Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File:                     QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier:          bBeOs2stwb9//HQe6hTV6mRWcZlrMlqDtpFZJCAd1PQ=
Subject key identifier:   8E:AC:17:B5:EE:DC:5D:05:D1:7B:BD:E6:D2:89:68:DA:C4:36:86:DB
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer:       /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number:          06C4
Signing time:             Sat 26 Apr 2025 22:27:28 +0000
Manifest this update:     Sat 26 Apr 2025 22:27:27 +0000
Manifest next update:     Sat 03 May 2025 22:27:27 +0000
Files and hashes:         1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: 4BujekIo9JAbFkpYjymQG14Oun/hBu7eB8IGgnLNBHI=)
                          2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: E8TJXB5p3Bk6Mywr/JoQzqnkHpychLbxDlvay8pE/5g=)
                          3: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (hash: gHO3ucDCMpaAi01yTk9v+DmdcMeSIsp2IE197EC8p+s=)
                          4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: XtqW7baviXAU6XqPk4n9ZbDubsg33KGDVEvxGrKpGog=)
                          5: 03BA8B36824411EF94479387C4F9AE02.roa (hash: Zg67mtsRPmH+mIuPO6H9TG0Bz8V1VI6Op+1VjZiZR1s=)
                          6: 5FD09C68393C11EFB8A9065BC4F9AE02.roa (hash: L3oo3WwbXDM/suf25S9ZfGKmbEMta5yJxrHpRj7RBoA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
                          rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
        Validity
            Not Before: Apr 26 22:27:27 2025 GMT
            Not After : May  3 22:27:27 2025 GMT
        Subject: CN=680d5dd0-de7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:5b:b3:59:8f:45:fc:31:8d:37:77:fe:30:
                    19:81:78:6c:92:4b:f1:42:8f:d7:55:48:bd:e7:e4:
                    5f:76:f0:d8:ad:76:b5:a0:ca:b5:dd:c9:46:c2:91:
                    63:60:a2:2c:c9:c5:74:20:24:17:f8:37:3d:1d:16:
                    94:1e:f4:e7:e2:71:38:1f:9e:bc:73:b8:6f:f4:63:
                    67:fb:f2:66:a7:18:72:a5:13:1a:5c:e0:b8:cd:08:
                    23:e0:83:00:e9:0f:dc:f1:91:4b:2f:2d:a1:b7:bd:
                    77:4e:0b:ff:20:16:0a:ec:ad:4a:90:54:8b:08:28:
                    1c:bb:a6:a6:8d:70:7b:bc:b5:05:be:f9:a0:7f:1e:
                    53:59:36:7f:a6:aa:ca:2f:ac:56:59:fc:78:8b:9c:
                    91:5a:aa:31:63:7f:1e:07:4c:64:30:72:1f:a0:ec:
                    44:86:f5:05:04:f9:d5:4c:84:5b:1d:45:d9:db:2c:
                    cd:e2:1e:53:8b:a6:fb:b0:e3:ae:e3:ae:ba:37:90:
                    0b:f9:4a:ea:7f:82:fb:27:46:72:cc:cf:15:8b:72:
                    e3:d0:20:47:d7:c5:e8:3c:73:b6:e0:1d:c0:28:f1:
                    b1:06:80:c1:bd:8d:ff:48:1e:39:89:a1:20:2e:95:
                    85:9a:a0:e9:e8:b1:ee:91:fe:85:71:a4:a5:13:5b:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AC:17:B5:EE:DC:5D:05:D1:7B:BD:E6:D2:89:68:DA:C4:36:86:DB
            X509v3 Authority Key Identifier:
                keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:93:35:fe:4a:9c:d1:31:4b:b3:92:02:46:4e:ef:9e:61:1b:
         17:68:e0:e0:fb:42:19:4f:14:8c:2a:61:58:90:15:29:f2:82:
         9d:93:22:fb:51:cd:c7:83:24:45:2a:04:73:09:58:59:e4:b3:
         f3:95:72:8f:28:e1:b6:ec:d4:93:4d:2a:0a:09:20:1c:37:be:
         10:6d:7d:17:33:b7:7d:11:da:eb:f9:db:6f:20:cd:4d:47:c8:
         90:f2:17:5e:3f:bb:59:e0:8a:05:c4:1a:6a:eb:79:d3:98:67:
         e5:13:91:66:cd:43:04:89:17:33:78:02:07:41:b6:10:b8:87:
         4c:16:44:eb:9e:ef:fa:5f:79:39:6e:9e:eb:72:fa:66:83:a9:
         8e:a3:af:31:4c:53:4f:01:ca:af:03:d2:fa:35:50:f6:a8:e9:
         8b:48:8b:fc:d2:57:e9:55:09:90:0c:56:de:be:92:45:89:55:
         2f:bb:ca:e6:c0:c9:f5:e7:62:3c:54:6f:e4:dc:59:bc:9e:fa:
         c3:2e:d2:f8:6a:f4:b8:cc:9d:15:93:89:6c:e2:69:d3:70:71:
         c1:ac:b0:09:31:4d:7d:76:c9:1f:05:fe:df:77:41:be:3d:71:
         68:ff:07:ae:1e:b3:35:c0:29:9b:b0:d1:de:f3:63:81:87:bb:
         3a:7b:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:48 2025 by rpki-client on console.sobornost.net