Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier:          YkRHT6HawkBytYgV7z5ojwiUzqZ5T0I4J26IPYGuRmw=
Subject key identifier:   C0:50:82:5E:F9:D1:C0:EF:B1:56:C6:7F:34:8E:55:07:B2:5D:36:3F
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number:          011A
Signing time:             Sun 27 Apr 2025 03:53:07 +0000
Manifest this update:     Sun 27 Apr 2025 03:53:05 +0000
Manifest next update:     Sun 04 May 2025 03:53:05 +0000
Files and hashes:         1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: IXNqL1Fjf9Y2IDN5M8rG92CTODnZ6Tu3r8CPQzwLlKY=)
                          2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: FYt2RufvdZwSZ5zQDPicr3Fxe0XZIP7npmhW3SH2a8Y=)
                          3: 5A5E75E2E30611EFAD52D552C4F9AE02.roa (hash: nu5dbwOLlZ13YTkUDnySdOEtRFAsDLmzMv0XGB5W4wE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Apr 27 03:53:05 2025 GMT
            Not After : May  4 03:53:05 2025 GMT
        Subject: CN=680daa22-5965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:82:9f:7f:a8:47:df:a8:76:57:e0:8b:fe:
                    02:96:96:81:22:51:66:b8:76:27:e6:42:98:35:a6:
                    17:05:50:5b:63:f6:79:e9:97:8e:a6:31:b5:d1:2b:
                    07:40:f0:d6:00:b9:5a:12:54:e2:19:f0:81:7b:b0:
                    fb:88:cc:62:ec:21:68:79:e7:eb:49:b0:e4:76:f8:
                    cd:c9:84:07:29:8c:96:20:da:8e:50:41:eb:72:fc:
                    43:2a:24:62:56:ee:2c:4f:4b:ef:a6:5f:e0:13:bc:
                    c3:fb:e7:57:ad:d2:db:eb:e5:f3:fa:3c:8b:d9:7d:
                    f6:c0:34:7b:a3:61:ca:72:58:2a:5d:f8:86:15:b7:
                    b5:a5:61:22:13:b5:3e:a9:90:7d:ec:6e:14:32:94:
                    c4:11:22:92:3c:31:71:01:87:db:ca:26:54:81:91:
                    c9:7d:fc:08:35:02:fc:5b:c7:da:0a:36:64:e5:e8:
                    14:38:70:d9:ed:2e:19:3e:c6:65:f1:46:c8:ee:65:
                    a0:ee:ee:63:02:65:a2:8a:8e:3e:2b:2d:82:e3:8e:
                    0b:70:e8:5c:c6:a6:1c:e7:5c:7a:13:8c:db:e1:fc:
                    9b:95:cc:41:82:eb:3e:bc:87:b7:bd:6a:24:f0:31:
                    11:9e:ba:00:62:65:a5:50:1d:0c:91:30:18:25:7a:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:50:82:5E:F9:D1:C0:EF:B1:56:C6:7F:34:8E:55:07:B2:5D:36:3F
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:53:18:e6:ac:b3:89:ed:c4:49:dc:4b:17:84:d9:bc:ec:
         a7:10:bf:a7:ac:ad:c2:05:55:dc:e4:76:6f:a7:ea:e1:e6:cc:
         b3:35:06:12:7f:3d:c5:48:94:6a:fb:60:d4:9c:c7:41:31:fe:
         69:e0:cc:63:6b:5e:af:16:2c:7c:c4:df:a6:63:a4:ef:03:a6:
         b8:d8:c5:46:02:84:e0:4f:6a:b6:be:7a:55:3d:d5:f0:c2:5f:
         1f:27:e6:a1:f1:f7:8d:12:b7:d8:c2:75:dc:37:71:32:66:99:
         4d:e9:78:a0:c8:bf:c3:14:7b:4a:60:34:ed:58:ea:48:23:f3:
         0d:27:12:46:7a:d8:13:19:02:9f:fd:5b:69:b0:f6:e7:8d:27:
         4c:d7:3c:6f:72:49:93:1e:0e:3f:56:73:fe:59:e9:82:33:4e:
         98:14:f2:25:45:81:d1:16:64:8d:67:a4:25:c1:31:ea:fc:97:
         47:cb:86:db:67:b1:05:9a:82:45:03:60:44:1d:db:9d:9a:47:
         86:ba:db:93:55:df:b3:6f:57:e1:9d:f2:e8:ec:84:a7:81:c3:
         34:97:0f:c7:e8:4b:55:b9:95:78:2b:2a:2e:fe:ae:e4:4b:d3:
         f2:ff:c0:7c:9e:be:8f:92:a7:26:f4:ff:aa:ad:13:c0:da:0f:
         91:e8:28:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:36 2025 by rpki-client on console.sobornost.net