Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File:                     Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier:          Hu+26Q1OYcvRrl3QS0dfvG64TP5f/33e22H31QVqACY=
Subject key identifier:   23:4E:A5:79:F4:E7:26:B3:34:DC:89:C6:35:F6:4D:EA:CE:47:A8:7F
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer:       /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number:          C7
Signing time:             Sun 27 Apr 2025 04:41:52 +0000
Manifest this update:     Sun 27 Apr 2025 04:41:51 +0000
Manifest next update:     Sun 04 May 2025 04:41:51 +0000
Files and hashes:         1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: J1iG4e5CfQKWlpHINJUgUqgkLduDFLRyisT4qGkalqs=)
                          2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: ey0oQHiSGpH4+EnFGwizJ9b66lbUXNoAkMqUMUf/z8g=)
                          3: 138E2452F89011EE8B2FC42AC4F9AE02.roa (hash: /QO+4V0fLYx8g3hL0Bgq9nBiIuvSmIV2wmk+9euyuaI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
                          rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
        Validity
            Not Before: Apr 27 04:41:51 2025 GMT
            Not After : May  4 04:41:51 2025 GMT
        Subject: CN=680db58f-4dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:ad:52:fa:84:bb:32:30:64:ef:cb:c6:2b:
                    45:15:4f:fa:7b:f2:b0:d3:52:be:3e:98:ff:9b:9c:
                    c6:9d:12:15:d8:8f:c7:41:e5:db:5c:cc:56:08:83:
                    64:62:93:8a:42:f1:16:38:eb:2d:3d:7d:ca:3c:33:
                    17:e6:ca:0d:bf:70:89:a8:49:e9:fd:88:f4:0e:a1:
                    09:91:7d:e5:f6:98:53:26:b5:bf:55:5f:0c:86:66:
                    f6:2f:9d:a8:0b:62:aa:8f:df:3c:b4:74:99:2f:48:
                    7a:1e:fb:bb:ab:82:14:23:9c:ec:79:6e:cb:8b:0b:
                    5f:a6:5f:09:8b:9c:7a:f9:33:14:ac:e3:0d:31:e1:
                    14:c3:c4:7c:35:3e:08:77:99:35:1c:39:2a:47:31:
                    9f:31:d4:1c:1d:d7:47:c3:01:50:ce:73:17:96:a3:
                    f1:cf:77:8f:c5:d4:c2:6e:64:fe:9a:7a:19:41:21:
                    56:56:0b:aa:3a:e2:08:d3:a3:4f:0d:a8:d6:9a:8e:
                    db:49:97:6a:81:a1:48:f6:41:e0:f7:f0:4b:6d:57:
                    95:b4:c0:42:d4:85:92:9b:54:e1:f6:07:b9:ac:7a:
                    5d:e0:fe:f6:20:f7:3d:20:74:84:ac:20:e5:aa:0b:
                    3b:28:49:a5:c3:7a:b5:0c:10:18:bb:6b:da:7c:fd:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:A5:79:F4:E7:26:B3:34:DC:89:C6:35:F6:4D:EA:CE:47:A8:7F
            X509v3 Authority Key Identifier:
                keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b8:7c:d5:5f:46:3b:0c:af:8c:b7:66:2e:98:35:67:0d:39:
         82:15:12:48:15:0d:71:15:4b:54:8f:b6:2a:b0:00:bc:01:96:
         ac:87:c1:79:c5:87:1c:01:64:ed:06:af:a6:1e:f9:e3:d4:db:
         25:45:67:1a:65:28:e9:fd:5e:33:19:28:a9:97:e2:53:89:04:
         6e:c6:d6:3a:82:ae:21:7f:c4:c9:fb:63:c5:c2:cd:0d:55:ca:
         0d:43:90:63:1c:00:05:94:7b:a7:a3:eb:b2:71:df:c6:15:6e:
         27:19:1c:0a:ce:ca:fe:cf:16:61:07:9c:11:5c:ef:c3:b4:8b:
         a0:38:f9:ca:5a:ef:f3:99:fd:56:bc:16:64:5c:87:eb:35:13:
         94:c1:77:5b:a5:e0:5d:a2:b8:5e:ea:5a:09:67:13:6c:1c:79:
         0d:9a:bb:2b:75:4d:1b:0a:be:33:fb:81:92:24:fe:22:32:f6:
         c4:cd:2f:59:6f:90:e4:2a:69:c3:1b:ff:6f:ab:f8:66:ad:99:
         e9:84:2e:5d:82:dd:ae:99:50:a6:80:91:63:64:d4:10:fd:57:
         17:14:c2:a1:fd:a8:e0:73:49:a3:43:3f:3c:ea:d2:ac:5f:18:
         6f:c7:09:be:42:f5:4f:16:61:a7:c6:ce:89:90:f8:ac:00:aa:
         51:e7:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net