Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File:                     QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier:          m5bZiMu8HRVnZLI60iL+0S6JU47VJtoo8sMg6An8YCg=
Subject key identifier:   E7:AE:AE:BE:3F:07:AE:A0:FB:3E:7C:F0:95:46:BD:78:26:A4:F1:E0
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer:       /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number:          E0
Signing time:             Wed 23 Apr 2025 04:52:24 +0000
Manifest this update:     Wed 23 Apr 2025 04:52:24 +0000
Manifest next update:     Wed 30 Apr 2025 04:52:24 +0000
Files and hashes:         1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: h2sBlQnmrASYhB7+YrN6kNv6E8ui7981CDu/S/wxMhA=)
                          2: FCF99042301011EFBC350682C4F9AE02.roa (hash: 4zWkF54fFYIlLcGDrxu60ccu1Jo/sOlDzQpRDsrkmZ0=)
                          3: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: G5wltjNSD/O3ajAJpyjvE7MGloJrQIziYtmSgOapwTQ=)
                          4: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: egrPthjaxF/A13xbTq0oU0ubbDy9CZyZ7qj/Ab6JSEg=)
                          5: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: Ca6ie1031aXWOzMVO9+1hU4OttxwbWwW5RmhLwoDTf8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
        Validity
            Not Before: Apr 23 04:52:24 2025 GMT
            Not After : Apr 30 04:52:24 2025 GMT
        Subject: CN=68087208-dae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:ac:c3:1b:30:28:4a:46:db:b0:73:7e:b7:
                    77:97:9e:9d:20:cf:cb:a8:49:35:5d:41:2c:c6:fa:
                    91:4c:b8:cc:fd:d1:71:59:d6:88:ff:f1:98:13:5c:
                    40:a5:55:41:f8:c2:38:03:10:f9:32:a2:07:1b:a2:
                    5b:4f:78:8f:d9:0d:df:75:c4:67:8e:1b:dd:86:11:
                    8f:3e:8e:1c:b0:09:81:fb:28:20:ce:27:50:04:75:
                    ea:1e:94:30:46:f0:dc:c7:75:f1:3d:42:e2:79:0a:
                    d7:51:99:d8:4e:08:be:78:67:67:1c:8b:81:58:9d:
                    10:10:bb:cf:02:0a:87:3b:0e:a8:7e:47:a3:df:32:
                    ec:e0:8c:fa:50:b2:fa:2a:6b:89:ac:00:69:4f:68:
                    b9:48:d2:0f:71:6b:5e:5d:b3:f9:f4:f0:0a:24:29:
                    1b:ef:c5:e7:ca:71:31:49:bf:c6:45:3c:28:cc:cb:
                    83:38:ce:bd:da:36:34:49:09:8b:d7:e1:ea:65:f4:
                    44:1f:ff:af:61:3b:f3:57:c7:b1:c3:30:25:bb:14:
                    2d:e1:9b:c6:5d:0b:71:8e:80:54:0b:23:d4:55:8d:
                    f2:25:d2:83:98:1d:76:79:c3:f9:f1:33:ef:0f:de:
                    4f:f2:e2:e1:63:95:b0:1b:78:0f:c4:9b:84:94:a0:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AE:AE:BE:3F:07:AE:A0:FB:3E:7C:F0:95:46:BD:78:26:A4:F1:E0
            X509v3 Authority Key Identifier:
                keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:63:40:6e:32:61:f0:4d:71:0a:97:2c:3b:24:51:69:9a:
         16:23:8f:14:3e:6e:56:7a:47:ac:6f:bd:23:33:79:83:46:c6:
         ba:92:70:ec:ba:72:10:a4:a5:82:a0:e8:1e:b0:c4:a1:2e:f7:
         7f:00:a7:99:85:9b:2b:9e:c1:c3:cd:90:74:2c:06:d2:52:70:
         cc:b7:36:f3:1f:6f:f1:3f:69:fd:25:90:93:07:6f:56:2c:97:
         ad:18:e4:7c:7c:a0:0d:7c:fa:74:2c:dd:36:7d:8e:33:12:00:
         a7:d5:71:74:fa:ff:c4:86:ba:b6:2e:5c:82:4a:39:fe:48:56:
         85:1f:fd:56:0f:b0:c9:b5:07:2c:fc:66:8a:6a:f5:09:59:f6:
         7c:5c:f7:40:78:f3:3c:b8:17:b9:ad:bb:f9:6c:4c:8b:d8:7a:
         ac:c8:ab:d0:47:d3:48:40:ae:c6:64:1b:55:e2:02:4b:5b:f5:
         24:53:1d:c0:0a:27:c0:96:d0:0e:e5:46:9e:78:7d:b5:d6:ea:
         3c:a3:7a:ee:39:4b:a8:f4:dc:0e:98:0d:a6:f9:51:69:64:30:
         85:2f:ac:47:36:ae:1e:a5:64:6c:39:c7:8f:ee:a4:fd:f7:5d:
         1a:62:f3:04:b1:d4:fb:bf:58:43:3a:25:f6:51:0b:1c:52:f1:
         65:0a:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:54 2025 by rpki-client on console.sobornost.net