2025 GMT
        Subject: CN=680d9729-40e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:45:99:bb:6c:9f:f2:ef:41:3f:1b:6e:7f:
                    6e:c6:6d:e9:ac:1c:be:34:c1:bc:e7:ae:b4:e7:e4:
                    ac:c4:f5:dc:aa:ff:27:45:64:05:c5:81:5c:28:7a:
                    81:eb:5f:25:bd:b0:ab:37:dc:b1:ea:b7:93:2e:75:
                    93:24:ac:90:03:a1:54:ae:0a:62:57:4d:de:e2:c4:
                    3f:f9:f8:50:8c:fc:0e:6b:a8:99:af:94:3e:c3:0a:
                    ba:9f:e6:8a:42:5b:b3:40:b2:92:b8:87:37:ce:3c:
                    10:8f:5a:a3:a9:da:15:0e:04:25:58:51:24:ef:a2:
                    9c:1c:e1:8d:6b:2c:a6:65:8a:84:00:d5:96:3d:4b:
                    71:a0:87:1c:08:40:5c:20:c5:41:ec:03:a1:15:aa:
                    c1:be:4b:32:9a:ed:a6:be:87:0f:3a:05:bb:03:27:
                    f9:36:72:90:7f:2e:78:f6:b3:39:fc:35:e0:8b:c0:
                    90:e6:be:e3:18:3c:ae:29:e9:5b:9d:33:0b:eb:34:
                    24:9e:d2:f3:f5:82:0d:54:1f:a6:b8:ec:05:76:cf:
                    4d:fa:b7:f2:af:fc:b9:28:80:5d:68:4d:1c:83:58:
                    e6:a6:1f:64:f3:3e:11:63:e5:15:3f:c7:a8:2d:74:
                    1f:c6:e7:91:4f:56:3e:9d:ce:b9:de:8b:18:34:6e:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:89:14:6E:95:C2:46:0C:2A:D4:83:25:64:BC:9F:8B:45:A6:16
            X509v3 Authority Key Identifier:
                keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9e:2e:7f:55:d0:e2:93:dc:ef:45:2e:41:e0:4b:aa:43:e2:
         53:cb:40:53:bd:a5:2a:e2:08:51:1f:35:0f:79:8c:17:f0:fd:
         75:c3:fd:41:b5:98:3b:1c:07:80:ed:04:d1:33:b0:a3:79:83:
         af:cf:27:6b:71:ea:4b:2d:bf:6f:22:5e:e0:7b:48:30:11:29:
         3e:df:e2:a8:bb:8d:cf:34:98:c6:d5:91:fc:01:76:d2:d3:bf:
         6c:c2:c5:b6:c1:d0:1c:a3:6b:9d:70:4f:ad:f9:f9:56:90:20:
         27:65:02:05:40:4b:66:58:90:db:3c:e7:cb:22:c3:b0:16:5e:
         da:41:f0:fb:c9:b6:8a:64:f3:47:55:8d:78:6c:3b:d6:bf:4a:
         a2:17:5e:b7:aa:49:f6:72:59:81:a9:0c:df:c9:20:82:28:e4:
         7e:86:30:c0:2f:6b:c5:02:d0:4b:35:4f:05:3a:fc:52:f2:dd:
         c4:75:b9:8f:09:22:d2:97:87:4c:5c:b5:ce:d6:b7:e6:58:f6:
         ea:33:a7:55:6d:46:35:03:c3:83:8b:1a:6f:fe:97:b4:28:e9:
         73:45:38:24:4a:9d:e8:93:63:c7:71:ba:f5:a2:69:1e:b8:42:
         cc:71:2c:89:6f:e2:67:68:18:d0:63:ca:ef:2d:0d:58:a9:85:
         2f:c5:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net