Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
File:                     q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json)
Hash identifier:          mIFMoNwMRHT5m1Xm4cH/AwJvwR1o58/cym5oPQRjF90=
Subject key identifier:   24:97:01:3C:78:56:A8:F5:1C:59:00:AE:29:87:C2:3A:87:D8:5E:7F
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Certificate issuer:       /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial:       06A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
Manifest number:          0694
Signing time:             Sat 26 Apr 2025 21:54:47 +0000
Manifest this update:     Sat 26 Apr 2025 21:54:46 +0000
Manifest next update:     Sat 03 May 2025 21:54:46 +0000
Files and hashes:         1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: GjBJiGDgKF68ml8jC0Og0A17RBDIrBiwQ2x0Xx3LC30=)
                          2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: CcS2RgyDh/Mt65cyyvz7PDgLBgmPqkXqjVn09wN+d7I=)
                          3: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: sB2xN+NI3UCkCts4i5bUwtcZvKVfZaogReZtF2ClOtM=)
                          4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: Ey7sXMoZK5X/9B/g0P4vb+TT1dBxjAAcErSKVPBVZ8c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 21:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
        Validity
            Not Before: Apr 26 21:54:46 2025 GMT
            Not After : May  3 21:54:46 2025 GMT
        Subject: CN=680d5626-3bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:6e:00:9b:53:3e:43:b1:c9:b5:bc:71:4a:
                    99:0d:01:17:18:dd:73:06:be:23:8b:9e:b1:10:09:
                    c1:2c:69:b8:a9:fe:51:97:f1:c2:f8:f0:3f:02:be:
                    74:7b:ba:b8:b9:ed:27:c9:79:51:cf:1c:85:ba:b3:
                    dd:6a:01:ac:a6:e6:0f:4f:c8:5d:0a:0f:f0:51:7d:
                    5f:2f:e2:15:9e:fe:b1:4b:dd:55:69:4f:43:11:87:
                    32:f8:a7:60:55:1c:a3:db:57:28:67:89:fe:fa:76:
                    38:b9:d8:ae:34:5a:78:74:e1:32:5f:75:6d:3d:df:
                    16:58:9d:34:ef:e3:a7:f2:68:d0:08:1a:11:15:bd:
                    f4:c2:8e:e6:eb:f8:18:13:9e:31:e3:23:64:2b:5c:
                    7c:0a:25:74:a6:01:bc:d5:7b:36:d8:6a:d0:37:47:
                    99:bf:07:6d:25:e7:da:1a:5f:89:b7:28:1e:3f:7b:
                    e1:25:80:08:b1:de:57:d5:cc:83:39:5c:30:f8:c0:
                    1a:a2:ad:16:b5:4d:9a:a9:14:dc:3e:da:36:1c:dd:
                    c0:f8:47:2f:22:4d:18:52:65:3e:e7:02:64:0f:11:
                    12:20:93:22:ca:fa:2d:4d:74:42:70:20:bd:e3:22:
                    59:ba:c1:a9:1d:56:dd:78:27:7e:49:16:7c:b9:7f:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:97:01:3C:78:56:A8:F5:1C:59:00:AE:29:87:C2:3A:87:D8:5E:7F
            X509v3 Authority Key Identifier:
                keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:98:51:5d:06:3d:28:30:ba:bb:be:15:97:d1:c6:2a:e7:b4:
         43:62:cf:62:19:37:a8:c3:b4:c0:b1:bf:29:54:ae:6b:64:a2:
         d1:f2:5a:b2:80:0d:1d:bb:80:26:fc:00:d0:eb:15:40:ca:a1:
         f0:20:4e:eb:65:f1:0a:3f:4a:99:2e:8a:c9:88:2f:be:a7:29:
         ed:ce:61:39:9e:bd:d6:46:41:b2:0f:4c:34:05:58:25:f9:76:
         14:32:e5:dc:9c:be:da:49:b7:c5:b9:4f:54:f8:a9:27:96:fd:
         17:db:87:5a:84:41:9d:47:c7:ef:db:53:c4:cd:f4:9f:77:37:
         da:9f:0b:0a:58:e4:9e:45:37:39:88:eb:7d:20:40:be:27:a4:
         07:38:10:34:1f:3c:af:37:b8:09:5c:03:b4:06:5c:cc:52:e5:
         45:ec:64:2e:ad:bd:4d:32:c7:04:08:7b:7f:ca:fc:d0:7d:99:
         2f:5e:ef:5b:b5:ab:fd:5d:d0:95:9b:6a:40:5a:82:0f:37:0e:
         4b:86:5a:43:93:e3:40:a6:df:aa:92:35:22:f9:6a:96:74:3d:
         63:4e:a6:e4:4d:8a:9d:21:dc:8a:ea:47:dc:44:06:cf:c0:cf:
         0f:6c:1a:b2:3f:3b:f9:de:ae:b6:a8:2c:2c:e7:97:f1:68:f5:
         b6:1d:8f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net