Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File:                     qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier:          z2YC9TE6VuLql3IAyfxvn1C3ZSqjx8ZfUomAPWFbVs4=
Subject key identifier:   98:DD:B9:A4:AE:EF:FE:83:A0:2B:96:3F:21:8B:30:D9:6A:DC:9C:0B
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer:       /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial:       0E85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number:          0E63
Signing time:             Sat 26 Apr 2025 17:37:56 +0000
Manifest this update:     Sat 26 Apr 2025 17:37:56 +0000
Manifest next update:     Sat 03 May 2025 17:37:56 +0000
Files and hashes:         1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: zxioHp8bjJbAc5t5T6ck6PNPOsBxxNZxLTFlmJRpNVE=)
                          2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=)
                          3: 42629FDADD9511EEAA0F2324C4F9AE02.roa (hash: +hn7T4kOPQRiT4pAI5U0s2X9XGmZExacuKpk1xJzme8=)
                          4: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=)
                          5: 34DCFB18C94E11E9A4F6FE21C4F9AE02.roa (hash: PQRWtI7uNa0DrowLXSGG8eKzHjE+mScrhL8bc6GhWo0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
                          rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 17:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3717 (0xe85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
        Validity
            Not Before: Apr 26 17:37:56 2025 GMT
            Not After : May  3 17:37:56 2025 GMT
        Subject: CN=680d19f4-de17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:c2:db:8c:03:49:df:07:80:1f:69:04:db:
                    bc:43:22:e3:fa:34:ef:88:53:11:48:37:eb:3b:b3:
                    2b:8e:b6:e7:fd:ba:e7:01:64:80:fd:b6:92:46:7d:
                    bc:f6:8c:2a:c2:1f:84:91:f8:18:24:ba:a7:81:b2:
                    d9:70:0d:91:4d:a2:3d:85:55:56:4d:be:b8:2f:9c:
                    1b:56:27:b4:34:15:0e:90:f5:40:b4:02:19:f2:6e:
                    75:7f:c4:b8:78:28:7f:5d:c6:cb:37:72:4e:cb:76:
                    72:ae:fe:96:06:7b:83:ff:71:1f:c1:89:4c:a8:8d:
                    d1:e1:c2:67:1d:f0:62:67:33:f7:ba:71:13:2e:a7:
                    dd:9e:28:38:2f:70:e1:87:d6:be:02:c2:62:de:ba:
                    30:57:28:f5:70:55:21:3c:59:7f:ae:b6:6c:38:9e:
                    dd:13:5c:a1:3a:0f:13:f2:e9:f6:8f:5a:7f:c6:33:
                    d4:0d:5b:87:1d:b4:ae:fe:43:65:06:ef:73:f6:f4:
                    e5:73:26:80:cb:76:b2:e2:e8:ba:8d:6e:42:7b:1f:
                    b6:9b:3e:26:1a:36:41:4c:2f:6e:5d:64:38:1c:d1:
                    3c:db:58:93:7b:7a:50:b8:4b:12:59:4d:57:e9:17:
                    83:71:29:39:44:6e:cb:c5:a6:b4:03:2b:c5:ab:5a:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DD:B9:A4:AE:EF:FE:83:A0:2B:96:3F:21:8B:30:D9:6A:DC:9C:0B
            X509v3 Authority Key Identifier:
                keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6f:6e:11:7f:32:7c:93:77:1a:a3:5b:03:02:75:78:89:fc:
         e2:87:e7:ad:ba:a0:f2:5d:ed:ff:cf:84:e3:84:c9:1e:c8:ba:
         13:ca:a9:1a:d9:92:e2:6e:3a:f2:b6:6a:07:ec:19:4f:df:40:
         37:a7:bc:f0:57:05:79:41:74:b8:46:df:25:66:6c:10:15:ca:
         76:a2:73:67:24:bf:e9:5d:5f:48:9c:3d:aa:46:8a:11:63:24:
         36:9d:44:3f:4c:e5:d9:7b:ae:cf:12:02:cb:d8:8c:b7:05:44:
         51:67:32:81:10:1b:58:cb:31:f2:9e:d6:9b:30:65:3a:1d:46:
         ba:e3:9a:11:dd:cf:bc:bc:b7:6c:bc:c0:2e:2f:ef:fd:9a:d1:
         33:9a:48:8a:e3:7c:88:2e:8d:17:f3:ce:9a:70:c0:51:ca:eb:
         00:d9:51:7f:5f:ff:fd:0d:4d:12:17:f2:57:19:03:94:81:76:
         7f:6c:6c:af:73:7f:d9:af:ce:3b:78:a3:2d:5d:ca:68:47:42:
         7a:42:ad:ce:10:b9:bf:93:89:d5:7e:9f:07:34:12:33:e2:57:
         e4:86:ae:8a:20:c7:ec:18:b1:b6:c0:18:44:a9:dd:65:85:07:
         d8:12:12:05:44:44:f3:3f:3a:c4:33:81:15:0b:77:81:9b:b1:
         98:19:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:55 2025 by rpki-client on console.sobornost.net