Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File:                     qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier:          vQbqCeOMfJLCmeIj/1Nk+P5rDkfR9te5df9/+k0IoIg=
Subject key identifier:   08:DC:90:15:B0:99:6B:C1:4E:2E:D4:B2:C1:47:59:32:57:73:B0:E8
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number:          BB
Signing time:             Sun 27 Apr 2025 04:52:40 +0000
Manifest this update:     Sun 27 Apr 2025 04:52:39 +0000
Manifest next update:     Sun 04 May 2025 04:52:39 +0000
Files and hashes:         1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: A/Mwius8DrV+OW2SrMNOGh9aQbYbHXNsra2VLUBy1ho=)
                          2: 01935FDC35F911EFBF29CF70C4F9AE02.roa (hash: IfjKXBSjqSuFJaVoDqP6oYZ3wH/2zlYfGaCM0ODem/4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: Apr 27 04:52:39 2025 GMT
            Not After : May  4 04:52:39 2025 GMT
        Subject: CN=680db817-8751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:18:22:7d:1f:67:a7:b7:7f:60:b3:1f:1b:
                    9a:1b:34:73:fd:fe:6c:27:ea:9e:c7:04:34:93:f1:
                    17:f2:80:25:87:40:b4:99:33:15:e5:4f:9f:d9:b4:
                    54:a1:16:87:07:23:d1:e1:e2:8f:3a:96:5e:28:2a:
                    f5:7b:59:04:7a:02:6c:b8:ed:7b:85:25:eb:93:a7:
                    98:01:41:61:5c:74:fb:2b:55:89:83:5c:ee:44:77:
                    f7:45:a8:6b:b0:11:eb:83:09:23:c6:e0:b9:69:2f:
                    e9:b5:45:ee:65:5c:90:43:cc:7f:fb:b7:10:44:ef:
                    44:e3:4c:19:a7:f0:cf:7c:1c:54:f1:7e:08:c6:29:
                    4f:ce:12:70:05:33:9c:46:ae:ce:5d:bb:c9:03:a4:
                    ad:6e:01:cc:01:ee:01:e9:06:67:4d:62:1a:73:af:
                    4b:50:e4:04:54:71:89:79:c3:37:26:ed:19:2f:a5:
                    44:0c:f5:33:b7:c8:f0:b6:de:31:10:28:aa:7d:3a:
                    e1:e1:6b:b5:24:f7:64:b1:9c:f6:8c:ec:b2:98:f7:
                    29:0e:9a:8c:b5:e0:6c:c4:a8:4b:1f:43:b1:db:b7:
                    e4:0b:02:60:9d:ca:c9:97:31:32:f3:52:f4:1e:6c:
                    2a:74:26:29:db:1d:20:c1:82:59:82:52:6c:14:e7:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DC:90:15:B0:99:6B:C1:4E:2E:D4:B2:C1:47:59:32:57:73:B0:E8
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:dc:14:bc:71:2d:70:38:9c:c1:08:ea:e7:92:70:d8:7d:c6:
         ef:c4:72:36:a7:7f:ce:6a:4c:f2:4d:8f:18:32:ca:be:de:b3:
         08:48:80:db:9b:3a:a7:de:62:be:21:3b:38:7d:41:8f:a6:f0:
         99:0b:bb:05:4d:81:c5:b9:85:f4:ff:8f:c5:f4:a0:a8:78:5d:
         5e:d4:6d:d4:60:d0:be:ce:01:4a:ed:16:21:36:1e:c7:c7:15:
         d2:d0:25:16:09:81:15:70:7b:fb:bf:61:fa:60:2b:a9:5c:19:
         e8:c8:20:4d:97:63:70:8f:29:4f:d5:2c:3b:a0:ff:9d:f9:2a:
         7c:0b:39:78:d1:ad:dc:be:10:81:93:34:4a:f6:7d:ba:f2:11:
         60:58:b2:31:6f:65:c0:90:95:63:f8:74:b8:e9:00:7b:8a:95:
         50:64:a2:5f:fc:d0:39:68:e4:55:24:86:d9:d2:3f:57:4b:19:
         f0:d2:08:0c:65:79:70:44:83:77:01:ff:12:b8:b4:dd:a9:f7:
         72:46:3f:1a:f4:04:33:30:18:b9:6f:33:8b:9e:17:68:a0:59:
         6d:2f:b9:88:87:84:8c:70:77:9e:38:fc:7d:56:76:b3:02:c6:
         9b:af:2f:e8:08:b3:a3:d6:4f:f2:91:58:68:b5:a2:32:4a:3a:
         85:4c:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net