Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File:                     qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier:          p7DZlOzgg288lHt21yk2oQXdo3GQXZZVpn6+apAPUeo=
Subject key identifier:   6D:43:F9:80:B6:1E:20:0D:93:D1:D5:6F:49:1B:BD:B6:85:2B:EF:D8
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer:       /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial:       04F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number:          04EA
Signing time:             Sat 26 Apr 2025 23:24:15 +0000
Manifest this update:     Sat 26 Apr 2025 23:24:15 +0000
Manifest next update:     Sat 03 May 2025 23:24:15 +0000
Files and hashes:         1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: wv+1sPQASwWNWILHVviU7JFUogv7tucffk5Gf0gRP1Q=)
                          2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: JnyQcmBv8MumIf8qvh8E711qakyrMUVoNJzBwPEqLFk=)
                          3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: iYMv0Y2btiNQDsASykiNYZLlnHo5rRZ4eb3rA88k1B0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
        Validity
            Not Before: Apr 26 23:24:15 2025 GMT
            Not After : May  3 23:24:15 2025 GMT
        Subject: CN=680d6b1f-112e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:c4:32:9b:57:6f:fa:96:1d:6f:15:5f:db:
                    91:ac:cd:9f:ac:3f:5f:21:b1:d0:81:e6:3b:c5:38:
                    69:47:d8:da:33:5a:8c:a0:e1:a1:19:f3:3b:b6:26:
                    f4:6a:e5:13:79:43:8d:b9:0e:e7:61:b0:f7:c8:64:
                    ce:d3:e7:cb:0d:ba:de:b8:11:ff:3e:27:41:a9:3d:
                    0f:53:f7:3f:c7:c5:9d:0f:90:4b:ce:be:38:59:b5:
                    d9:2d:0f:8b:23:68:88:f0:29:24:0f:46:5e:27:0b:
                    fe:e5:6c:81:e2:97:71:a0:cf:cb:7a:78:b9:d6:bc:
                    28:18:52:45:11:5e:aa:92:99:6a:87:96:34:a0:1b:
                    85:5c:9d:17:91:36:7d:fc:fb:e9:11:84:8d:4f:02:
                    02:36:38:d3:57:61:38:0c:7d:12:5c:54:e5:dd:70:
                    0d:48:11:d1:ec:29:4c:53:ef:ea:7e:56:5a:84:96:
                    91:3b:eb:4f:00:89:dc:b8:73:d0:5e:09:c4:f3:3a:
                    6c:d1:10:cf:de:74:b5:c4:38:84:97:e9:29:85:08:
                    fc:39:bd:e9:70:42:33:1a:bc:59:64:b0:96:1d:89:
                    eb:b1:26:89:a5:63:6f:51:a4:ac:48:b1:74:ce:50:
                    a9:d7:e0:26:dc:b9:53:90:61:36:13:a3:97:14:c7:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:43:F9:80:B6:1E:20:0D:93:D1:D5:6F:49:1B:BD:B6:85:2B:EF:D8
            X509v3 Authority Key Identifier:
                keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:86:cf:be:7d:21:1d:ce:c7:62:30:ba:92:f0:ae:27:7a:
         86:be:8d:a1:d3:ff:fe:ab:05:11:cb:8a:54:c5:62:cd:96:5a:
         bd:3b:a4:55:71:b8:5d:25:53:8e:80:6e:b5:dc:2e:63:50:4b:
         95:d9:7c:d7:c3:44:1b:98:00:84:6b:8a:2d:83:a7:9c:b3:56:
         ea:b8:67:d7:4b:0b:b6:18:d8:99:67:80:0d:57:47:9d:5e:ce:
         9b:ca:38:7a:0a:09:bf:a1:59:45:47:7a:69:9d:26:bc:92:1e:
         f4:f2:d2:b6:52:cf:37:97:31:ce:89:9a:64:26:8e:14:bd:3f:
         24:91:93:12:47:00:d9:ea:ab:74:a9:fa:a2:87:16:04:07:f3:
         2e:02:51:36:5e:38:f6:84:0d:e4:4b:d5:1a:62:85:0f:32:ec:
         44:0c:c3:05:5c:f3:4b:a9:97:0d:65:25:80:bc:88:35:7f:a9:
         a9:88:33:59:ff:14:b1:02:5b:4d:31:9f:c0:1a:c4:73:5b:f2:
         bd:7e:a7:86:a6:a0:9d:97:48:a0:90:9a:10:94:43:50:de:22:
         af:4b:23:48:c7:c0:18:35:df:e0:68:f2:80:ad:22:6f:5a:59:
         1c:28:3b:a9:56:95:e1:cd:cc:75:11:85:94:ca:d2:28:d3:eb:
         78:e8:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net