Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
File:                     sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json)
Hash identifier:          QF1ZS5Ec/PFQnp2Mg387+FLU0Iw120WiD09B0VZ0VKA=
Subject key identifier:   EB:3C:1F:37:6C:D8:7B:85:61:CE:FA:79:E4:40:56:9C:98:8B:D0:13
Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
Certificate issuer:       /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Certificate serial:       092C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
Manifest number:          1539
Signing time:             Mon 28 Apr 2025 18:48:55 +0000
Manifest this update:     Mon 28 Apr 2025 18:48:54 +0000
Manifest next update:     Mon 05 May 2025 18:48:54 +0000
Files and hashes:         1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: w3v/W1SZEFonfdcbRBsFg5IL9/NqxKDKWFv9FanH5K8=)
                          2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 8CyJAkFajN8p4zLzfXqP/Q/JYG1H6Xgou/fh8TVOZU8=)
                          3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=)
                          4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 18:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
        Validity
            Not Before: Apr 28 18:48:54 2025 GMT
            Not After : May  5 18:48:54 2025 GMT
        Subject: CN=680fcd97-a7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:a8:ad:6e:a9:8e:70:e8:c5:19:b1:26:49:
                    a9:f6:8c:90:36:c8:60:bd:f0:f6:a5:94:a5:3b:0c:
                    52:8c:86:dc:e1:20:c1:ba:b8:2b:43:83:3c:3e:73:
                    97:e5:f6:a9:6e:7c:f1:93:64:43:6a:80:da:ec:0b:
                    24:a9:de:68:30:93:82:10:18:17:4e:93:3b:f8:31:
                    b6:12:84:43:86:32:ee:13:24:cb:5d:ed:12:1f:31:
                    6e:fa:1a:58:f9:44:96:36:c3:90:07:ff:20:20:e8:
                    db:c4:1f:f7:7a:e0:e5:a8:7d:bd:fe:7f:57:b8:5d:
                    15:e0:fa:4c:b8:d9:49:53:f9:85:7c:94:70:4b:dc:
                    c8:8d:f4:b1:13:6d:72:75:f9:e6:ea:ed:1d:51:68:
                    9a:3a:16:59:c7:c9:11:de:93:40:bf:c5:5a:c1:fc:
                    59:1c:3c:51:44:b3:fb:c5:b4:c2:d2:e7:81:ff:a0:
                    3a:60:2c:c8:c1:9a:03:a4:c0:41:ef:cb:eb:31:9f:
                    c0:35:b3:15:7b:e5:34:b1:6b:50:3b:54:74:8f:16:
                    98:35:c6:d1:60:40:de:65:40:c0:66:ee:91:df:da:
                    7d:6f:86:b7:f2:32:e9:54:a4:a4:2e:a4:df:70:13:
                    c3:2c:99:9a:e9:6d:43:89:d6:a5:9c:c3:df:2e:93:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:1F:37:6C:D8:7B:85:61:CE:FA:79:E4:40:56:9C:98:8B:D0:13
            X509v3 Authority Key Identifier:
                keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:89:3d:bd:c0:7e:3f:92:0f:ce:98:7f:fc:43:a1:c8:79:66:
         f1:f7:2a:a7:9f:38:5a:21:0c:74:e1:93:36:ff:76:88:7e:c0:
         d4:fb:01:d5:5a:2b:ee:1f:11:ce:6b:2a:63:65:12:7c:f0:11:
         15:0c:8a:61:60:1e:f2:47:db:8e:1c:9f:5d:00:17:fc:a7:c3:
         90:1c:79:4b:cd:e1:dc:36:aa:53:d3:57:25:54:21:ee:28:cb:
         d0:a5:61:8c:f1:52:ab:0f:bc:27:dd:f9:d4:fc:e8:3f:ba:df:
         d5:9b:a9:e1:bf:4c:24:ea:39:d1:c9:c6:7a:c6:a3:6c:ee:dd:
         f7:a6:60:85:20:ab:50:fd:59:1a:70:95:74:67:9d:5f:ce:6f:
         00:9b:7f:8a:2f:56:cf:09:b0:69:e3:c6:83:f7:ea:8f:b3:8d:
         7a:56:78:d5:41:d1:bd:20:fa:61:85:30:e2:62:f4:bc:70:f0:
         91:0d:85:bc:c5:ca:fb:55:a0:2e:33:05:b4:04:45:31:3d:31:
         75:1b:3a:df:7f:c4:1f:81:93:47:10:21:2e:00:65:73:44:f8:
         b3:7e:ad:19:82:e1:bb:b6:14:f0:0f:66:4b:e6:09:5f:bf:64:
         e8:12:12:3c:08:f7:9e:0d:d1:9f:b8:a1:d2:d9:fc:9e:7a:28:
         05:e9:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:14 2025 by rpki-client on console.sobornost.net