Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          /wfkuD43N8LXTpUqqF74wS5es6a3vN3bGYn5sVQCfkU=
Subject key identifier:   82:28:69:0B:CE:5D:D1:89:13:03:AE:6D:F4:1A:18:A3:D5:41:37:CE
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       184D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          1836
Signing time:             Sat 26 Apr 2025 16:28:43 +0000
Manifest this update:     Sat 26 Apr 2025 16:28:42 +0000
Manifest next update:     Sat 03 May 2025 16:28:42 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: xwu0ioy2I3iTfnoks8Xl7sOwvlmh9urjXl2gl/9mI54=)
                          2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=)
                          3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=)
                          4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=)
                          5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6221 (0x184d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Apr 26 16:28:42 2025 GMT
            Not After : May  3 16:28:42 2025 GMT
        Subject: CN=680d09bb-7c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b2:11:44:f1:bc:1a:2e:80:b4:a9:62:30:8f:
                    28:bf:0d:0c:c3:31:97:ed:a1:1a:98:ec:36:4f:fa:
                    ef:75:b4:d6:a5:36:77:45:3a:37:04:dc:26:c3:93:
                    22:87:1b:3f:3e:af:b7:c1:60:a2:34:9a:bf:d3:19:
                    e7:ac:87:7d:fa:f4:87:c9:9f:63:c6:ef:de:c2:f0:
                    ff:32:70:60:8b:82:fb:25:d3:b9:92:c6:e2:8e:0a:
                    2f:dc:c9:94:86:17:1a:60:46:22:77:b3:7f:29:87:
                    4e:35:0e:25:0c:3e:38:7c:98:c8:03:28:2d:7a:00:
                    f8:72:f5:3a:51:fb:a2:bf:7e:8a:29:c4:aa:0a:02:
                    6f:fc:64:8f:80:15:c5:8c:b5:9b:28:65:27:d9:a4:
                    25:01:0b:0f:90:02:dd:8c:d2:f2:03:aa:46:ab:5b:
                    b4:f9:94:eb:17:5a:2a:f5:55:c6:22:57:e3:69:cf:
                    28:1d:2c:89:7d:67:44:67:2d:75:07:d9:10:54:3a:
                    31:0c:1c:a2:90:64:94:f6:cd:e8:8a:ae:0e:57:c8:
                    29:a3:4a:e8:bb:53:af:12:2e:3d:d6:21:6c:83:15:
                    3a:99:86:49:0c:c1:90:7b:92:b4:08:a5:86:b2:58:
                    ef:67:bf:15:86:69:77:a9:d3:d7:2e:90:99:8e:1d:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:28:69:0B:CE:5D:D1:89:13:03:AE:6D:F4:1A:18:A3:D5:41:37:CE
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:69:bd:be:ef:4c:c5:cc:b3:9a:a6:05:37:6e:13:ce:26:
         c6:99:f0:68:08:f0:f2:05:63:b4:f7:f7:51:d6:06:5f:c0:d9:
         cd:17:29:22:fe:78:53:12:70:06:bc:0d:69:ff:6f:47:92:0f:
         1c:9f:7b:e2:43:bb:3d:fe:72:25:37:ba:45:82:9a:8c:fb:04:
         92:9d:be:69:f5:02:1b:7e:f7:8e:c2:7a:d8:88:60:d7:5b:93:
         07:60:12:3a:4c:bf:61:3f:6e:a9:e4:8b:9a:8e:1f:75:c7:a3:
         35:19:5a:f7:1e:a3:b7:13:35:62:35:6b:5d:92:1e:82:d3:e8:
         e8:c8:19:7d:0f:55:ee:38:5c:c9:68:c8:1a:12:1c:69:a6:a8:
         62:36:65:60:1f:26:00:f3:64:ca:72:a7:29:90:fe:e0:f0:c6:
         43:4d:8f:95:d7:d5:1e:b8:63:b2:d7:55:06:bf:94:04:1a:b2:
         8f:d3:47:56:7f:bb:d5:75:db:8b:a1:d1:31:5b:03:e1:90:5b:
         ee:b9:d9:dd:fe:24:5f:6e:59:08:82:38:ea:10:72:03:fa:b0:
         fa:d9:19:03:e7:f5:e1:b6:88:13:3c:85:d7:d0:a7:87:98:63:
         7b:91:df:d5:48:61:2d:1d:33:22:eb:7e:ba:67:ad:34:e3:76:
         ef:4f:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:19:42 2025 by rpki-client on console.sobornost.net