Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File:                     qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier:          Y8aBkGOlGhkyWiIVyvPiKdhKSX6c28HtOj3ju1m17SI=
Subject key identifier:   44:34:36:48:BD:D6:1F:DF:20:C3:65:CE:AE:D7:9A:82:23:29:62:8B
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer:       /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial:       2CA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number:          2C72
Signing time:             Fri 04 Apr 2025 15:35:29 +0000
Manifest this update:     Fri 04 Apr 2025 15:35:28 +0000
Manifest next update:     Fri 11 Apr 2025 15:35:28 +0000
Files and hashes:         1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: NGNchGVlJJ9IB4QRbU8a3zxTtxhkbCKZBP1Ax0jv1yE=)
                          2: C8E49B061B4A11EFB0254061C4F9AE02.roa (hash: 7FPN0SRuWJfULT9tVDvUHZr3ouxxqIjwcV/rSLIEsSw=)
                          3: 8FFA11F41B4A11EFB2A0D360C4F9AE02.roa (hash: cgJY4Uq3MzUzp2B5uz4iMY9zZJaK3BtYC4bJCl9WkNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
                          rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11430 (0x2ca6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916216D
        Validity
            Not Before: Apr  4 15:35:28 2025 GMT
            Not After : Apr 11 15:35:28 2025 GMT
        Subject: CN=67effc41-17fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:a4:c7:6f:4c:0c:f4:85:85:30:72:9e:06:
                    6d:67:15:8f:6a:67:96:a1:e7:55:04:49:fd:1e:76:
                    90:2b:b0:d8:49:51:80:d6:75:52:57:e3:cd:4d:fd:
                    1c:97:6d:39:ba:89:46:e3:34:85:32:bf:27:b0:31:
                    d7:45:a0:20:06:83:79:0a:e9:3d:21:46:8c:7f:a7:
                    67:3d:c8:42:8f:b5:37:3c:60:5c:09:7b:9e:f4:d6:
                    40:cf:5b:54:c8:32:8c:dc:bc:6c:75:0b:15:44:8b:
                    ca:bc:bf:cf:8a:db:0f:d0:e0:ce:7f:d6:72:cc:c7:
                    10:e7:18:b6:f4:3c:bd:73:9b:38:2b:3e:19:4c:eb:
                    26:c6:c4:29:7e:42:58:1c:41:d8:72:54:13:d2:2e:
                    8e:be:d8:76:68:a6:5a:d8:d1:dc:79:99:89:33:67:
                    95:08:8c:8f:5e:c9:1c:1b:33:83:ad:f8:51:be:17:
                    e1:80:bc:ae:ec:3b:f6:a7:d3:c6:9b:36:c6:4b:12:
                    cd:28:e1:1f:79:40:88:2c:df:59:39:f5:c8:de:10:
                    f0:53:b0:5c:d0:30:5d:a7:f6:a2:9e:07:7d:ed:61:
                    b1:c7:2f:e8:cb:a6:0f:89:ed:28:29:b0:cc:6e:65:
                    81:4a:f4:73:ee:61:c1:19:ac:78:4f:b5:90:63:51:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:34:36:48:BD:D6:1F:DF:20:C3:65:CE:AE:D7:9A:82:23:29:62:8B
            X509v3 Authority Key Identifier:
                keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:90:cb:e6:e6:54:93:56:dd:63:32:88:24:d8:e4:21:74:16:
         fd:9d:cb:86:c6:88:32:37:f4:75:23:de:71:03:13:d4:7a:78:
         57:58:56:f8:e0:88:06:db:bd:2a:b4:ea:08:4c:1a:99:07:d9:
         20:ae:a8:3c:60:49:0d:73:bb:ee:c6:0e:95:4c:50:59:3d:fe:
         65:61:5d:4a:cf:9d:ac:ca:8c:34:59:fd:fb:a1:95:21:a3:98:
         c4:c0:28:a2:1e:ce:45:2c:fe:84:7b:9f:d2:69:ff:2c:68:3a:
         9e:ef:20:f4:55:8f:0f:ab:3b:9f:d9:74:05:49:ac:51:f4:f2:
         29:e4:eb:bd:cf:2c:b8:30:b5:e0:d3:b9:37:ae:7f:1c:71:cc:
         a2:0e:5b:72:99:99:8a:97:b0:48:10:27:e7:ea:39:ad:b8:f9:
         32:be:18:8b:64:74:a3:9b:c0:5a:2d:2b:b9:fe:da:d6:e2:60:
         7b:93:e4:e7:c8:77:20:c1:b3:4a:7b:47:ef:81:fa:f7:55:c2:
         13:98:2a:a1:88:66:f6:ab:2e:de:a8:3c:0d:88:bd:87:eb:d2:
         86:eb:68:f1:ba:86:22:81:b6:51:7b:1d:28:2a:52:20:42:bb:
         c6:ee:93:b1:08:61:34:42:65:74:eb:c7:e7:cb:42:45:4d:80:
         50:a4:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:03 2025 by rpki-client