Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
File:                     q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft (raw, json)
Hash identifier:          gTH8pfx9nzjx6v6OpAELsgu6ELuidbieGUupdi1U7Ew=
Subject key identifier:   6E:31:B0:8D:66:AB:51:D3:F6:AB:D4:47:39:3A:37:5C:E5:34:46:DD
Authority key identifier: AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9
Certificate issuer:       /CN=A9182A08/serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
Certificate serial:       0872
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
Manifest number:          086D
Signing time:             Tue 08 Apr 2025 20:30:27 +0000
Manifest this update:     Tue 08 Apr 2025 20:30:27 +0000
Manifest next update:     Tue 15 Apr 2025 20:30:27 +0000
Files and hashes:         1: q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl (hash: DQRRhay8WLorr59cSYDDU0ucgB285ndLWa4/jRBc/xo=)
                          2: AAA8232C123411ED90E8CA59C4F9AE02.roa (hash: +d1wvy8yQ3YoFLntNLyk9Fck1IbhN/uojUrTCK6EF5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl
                          rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 20:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182A08
        Validity
            Not Before: Apr  8 20:30:27 2025 GMT
            Not After : Apr 15 20:30:27 2025 GMT
        Subject: CN=67f58763-8f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:19:83:57:db:99:fd:e0:92:98:e0:32:90:
                    bc:ab:d2:81:b8:af:c1:94:8d:b2:2b:3d:d8:8e:44:
                    99:4d:96:e9:c9:64:f0:36:f2:3a:b5:0c:3d:98:1b:
                    34:25:66:e7:3f:c2:32:69:d8:c3:23:03:6a:0b:0f:
                    f9:64:05:65:c7:84:e3:ba:15:ea:15:8c:0c:48:e4:
                    dc:41:2a:dc:9c:4a:d3:15:86:24:a1:10:fd:30:45:
                    f0:9a:d2:d1:df:b2:52:9c:31:49:6b:16:bc:5c:ba:
                    a6:e9:46:1d:91:2e:4f:cd:50:78:59:5b:f6:37:80:
                    2e:39:25:00:97:fd:02:db:7f:ea:2b:9b:0c:f5:8d:
                    58:2f:e6:44:62:46:ea:a4:90:69:fb:95:53:91:7a:
                    11:34:65:09:ec:69:71:b3:b1:3f:4e:fc:a9:06:7f:
                    db:28:28:ca:e0:2e:5c:58:48:d3:19:cd:fb:35:bc:
                    07:7f:81:20:38:98:f0:26:fa:4e:5d:34:96:29:58:
                    8b:b9:90:eb:ff:5a:27:f0:d6:10:be:21:7d:c8:b1:
                    25:3f:9f:d3:8f:5e:ee:0b:1f:a3:90:3b:8f:d8:d3:
                    13:c6:7c:ac:3b:be:d9:2d:1d:c5:e4:28:32:36:ed:
                    69:17:85:bb:97:e3:69:b3:8d:59:7a:9e:f0:d0:f6:
                    a6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:31:B0:8D:66:AB:51:D3:F6:AB:D4:47:39:3A:37:5C:E5:34:46:DD
            X509v3 Authority Key Identifier:
                keyid:AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b7:a0:fa:97:7c:25:91:47:40:2f:21:0b:ee:87:39:b5:fb:
         c9:8b:59:88:60:49:e8:2b:07:c5:1d:f2:6a:77:d3:16:e1:0d:
         d4:de:32:e2:89:3f:9a:29:ad:f6:a4:e1:d6:dc:a8:ad:62:e6:
         f1:8d:e5:bb:2e:33:27:7f:9b:04:68:10:83:ea:2f:7e:a2:2b:
         5d:eb:27:33:27:59:2a:af:e0:91:dc:be:8a:cd:1a:65:ef:92:
         2b:be:d4:af:ca:28:a4:d5:57:23:1b:88:2f:56:78:a4:35:34:
         a2:3a:14:4f:d1:c9:81:dd:c0:87:e6:43:d6:f4:59:13:7d:17:
         53:2a:46:e4:6e:e7:df:c2:55:ec:06:37:60:1a:e4:32:0d:83:
         f8:e3:91:e1:28:0d:84:ce:cc:f7:c0:17:c2:1e:8a:23:b1:70:
         a6:b7:04:85:82:eb:9f:49:5f:5a:04:6c:0e:45:5a:17:bd:7b:
         05:ff:5d:74:6f:4e:cf:2f:fe:51:c8:0a:55:21:72:38:d7:d0:
         39:a3:9c:1c:fc:92:99:75:44:02:0b:1a:d2:40:b3:0f:e4:5e:
         57:d2:c1:f3:6e:bd:d1:54:96:01:d0:59:14:70:cc:9f:09:57:
         0e:2f:af:90:78:7a:34:81:64:49:db:00:8a:cd:fb:4c:50:10:
         bb:1d:b8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:06:25 2025 by rpki-client