Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          12zx63zNXuw/sQ76+Yt8MpCfK90LZb/UEF+vdRerL3U=
Subject key identifier:   73:73:9C:40:F7:2D:6A:A6:EC:FB:2F:5D:77:12:51:FF:74:F5:87:05
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       0474
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          046D
Signing time:             Sat 26 Apr 2025 23:47:45 +0000
Manifest this update:     Sat 26 Apr 2025 23:47:44 +0000
Manifest next update:     Sat 03 May 2025 23:47:44 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: gA5ITmcOtDgd39DLopeK8ctEYJId7bp85gYZ8qUSoiY=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: ep6/NjkJNZJDWkEDthfqanztHTbJuX44L/+Atn4MZWc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Apr 26 23:47:44 2025 GMT
            Not After : May  3 23:47:44 2025 GMT
        Subject: CN=680d70a1-037d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:c1:31:86:16:87:e0:e8:77:58:fa:8d:c0:
                    49:7b:85:d0:d5:4f:98:2b:f7:fe:bf:a5:5d:e3:da:
                    64:05:8c:11:f7:38:f2:9d:3f:f9:29:30:2c:f0:99:
                    c8:08:d1:a5:40:de:1e:63:e2:aa:c0:03:45:f5:a4:
                    ef:7c:69:7a:37:28:3e:31:55:26:96:ac:3a:ac:a8:
                    fa:86:66:b2:ff:0f:49:3e:7a:74:53:63:a8:d1:30:
                    f6:46:c9:1b:43:9a:95:de:fa:04:eb:4f:25:4b:a9:
                    b2:47:59:7f:b7:07:87:cc:20:24:83:65:7e:47:3d:
                    dd:e0:72:48:52:96:e8:08:0b:47:29:82:29:d0:17:
                    e9:ed:e2:9b:ac:78:60:7e:b8:5a:89:32:d1:68:4b:
                    01:f5:dc:80:db:cc:5b:7e:d1:ee:c3:57:e7:48:c1:
                    97:74:98:b5:c9:36:9a:e5:52:91:b2:93:87:5a:3c:
                    49:45:a0:29:17:e2:23:75:95:33:47:41:61:fa:0a:
                    a2:b4:09:4d:02:c0:5e:00:14:1a:7d:3e:51:23:e5:
                    bc:12:3a:1d:99:8b:7d:e1:8d:bb:77:a7:fd:3e:24:
                    6c:51:8c:ef:2e:82:7d:24:88:3a:65:42:86:41:7e:
                    f5:29:a5:a5:d5:4b:a6:1b:ff:73:df:87:27:85:6d:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:9C:40:F7:2D:6A:A6:EC:FB:2F:5D:77:12:51:FF:74:F5:87:05
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cf:60:6f:6a:35:d5:2e:93:a2:03:12:a0:c0:61:ef:b1:17:
         9d:73:2c:0c:47:4b:53:e6:16:fc:32:87:c1:18:89:a0:1d:1a:
         f1:a2:49:05:7f:72:a6:b1:ab:4f:b9:ec:82:f7:18:85:8c:54:
         6e:91:85:6f:5d:eb:bf:30:ce:10:fe:92:91:a1:7b:7a:4b:6f:
         47:71:2a:30:2f:b9:c9:68:ba:dc:0a:16:42:77:f6:31:a7:27:
         1d:5d:ee:d2:4d:d6:91:87:fb:86:b2:9d:fd:10:82:25:69:03:
         a7:a8:12:54:f1:fb:93:36:c3:c9:2d:5e:69:d2:43:b3:f6:ec:
         2b:78:4a:35:05:1d:fa:cb:45:56:d2:d1:13:dc:44:a3:38:c0:
         94:50:f7:85:b8:63:40:e7:0c:bd:1e:f2:1d:f3:69:7f:ce:8b:
         d1:fc:69:b4:b0:c4:80:08:0a:10:48:55:b6:94:d8:6c:66:f5:
         30:ac:aa:aa:5f:c6:bb:a4:3d:45:40:76:7d:01:0b:1d:9d:4a:
         b6:2c:b7:57:8d:00:ee:38:7d:7b:53:34:4f:87:48:87:1e:36:
         c7:83:ee:c3:03:2c:ab:51:67:82:91:f1:a7:d2:ba:77:fc:e7:
         8e:4a:12:04:2b:b2:9a:ef:2b:c0:1d:97:4f:c3:07:56:1e:fa:
         d6:ac:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:44 2025 by rpki-client on console.sobornost.net