Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File:                     qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier:          ek5/DEFV+Dd2Ujr6eBuuFXP5T54LRJDRdRXebjC0vUw=
Subject key identifier:   3D:47:80:15:87:CA:50:13:D1:B1:58:C8:09:BD:79:44:C4:2A:A2:C2
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer:       /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial:       2BF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number:          2BC6
Signing time:             Sat 18 May 2024 15:48:17 +0000
Manifest this update:     Sat 18 May 2024 15:48:17 +0000
Manifest next update:     Sat 25 May 2024 15:48:17 +0000
Files and hashes:         1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: bWDEXWsj+AMzBzS0M7UZQPafuEg1d7aq6h37g3jTaWw=)
                          2: EDA0915CC08D11E899023A13C4F9AE02.roa (hash: H5jA0wvxquA3z0Uv4vCVKm+ji480n3r5oo8JclCxhv4=)
                          3: DA3FF6F0DFA111EEADCCBA6BC4F9AE02.roa (hash: X/4DqS0cqTHoTWps2jwnFGbYfP8xva/TDhoV6YAb5wk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
                          rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11252 (0x2bf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
        Validity
            Not Before: May 18 15:48:17 2024 GMT
            Not After : May 25 15:48:17 2024 GMT
        Subject: CN=6648cdc1-f3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:b0:02:de:bc:d8:7a:99:fc:c6:d4:ba:b4:
                    ca:36:02:0d:d8:00:d0:35:65:11:7f:37:6f:53:bd:
                    1c:94:f5:a7:16:34:5b:26:e5:98:53:82:e3:fc:ce:
                    ae:63:d3:ad:fb:3c:12:0c:50:7e:94:33:75:e8:4e:
                    a8:d1:30:1d:09:cd:26:98:4d:e1:53:28:72:01:76:
                    45:b9:e0:b8:d7:5a:34:a7:c4:2d:c1:45:18:56:2f:
                    a8:6d:83:24:26:3b:16:16:83:fe:78:21:03:c5:e0:
                    35:2c:6e:46:0f:18:86:fd:dc:8d:a7:0c:91:2f:4a:
                    07:34:ae:34:2a:f9:8f:16:a0:f2:0a:95:dd:79:86:
                    18:cd:e7:c4:3a:63:90:e4:7a:93:6c:ae:d4:bc:74:
                    29:6a:c0:d8:06:8f:c5:61:67:1b:49:0d:8f:a9:51:
                    25:b6:08:5e:3a:3a:85:ca:12:d1:64:94:6f:2a:8e:
                    e7:10:fd:f0:ac:54:9c:09:0e:91:c9:7f:15:78:04:
                    fa:fa:01:90:d3:aa:4d:cf:b7:9f:e6:3f:63:15:e4:
                    6e:07:4a:5d:f2:33:20:a1:10:8d:07:28:e8:b9:21:
                    e1:f4:3d:59:4a:d4:16:5b:05:19:22:bb:e8:51:71:
                    b9:24:4b:d7:22:2b:79:8b:ee:97:bb:1b:77:da:a6:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:47:80:15:87:CA:50:13:D1:B1:58:C8:09:BD:79:44:C4:2A:A2:C2
            X509v3 Authority Key Identifier:
                keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:62:8a:bc:5f:40:62:f4:35:bd:35:5f:b5:14:28:01:bc:
         1b:95:f8:4f:6e:d2:04:8e:89:ee:e1:a7:fb:48:2c:19:26:c4:
         ba:ac:ca:23:5d:20:0c:8c:37:04:6a:19:24:92:4f:e3:b3:02:
         72:35:ef:f5:7b:70:b3:45:03:de:49:9f:c7:50:fd:2f:04:3c:
         0e:fa:49:d4:01:9a:50:72:64:15:5c:7f:07:16:8c:a0:e4:69:
         b9:8e:20:13:bc:d7:ee:f3:19:28:3c:93:0e:d2:f2:3e:06:34:
         5f:be:85:a2:7b:2d:60:4b:2a:2d:af:15:1d:1f:3b:c1:45:6d:
         36:b5:f4:ae:f2:55:1d:92:cb:75:76:e8:8d:f9:c3:1f:d4:af:
         1a:ac:3c:d7:cd:18:b9:45:b3:6d:bb:10:c6:f7:fe:12:31:95:
         15:22:46:29:aa:a5:9f:30:a8:89:c3:58:eb:79:f2:d0:f1:a7:
         6b:bd:49:80:2b:71:06:14:f8:d7:00:80:c3:0c:05:3c:e6:36:
         7c:3f:b8:82:e3:da:74:54:d7:a0:37:e7:ca:fd:8d:14:d7:dd:
         45:75:2c:af:75:12:0b:bb:fb:d9:29:75:46:df:47:3e:27:a9:
         9f:49:83:cd:6b:9b:04:d5:98:3e:9b:11:fa:95:c3:f5:18:cd:
         43:99:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:19:53 2024 by rpki-client on console-fra.rpki-client.org