Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File:                     q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier:          e3DcKpq4dnBbe77hsbzK9Qp+wl//XSPQxwNgVn3t58w=
Subject key identifier:   C7:76:E7:DE:CC:DA:00:4F:B2:4C:CE:A2:BC:E4:73:12:D0:7B:52:68
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer:       /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number:          0166
Signing time:             Thu 03 Apr 2025 03:28:49 +0000
Manifest this update:     Thu 03 Apr 2025 03:28:48 +0000
Manifest next update:     Thu 10 Apr 2025 03:28:48 +0000
Files and hashes:         1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: gIPtZkYm/Vme5OwLmAIEqtj7yTxWEzpK/MS0vQ39fAk=)
                          2: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: kG8HKid+EZkU/hyqnFNZ4Dj2sC9Icf/i925ERR1UGyw=)
                          3: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: 7BVmNepQES6T7o+2bZV/zc2Q9T00B1Q0rsuk0jHEIvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
                          rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91A
        Validity
            Not Before: Apr  3 03:28:48 2025 GMT
            Not After : Apr 10 03:28:48 2025 GMT
        Subject: CN=67ee0070-f572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:83:f3:a5:d7:3b:bb:13:ed:6b:c6:2f:68:
                    65:d0:ed:6a:f3:7c:49:2d:a1:68:79:3b:72:b6:2b:
                    a4:79:d4:ff:b7:aa:18:d1:4e:5f:16:d6:38:40:5a:
                    86:ac:73:79:37:f1:a0:a0:f9:66:06:18:1d:df:33:
                    98:43:25:0d:ba:76:d8:da:45:6d:18:1b:e1:c2:33:
                    ce:eb:85:91:e4:4c:4f:e6:4e:8b:d6:09:cd:34:85:
                    8a:9a:8f:e0:e9:9a:14:26:47:f0:71:94:9b:fd:35:
                    e0:5f:84:70:58:e6:5f:26:5e:d3:cd:aa:61:9b:fd:
                    a2:94:34:0b:84:44:59:d1:ee:2d:f3:08:b4:74:06:
                    cd:76:44:b6:f1:4d:a2:00:37:14:94:eb:80:35:da:
                    3a:8d:3b:9a:62:a4:e4:5d:db:b5:17:d7:10:23:b4:
                    97:f5:c5:9e:98:c0:86:03:4e:22:cb:59:54:ca:a1:
                    73:53:5f:1e:b4:a9:00:73:85:ee:f5:04:44:b0:4b:
                    c3:aa:16:36:67:35:e1:af:48:11:12:6b:0b:ef:59:
                    e7:be:40:70:97:40:9f:2b:fa:50:4f:08:9a:c9:24:
                    86:5d:b5:84:ed:26:9b:34:6f:7a:7d:ce:ae:13:e6:
                    91:5b:18:b1:16:29:8f:ac:e4:02:6c:7b:17:29:aa:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:76:E7:DE:CC:DA:00:4F:B2:4C:CE:A2:BC:E4:73:12:D0:7B:52:68
            X509v3 Authority Key Identifier:
                keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:77:22:f0:29:14:6d:3e:10:20:02:e8:ed:ed:00:ce:d5:d7:
         f4:73:15:18:f5:73:fb:43:c2:2e:90:f3:f5:fc:0b:57:7d:24:
         91:af:b9:56:99:19:a6:1c:c7:4e:51:3e:e9:3c:d9:94:6d:8b:
         e3:db:52:dd:7c:f2:b0:64:f3:b0:72:16:94:82:83:12:91:c9:
         67:ca:10:2d:c3:d5:6c:f8:05:41:30:b5:b7:21:4c:a1:e4:52:
         b1:f4:58:88:3c:77:b6:8c:76:32:0b:5f:c7:62:1f:84:67:62:
         17:1b:19:fe:b1:7d:8f:58:27:06:e6:32:5e:8b:80:e9:51:b7:
         df:07:a3:25:14:b4:d7:d4:30:b5:b9:57:d1:a4:6e:2f:8d:e7:
         63:68:1e:3e:51:0b:a6:44:fb:69:dd:96:59:23:52:ab:07:14:
         2a:f3:5d:0a:b7:6e:b6:08:7a:95:d4:4f:b4:30:83:13:20:de:
         31:89:5d:2b:10:4f:6a:90:74:a7:89:93:ad:30:88:6d:ed:1b:
         79:29:34:57:27:d2:eb:7a:bc:be:4f:4d:29:fc:f2:b4:b8:97:
         89:9a:17:4a:70:06:d7:88:96:98:d4:05:f8:8e:86:07:2c:45:
         28:19:89:b2:7a:4d:b5:5f:39:9e:f6:d3:ab:ff:cc:5d:81:39:
         ad:99:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:47 2025 by rpki-client