Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          w0gjiW12wBktT9OpOaixd5y40NQ+Cyo67bS4ioleyL0=
Subject key identifier:   BF:3A:D1:F4:FF:D2:69:16:58:4B:B9:65:8A:D8:43:A2:97:D2:BA:95
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       05CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          05C1
Signing time:             Sat 26 Apr 2025 22:46:37 +0000
Manifest this update:     Sat 26 Apr 2025 22:46:37 +0000
Manifest next update:     Sat 03 May 2025 22:46:37 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: fbNPVe9ICJ0Fw+Wzimni31HeKcTpxlE4IB2iK7QFJLY=)
                          2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=)
                          3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=)
                          4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Apr 26 22:46:37 2025 GMT
            Not After : May  3 22:46:37 2025 GMT
        Subject: CN=680d624d-34d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:c6:8d:75:10:aa:2d:a1:47:20:0a:c3:77:
                    0c:f1:8f:29:f9:d6:c0:c4:d3:40:50:8d:84:51:71:
                    c8:63:b9:33:66:43:7e:6d:40:67:7b:79:b4:45:d1:
                    b0:58:0c:23:28:6f:28:11:ec:6e:99:be:d9:28:fb:
                    0d:ee:9e:40:44:6e:e0:28:fd:d4:f7:cb:bf:c2:f5:
                    c2:30:ff:93:88:af:4f:28:25:c9:96:2c:7f:23:75:
                    86:c8:fb:28:29:cb:76:9a:46:41:69:df:c4:68:e5:
                    13:ef:99:b2:ba:86:36:c6:d1:7b:48:a5:d1:7e:99:
                    57:12:a1:95:5f:b3:f9:2b:29:56:47:6a:c4:29:11:
                    5c:7b:32:61:c8:8c:6d:e0:49:86:17:17:b7:e2:8d:
                    60:2c:63:b2:f7:1c:94:aa:c0:8c:c4:e9:ea:9a:e8:
                    a9:72:82:84:2e:38:f2:c3:01:17:66:cf:83:b6:00:
                    ac:be:f4:60:3d:c0:a1:95:32:bb:ce:3c:8b:46:1d:
                    99:49:7f:33:9c:69:b1:50:2c:92:ef:6e:b3:25:8d:
                    85:f4:1f:91:2d:0d:90:07:dd:38:8d:49:99:f9:55:
                    ee:d0:2d:4f:23:08:52:42:c9:c7:78:1f:93:ca:1d:
                    b6:7f:a5:77:3f:ef:b3:7a:b4:a9:ce:c1:ec:02:64:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3A:D1:F4:FF:D2:69:16:58:4B:B9:65:8A:D8:43:A2:97:D2:BA:95
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d9:6a:8a:d4:a2:22:de:27:58:92:ee:96:60:fa:bd:fd:ad:
         67:19:0a:94:bd:04:c8:cc:30:5d:28:37:96:55:dd:91:62:6f:
         2d:e0:55:29:ea:3e:73:61:e4:0f:28:a5:38:7b:16:ad:f2:24:
         6a:6a:bd:77:ac:96:5f:9a:b2:c8:fc:32:5c:76:21:47:17:94:
         c2:9e:13:ae:9b:b6:28:7a:95:11:ec:8c:61:35:e5:2f:b4:c2:
         38:5d:5e:eb:af:a2:7d:79:97:fc:34:f4:86:65:c4:70:92:1b:
         49:66:08:0d:4b:5a:60:c0:71:44:3f:da:cd:9d:6a:8f:08:73:
         04:7d:ab:ce:34:65:2a:2e:40:e3:e8:93:49:8f:a9:04:04:eb:
         5c:6b:f8:08:09:41:7f:9c:9c:68:da:90:43:a1:6a:28:57:6a:
         c4:f7:f6:e2:f2:ef:ba:6c:a2:02:a5:69:85:dc:f6:31:af:37:
         77:ab:3f:59:96:c3:54:83:7e:fa:a9:c1:ef:70:e8:59:7b:5a:
         00:4b:de:f5:a5:a0:8c:f3:10:a2:81:11:59:22:06:82:5d:b4:
         4d:56:69:30:cf:4d:34:b3:19:64:92:1c:1e:48:a3:7b:4a:d1:
         33:d1:1d:5c:3c:d5:35:fc:53:49:ad:f3:35:1a:fd:f6:55:82:
         9d:a5:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net