Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
File:                     Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json)
Hash identifier:          uGEoaqDwTqVH61XiJdxQWTtxUwaSc+gVEzyt43548jE=
Subject key identifier:   89:A1:C5:34:77:D7:A2:FD:74:8A:DD:5D:3F:79:71:40:AD:62:57:62
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Certificate issuer:       /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial:       0476
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
Manifest number:          046C
Signing time:             Sat 26 Apr 2025 23:48:30 +0000
Manifest this update:     Sat 26 Apr 2025 23:48:30 +0000
Manifest next update:     Sat 03 May 2025 23:48:30 +0000
Files and hashes:         1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: /i/io10Mb0I4jEAQvC74qzj6Ek9aXMQ82yHcGf8en/s=)
                          2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
                          rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
        Validity
            Not Before: Apr 26 23:48:30 2025 GMT
            Not After : May  3 23:48:30 2025 GMT
        Subject: CN=680d70ce-e34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:1c:96:e2:86:6d:cc:21:44:47:a7:c2:9e:
                    e8:25:26:10:cc:c9:1a:e4:f2:27:6e:81:0f:31:86:
                    3c:ae:0a:55:af:78:f9:3e:2c:b9:d0:dc:7c:05:cc:
                    86:9b:99:5f:26:b4:e1:28:39:61:ae:89:7f:24:cb:
                    b0:22:79:31:d7:2e:21:0b:1c:db:1a:03:1b:d5:4a:
                    ef:f7:1d:36:66:bd:6d:f9:5c:08:60:5f:cb:26:6d:
                    e3:a2:d7:77:ec:66:11:8f:ee:9b:f4:65:0b:31:02:
                    53:f2:89:92:c0:8d:49:4f:4e:11:eb:cc:50:10:61:
                    06:4d:93:5f:d7:58:bf:aa:46:26:1e:29:0b:f3:fe:
                    be:58:63:1c:df:ab:ae:93:0b:91:52:12:21:db:80:
                    3f:e6:02:76:df:49:11:3a:c6:2b:75:ed:6c:01:dc:
                    7a:a7:e4:52:c0:e9:a1:19:e6:95:88:9b:44:e9:5b:
                    6f:f0:1f:1a:d8:d5:75:be:af:c9:95:68:70:9c:e1:
                    ff:92:96:ac:b3:68:c4:00:1c:d8:89:6c:7d:4a:88:
                    05:79:93:4b:3e:29:0a:89:38:87:10:e9:25:a4:e0:
                    71:c2:04:24:35:3a:01:57:4d:e9:19:4e:82:52:b7:
                    49:51:61:ed:c2:6e:63:b6:6b:69:e7:4b:b3:36:88:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:C5:34:77:D7:A2:FD:74:8A:DD:5D:3F:79:71:40:AD:62:57:62
            X509v3 Authority Key Identifier:
                keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:a9:f1:8f:73:53:26:a9:e8:c8:af:71:1a:44:68:66:a7:
         06:e8:78:03:84:99:bc:1a:9c:99:c1:cd:1b:21:58:14:79:74:
         bb:0a:ea:c2:f5:b5:f6:80:48:9d:d7:53:9c:e9:25:db:d4:96:
         ab:46:87:42:3a:ab:05:c0:87:14:72:f0:99:ee:b1:95:cb:7e:
         88:dd:ac:65:d8:4d:71:a9:8c:dd:78:1b:74:4b:4c:1e:b4:31:
         08:9b:7f:d5:c2:be:d5:4a:12:e6:f4:c0:eb:a3:13:91:ad:52:
         71:85:be:13:3f:5d:4e:73:47:b1:75:c2:76:52:95:c3:e0:e8:
         05:39:55:ce:77:3f:fb:eb:fc:aa:33:3e:80:f7:14:f5:3f:7b:
         fc:9b:a1:fc:9c:b0:7d:be:be:1a:63:7e:2f:77:f6:d2:8a:9b:
         ce:bf:ac:31:6e:bf:91:be:53:d0:84:f0:62:2b:60:8e:6d:0c:
         a6:cc:01:64:a8:f0:cb:14:ae:18:38:00:77:7e:32:13:c5:f6:
         bf:e2:25:f6:da:30:19:ca:5b:57:f4:80:95:18:18:3e:56:f8:
         fe:28:db:3c:bf:b4:2a:89:f1:a4:a2:1d:fd:c2:f0:25:34:d3:
         49:dd:50:17:e3:82:bf:a7:b0:38:48:72:29:f1:71:b2:05:ca:
         36:ef:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:34 2025 by rpki-client on console.sobornost.net