Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File:                     qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier:          LETm4f1xOLBMIpCIiTsOUySaSUHgFCsDKouJFhC5u2I=
Subject key identifier:   3C:FE:1B:28:CE:D8:20:CD:DD:B9:D7:A5:7C:C6:D5:D0:A0:6C:8C:97
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       081E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number:          0809
Signing time:             Sun 20 Apr 2025 20:36:30 +0000
Manifest this update:     Sun 20 Apr 2025 20:36:29 +0000
Manifest next update:     Sun 27 Apr 2025 20:36:29 +0000
Files and hashes:         1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: XBD0OFBj6X4WdRNWVjh/QclkggzC93H0ZbT1s0peBck=)
                          2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: htNAczAQr9cp+dQtuGGopn21sy0+/KYk5/WFNh6si70=)
                          3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: d2hFjD7xeVN3cyOnjASfx1gXiQEjM5kCyEH2NHogTpU=)
                          4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Apr 20 20:36:29 2025 GMT
            Not After : Apr 27 20:36:29 2025 GMT
        Subject: CN=68055acd-1a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:29:94:be:a4:1a:70:bf:13:33:63:52:53:
                    30:c2:31:ec:2b:9e:f4:25:c3:28:2a:b7:e7:ff:9a:
                    2c:fa:82:fe:26:48:61:55:a1:d4:54:7c:70:8f:48:
                    3f:a0:4a:37:b0:48:6f:ab:84:7f:ef:cb:09:c1:dc:
                    57:95:93:1b:08:f3:ce:85:cc:73:4f:ee:8e:06:0d:
                    b0:25:e3:c9:8a:18:ec:41:14:f9:17:30:b5:79:84:
                    28:e9:1c:d7:12:bb:10:6b:b2:75:81:dd:a8:f7:e7:
                    22:bc:92:8e:e1:c4:09:24:8f:07:b2:49:76:10:f8:
                    3f:9f:9b:61:fb:6b:cb:ce:4f:2b:5f:17:58:5d:0b:
                    b1:e9:fc:58:38:9e:0a:16:92:21:36:30:67:29:e1:
                    4a:db:d5:4a:6c:16:7e:ee:1c:a4:e3:6e:e8:f0:e1:
                    6e:68:b2:a7:4d:fb:31:26:c7:db:eb:dc:4d:3f:f7:
                    c1:4f:69:f2:84:b0:93:b5:3a:3b:e6:33:0b:2f:01:
                    0e:8f:33:cd:2a:31:4d:24:ca:ab:c8:59:09:b8:52:
                    d2:8c:80:4f:23:52:52:c2:af:f0:fd:73:05:0d:1d:
                    d0:51:31:c1:b4:70:d6:c1:30:33:61:b0:56:e9:e1:
                    36:ea:aa:c6:b3:e2:36:32:c3:e8:6e:8f:50:b2:51:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FE:1B:28:CE:D8:20:CD:DD:B9:D7:A5:7C:C6:D5:D0:A0:6C:8C:97
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:ce:c0:ed:8a:b2:ae:9a:4e:2b:19:47:5c:bb:61:da:43:
         3a:fa:84:4e:16:c1:fb:16:e1:e8:18:e3:32:5f:9b:16:37:3e:
         5d:66:14:4e:0e:5e:b9:02:07:fc:6f:65:4c:b5:18:da:a2:2f:
         48:a0:27:ad:35:0c:90:1e:27:84:72:f4:c1:f8:4b:b6:ac:27:
         46:ad:4b:a3:27:1e:b6:ca:29:28:1f:40:6d:8d:eb:f3:b2:17:
         73:9d:a6:72:43:f7:c9:54:9a:ee:4e:41:92:17:97:ce:15:95:
         40:c5:55:a8:14:74:88:eb:43:7e:73:19:77:16:e3:22:a2:f4:
         89:6b:b1:aa:13:d8:74:4b:fd:f2:b3:ae:06:32:28:bb:fc:4e:
         eb:93:58:1f:06:10:ac:18:05:cf:ed:d4:66:4c:e1:c0:7b:13:
         3e:2d:56:3f:5f:75:20:e3:c3:76:59:52:73:dc:ee:ed:4c:4c:
         eb:10:18:97:79:16:28:da:ef:3f:8d:b0:02:7c:f5:b9:17:55:
         16:37:cb:89:5e:55:51:ca:70:3b:4a:e5:76:23:6f:dc:91:bc:
         5e:29:d7:a7:95:23:05:75:46:96:2c:17:87:31:40:80:01:fd:
         ee:e6:7b:9b:89:ae:33:56:d4:e0:5e:bf:4a:15:87:6c:55:9c:
         ea:3d:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:47:04 2025 by rpki-client