Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
File:                     qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json)
Hash identifier:          KqiaB3NPL+uybB2uafQCLdxR1P0l+tCUpM11xq2OaK8=
Subject key identifier:   CB:92:92:D4:D1:DB:2F:FF:2E:9E:CB:C1:D9:31:A0:0D:0A:E3:65:33
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Certificate issuer:       /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
Manifest number:          AC
Signing time:             Sun 27 Apr 2025 04:56:15 +0000
Manifest this update:     Sun 27 Apr 2025 04:56:14 +0000
Manifest next update:     Sun 04 May 2025 04:56:14 +0000
Files and hashes:         1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: lcrGLznJZuEFAPyixfEEnUTMO+50mSZfvd6uMMCMjeM=)
                          2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: Nwxndbe8HVB4N9vkz2u0yYwDfuyP9L4g9kHPKAHCIos=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
        Validity
            Not Before: Apr 27 04:56:14 2025 GMT
            Not After : May  4 04:56:14 2025 GMT
        Subject: CN=680db8ee-b938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:f9:91:00:56:92:f1:d6:56:49:fe:79:bc:
                    ec:d7:cb:ed:ce:ac:b7:5c:97:d2:50:bc:43:52:c6:
                    5b:14:f1:f8:b4:b7:4a:89:35:34:53:48:53:53:f5:
                    9d:11:f0:b5:4a:bb:d8:21:35:11:32:78:3d:78:3e:
                    6a:9c:4b:8c:43:bc:b4:49:ef:15:75:71:44:91:48:
                    4c:6c:0c:4f:5b:5f:56:80:60:71:f6:76:93:d8:ed:
                    18:3e:8c:e2:00:23:fd:79:2d:2b:25:33:e4:7b:af:
                    4c:ff:f1:f6:63:af:17:92:8a:d4:ce:04:d0:55:a5:
                    d9:32:82:66:6e:ab:67:f4:f3:74:ac:7c:8b:91:09:
                    b0:df:b3:da:f9:0a:0c:26:b8:82:cf:3b:23:7e:1b:
                    16:8b:4b:04:cf:9f:36:54:a8:b9:80:0a:0a:bf:d2:
                    76:85:15:ae:b8:a1:ae:94:1a:62:2d:bb:d3:9e:56:
                    8e:d8:bf:55:f5:93:aa:b4:d3:fb:5c:cc:4c:a8:bf:
                    d0:ec:aa:23:76:19:1e:66:1f:2c:d1:9d:ba:ba:dd:
                    fa:f4:bf:ec:3b:e0:a0:ba:d7:3c:cd:bd:bf:3c:85:
                    86:c4:14:40:63:9b:d5:fd:65:49:1a:77:4d:a5:0f:
                    bb:04:2c:14:de:ed:09:f3:8c:85:49:72:72:50:56:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:92:92:D4:D1:DB:2F:FF:2E:9E:CB:C1:D9:31:A0:0D:0A:E3:65:33
            X509v3 Authority Key Identifier:
                keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:91:ed:6d:67:75:61:4f:be:86:2c:cd:21:e8:7a:c1:12:
         0e:85:03:d9:e7:b3:69:dd:5c:f6:72:dc:27:28:f2:be:f4:83:
         30:6c:14:6c:b0:57:ed:29:ec:b3:ab:23:63:3b:7e:f3:6f:56:
         b2:ba:c3:8c:df:b3:af:77:fc:ac:69:ac:cc:fe:37:71:43:86:
         f4:49:ae:a4:d1:f6:bd:4c:a6:c9:50:ae:cb:b5:31:5f:f8:ce:
         c9:ce:b5:19:c0:d6:37:88:f3:f5:ab:06:f6:24:46:52:09:95:
         cd:70:f5:09:d1:2e:59:54:4d:c7:4c:2a:55:1c:ff:d6:1f:da:
         bc:d0:fd:40:ea:c9:b2:16:b0:63:d1:35:56:e7:76:51:c3:05:
         77:b4:7a:fc:55:40:05:54:09:22:7e:fd:85:bc:44:90:b9:4b:
         02:5f:af:2d:d2:e3:fe:ef:f9:18:61:73:7c:03:df:1e:36:87:
         71:a1:bf:33:df:aa:5c:66:7d:1c:47:fc:ec:cf:70:b2:7b:d3:
         ee:02:fc:4c:2b:b9:0b:fe:77:a1:1b:07:60:85:e8:e1:08:ca:
         7c:54:39:fd:a1:b3:47:43:8e:e4:8b:76:99:cc:01:79:d2:27:
         3e:d9:80:79:2a:50:3c:47:b1:7c:42:e5:fd:23:a4:75:25:8c:
         19:88:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net