Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File:                     qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier:          ujpDVcsRaXOhlBf3m8q/nl2I8o23Zf2iTucZy/OhvTM=
Subject key identifier:   F9:34:C8:F0:84:96:52:5F:73:3A:0A:B9:78:AB:EB:35:D1:6C:9F:85
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       08A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number:          088A
Signing time:             Fri 30 May 2025 20:48:32 +0000
Manifest this update:     Fri 30 May 2025 20:48:31 +0000
Manifest next update:     Fri 06 Jun 2025 20:48:31 +0000
Files and hashes:         1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: SiFyR/k1FzioLRKD4pz1yWSSnIiPQbSNItO1S7B4kFU=)
                          2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=)
                          3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=)
                          4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: ggS/okJOXO20WJl9u64hoMFD/RxIwy0K1iG0hR/vSB4=)
                          5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: May 30 20:48:31 2025 GMT
            Not After : Jun  6 20:48:31 2025 GMT
        Subject: CN=683a19a0-4cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:53:5a:1a:87:c6:7b:a0:dc:91:62:21:a2:
                    99:59:c7:eb:fd:f8:9d:47:4c:52:87:94:b1:96:66:
                    cd:c9:aa:c1:a7:af:d1:da:ff:38:49:2d:00:18:55:
                    c3:b5:63:ea:e4:ef:47:06:da:2a:55:7d:b5:f7:eb:
                    44:00:23:93:cd:cc:6b:34:97:a2:8d:81:26:99:02:
                    d4:77:f9:90:2d:1c:b6:6f:2f:f8:c6:1a:fd:33:38:
                    a5:d0:d4:75:de:77:8f:00:9e:59:3a:a2:08:09:c2:
                    d2:b7:fb:cc:60:75:d4:be:43:f3:59:1f:96:fd:4f:
                    02:21:07:4e:5b:c6:4d:ce:3b:ac:06:0a:81:4a:0f:
                    14:7b:25:72:5b:2b:c8:f2:5b:77:5a:38:42:90:f1:
                    d4:61:31:a6:68:38:35:be:b2:3a:07:42:90:9d:8a:
                    8f:69:58:2c:c0:94:13:74:be:d4:ae:76:04:cb:54:
                    ba:7f:63:96:58:64:f6:72:3d:49:4a:54:e1:72:c7:
                    62:b9:f6:91:7d:e2:66:5a:29:2c:02:bd:1b:de:73:
                    cc:df:38:03:98:3b:63:ba:01:f4:09:ef:42:a0:48:
                    f0:7b:fc:af:3b:79:6c:43:30:da:ac:52:81:29:a6:
                    8c:fd:d3:8a:01:9f:e9:5f:ad:51:96:3e:bf:d1:e9:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:34:C8:F0:84:96:52:5F:73:3A:0A:B9:78:AB:EB:35:D1:6C:9F:85
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:95:fd:ee:17:b1:d6:f9:73:3c:f6:00:61:2c:07:ac:92:f5:
         a1:e5:da:8a:cd:d9:19:7d:c2:f2:5c:35:2b:de:59:84:bb:67:
         42:d6:22:eb:04:43:cd:df:41:c8:52:08:32:85:f5:50:cc:6c:
         f5:9f:10:af:af:c4:99:c2:a4:95:87:b6:51:b0:b5:b3:33:81:
         77:be:2a:62:17:a8:e3:9c:30:48:c8:36:50:1f:0e:bf:e2:a2:
         38:61:21:0f:2a:a7:ab:3a:f7:96:33:81:ac:9f:4f:a0:85:be:
         57:00:cc:28:9a:21:d6:d0:f1:69:a6:14:e9:94:df:2e:7f:da:
         49:79:93:0e:7c:d2:6e:c5:bd:90:38:fd:da:98:4a:ac:a9:5d:
         8b:90:00:29:c1:70:74:50:d5:29:f3:93:55:25:4f:61:50:0c:
         fa:20:bf:c2:5b:48:94:31:79:c7:ba:bd:ec:55:ed:e4:1c:86:
         88:17:fb:0e:2b:94:b2:45:c9:c7:67:f6:20:4d:22:3d:b2:72:
         b1:d8:29:cd:c3:ac:93:57:45:c7:69:7a:8c:c3:56:58:68:b5:
         59:80:7c:d9:d5:34:14:fa:ff:7f:23:bd:01:76:3a:d4:82:dd:
         3d:8f:53:6e:21:bf:0b:7c:cb:c6:8e:22:fb:2f:b3:5b:ad:8a:
         63:da:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:33:11 2025 by rpki-client