Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File:                     qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier:          7E+VjdgJW6u2TslN43dcwF1Bskjcgu9R0/u/6fc2A4w=
Subject key identifier:   C7:7C:11:E6:27:01:2F:25:1F:EA:43:4B:59:88:AE:BA:43:21:FD:28
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer:       /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number:          96
Signing time:             Mon 07 Apr 2025 05:14:08 +0000
Manifest this update:     Mon 07 Apr 2025 05:14:07 +0000
Manifest next update:     Mon 14 Apr 2025 05:14:07 +0000
Files and hashes:         1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: ZydYtGxjxCxn0K3TtVrdPnrXgqEw86WSKTxQs3lStQI=)
                          2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: B8Xb2sYgtypSv3e1Q/ixe1JBQsd2MMr7LDz0OuJS7tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
                          rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003
        Validity
            Not Before: Apr  7 05:14:07 2025 GMT
            Not After : Apr 14 05:14:07 2025 GMT
        Subject: CN=67f35f1f-abd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6a:e8:82:a2:d3:c1:03:ca:06:bb:0b:3d:0a:
                    86:ca:7f:02:72:4e:8f:96:6d:26:ac:b9:ff:ae:59:
                    b0:b6:bb:bc:73:5a:49:9a:8d:74:73:66:46:2d:43:
                    76:13:ec:b4:68:56:1c:96:c3:9a:3b:21:2c:ea:7d:
                    8e:bb:93:2b:72:4e:23:fc:c6:54:7b:8e:70:e1:42:
                    4b:b2:da:92:2f:ce:b5:31:cc:7c:71:b3:d5:89:e6:
                    6c:22:2f:63:67:79:10:d7:84:55:41:36:ca:5d:dc:
                    6b:6a:0b:46:70:e6:1d:a2:de:bf:4b:38:63:e1:08:
                    4e:80:15:61:59:1b:4d:73:c9:32:25:3e:64:41:ce:
                    dc:a0:43:5d:35:0e:56:11:4b:c4:79:ca:47:74:0a:
                    a3:31:79:a5:02:31:a1:91:17:e8:a9:88:c7:5b:8d:
                    59:bd:ff:84:0f:da:bc:5e:41:de:d9:2b:ec:d5:b0:
                    ee:60:ec:91:bb:75:46:ef:d0:26:23:14:38:a6:45:
                    25:2d:d4:0e:50:bb:df:f8:12:e4:6f:55:1e:e2:5e:
                    ca:88:a1:bd:44:32:a5:f2:99:f5:b3:20:e0:b7:f5:
                    ea:35:84:6b:7d:67:64:37:70:dd:ec:84:37:3e:e2:
                    75:32:7b:ef:98:66:3a:38:95:3b:43:c3:e3:97:4c:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7C:11:E6:27:01:2F:25:1F:EA:43:4B:59:88:AE:BA:43:21:FD:28
            X509v3 Authority Key Identifier:
                keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:31:9e:fe:8f:1c:c1:4c:8d:39:15:d6:df:83:e3:c3:2e:e6:
         ce:7d:9d:b4:d2:23:5b:a1:6c:a1:aa:54:6f:a7:b4:0e:df:62:
         44:5d:5d:94:d4:39:b4:0b:c7:60:81:27:46:99:61:78:77:0b:
         21:29:db:47:a2:94:92:a2:85:0c:a4:e9:25:52:6d:00:de:4c:
         7d:bb:ca:f7:e9:1f:1e:80:27:29:a3:4b:15:32:e3:3d:af:2f:
         0c:2e:19:d6:c2:6e:06:59:ba:d7:b3:3f:0a:95:94:a9:11:f2:
         1e:62:24:80:a4:51:a2:ae:db:00:e0:34:c2:59:9a:06:a7:c8:
         84:c4:c2:92:d2:3e:95:a2:ba:c8:74:23:28:b6:ad:69:bd:cd:
         e5:fd:00:f3:19:8b:51:90:b8:8f:a0:40:e0:0e:ad:e0:98:92:
         6d:d9:1c:71:af:5e:67:f1:41:90:ce:a3:b2:91:62:4d:31:79:
         a2:27:ba:a3:2f:c9:62:10:6c:48:a6:dd:14:4c:7f:6c:0f:71:
         8f:eb:e2:43:c2:a4:23:42:b5:03:16:f4:0c:60:ce:57:59:fd:
         66:5c:22:50:ff:ce:04:ca:de:84:94:4a:10:3b:e0:c2:6d:9d:
         30:e7:0f:32:69:00:71:18:63:c6:fa:f3:c3:a7:28:8a:1f:6b:
         c3:f7:97:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:42:02 2025 by rpki-client