Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
File:                     qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft (raw, json)
Hash identifier:          bq2cGr/ARj+n3OJLkx5d+Hknse1Ciy2g9BOya8h67QQ=
Subject key identifier:   88:22:E8:8F:BD:31:F0:1A:F8:E9:0E:16:A2:D4:BB:BE:C9:FB:9F:72
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
Manifest number:          016F
Signing time:             Thu 03 Apr 2025 03:24:28 +0000
Manifest this update:     Thu 03 Apr 2025 03:24:27 +0000
Manifest next update:     Thu 10 Apr 2025 03:24:27 +0000
Files and hashes:         1: qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl (hash: FGRvBS5vDm2bwRVXTZAy0svpGQfRlEvfxcLm3iuDjUg=)
                          2: 92A66D260C6D11EFBF1F4756C4F9AE02.roa (hash: tUAntY9TrcgF+ePvIK5i1BRnGinhhVd2b09zIPe+ofo=)
                          3: C9DBA6A666A211EE8C285556C4F9AE02.roa (hash: 2Fe0dGz8k94KYOZNU1MNOZnfOml3AODtG0smlGzrHD4=)
                          4: 8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (hash: Wanyw+cc+KL/trW3ZEjMYznqZ4yFIMXxUytBXL+aP24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F
        Validity
            Not Before: Apr  3 03:24:27 2025 GMT
            Not After : Apr 10 03:24:27 2025 GMT
        Subject: CN=67edff6b-94ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:a6:54:09:68:61:47:70:21:eb:ce:c2:98:
                    1a:e6:ed:5a:9c:74:70:9f:a3:6e:34:db:00:5f:ac:
                    48:e0:11:08:50:fd:34:f1:69:d6:cb:61:da:9e:d9:
                    a3:8b:80:94:dc:d3:9b:7a:f8:1b:60:ee:fd:f8:43:
                    13:68:3c:1a:a5:73:85:d9:0d:8e:f6:5d:b1:c0:ef:
                    dd:a0:e7:5c:b8:e4:e7:28:ff:a7:44:75:f2:f3:3c:
                    17:d4:41:af:df:33:fa:36:ca:96:ab:06:41:4f:9c:
                    e1:c0:34:e0:d2:56:d4:0c:f6:64:63:90:9f:d5:8f:
                    14:5e:84:a0:d1:0f:7a:08:4b:d5:64:a3:9b:e3:ba:
                    15:65:38:67:50:59:73:b4:3f:89:c6:5a:5b:3b:44:
                    2f:cc:fe:e9:7d:0c:95:69:b7:df:7a:57:e9:dd:f9:
                    2e:89:25:9e:9d:80:26:26:c5:ac:a9:9b:c6:c7:fa:
                    a0:64:68:01:12:0a:54:77:7e:03:86:cb:f1:0d:be:
                    e3:89:7e:5d:cc:79:41:4f:df:90:eb:76:c9:a9:60:
                    26:9f:70:25:a0:49:42:d8:99:bf:d7:d1:d4:8c:77:
                    a7:e2:a1:f0:9c:98:11:97:ce:1f:e5:c8:64:49:47:
                    57:ba:a0:0c:82:ff:1d:a1:4e:a0:57:19:44:1b:cd:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:22:E8:8F:BD:31:F0:1A:F8:E9:0E:16:A2:D4:BB:BE:C9:FB:9F:72
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ac:29:1c:20:30:09:5f:8f:f7:72:bd:6c:6b:5c:c7:f4:b6:
         a6:7b:5d:af:d8:cc:ba:53:66:29:e1:1b:ce:d6:bc:68:60:c5:
         33:a3:56:5a:d9:05:a7:81:46:ab:22:16:9e:75:56:4f:13:2c:
         34:25:f8:e7:14:7e:2d:9f:5c:b0:15:69:97:6e:d1:57:16:05:
         34:2d:58:3d:e3:01:8d:33:46:60:04:ea:ef:bb:bc:b7:a4:af:
         68:4a:7a:cb:72:48:5d:04:68:ac:2f:53:9e:1b:5a:6b:fe:5e:
         10:ae:87:4a:62:a9:c0:ad:ae:72:2f:0a:ce:e4:46:b9:58:24:
         fe:67:c9:15:47:78:59:72:d8:e8:7c:88:a2:b3:9d:d1:44:05:
         c1:36:ff:93:2a:25:55:e0:fd:a7:af:73:21:4c:6c:85:be:65:
         b5:29:1d:4b:35:08:f7:e9:19:18:52:d8:b0:0d:02:52:40:9c:
         e3:5e:41:c0:d2:0f:53:31:c4:5b:5b:74:4b:7a:7b:27:33:c8:
         0f:96:e4:a3:88:01:0e:0d:7c:1a:2f:ae:50:b6:4a:52:b4:bc:
         60:e5:c4:1f:99:bd:7a:54:58:77:ad:59:11:39:2d:d7:1e:78:
         1b:69:89:18:e5:d7:d1:d0:e5:aa:67:c9:0b:f6:40:30:fd:f5:
         93:d4:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:25 2025 by rpki-client