Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File:                     qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier:          vKeJC8v7q1G79tG/gnff27btWroYn39gPnT7YygM+6k=
Subject key identifier:   1F:B8:BD:67:A2:E4:D9:5F:61:EA:13:3F:A2:25:95:65:CB:0A:3C:32
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer:       /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial:       100B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number:          0FF9
Signing time:             Wed 04 Jun 2025 17:27:47 +0000
Manifest this update:     Wed 04 Jun 2025 17:27:46 +0000
Manifest next update:     Wed 11 Jun 2025 17:27:46 +0000
Files and hashes:         1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: zNPEW3P4mygwvYu06G58axbyZPpvl5UoCn/irtMFm2g=)
                          2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: /71nbSiWt0RVe5ogZCQfFYyxEZ4Mr3Z7iCfhqhLbM+k=)
                          3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: JhAWbCAMrXKEKj1b3MlbXCTMtcBsS+XKDtYcGnLBqlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
                          rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 17:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4107 (0x100b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Validity
            Not Before: Jun  4 17:27:46 2025 GMT
            Not After : Jun 11 17:27:46 2025 GMT
        Subject: CN=68408213-6292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:4b:a1:bb:4d:85:fd:03:34:37:cb:fc:77:
                    e6:94:2b:50:96:49:e7:b0:3d:cb:74:2e:48:c8:83:
                    5a:95:be:ea:c7:eb:a6:69:e8:af:14:24:72:6a:c1:
                    63:41:50:91:cb:5b:f6:78:54:a0:b7:bb:6c:5d:40:
                    ee:ea:7d:81:b2:7c:e2:a7:8a:10:84:5d:d4:6b:c9:
                    d2:87:3e:88:59:04:3b:22:92:58:11:84:25:17:2f:
                    05:68:67:41:43:fc:ab:23:42:dc:07:3c:25:99:e7:
                    a4:27:98:cb:c2:a6:ea:19:d1:fa:6e:4c:3e:ad:a4:
                    35:3d:d7:2a:01:a6:71:c4:71:9a:22:c6:65:ff:ec:
                    97:a9:4d:26:d1:09:29:77:6d:f6:ff:44:3c:20:a6:
                    d8:7d:5e:05:59:17:05:e4:66:5b:dd:af:ae:7d:0a:
                    7d:92:82:71:c1:59:a3:f1:1e:86:6c:0c:5f:26:6b:
                    23:21:13:a1:42:1c:2b:96:24:57:c1:83:43:c4:87:
                    7a:77:49:31:17:13:6c:58:cf:a6:55:bc:2b:36:dc:
                    f0:aa:62:87:a6:76:76:4e:62:72:22:23:92:ef:fc:
                    c3:11:f9:54:af:77:d8:62:6d:b4:98:94:dc:11:d1:
                    33:80:23:a8:88:73:bb:b3:67:cb:b5:48:ca:c4:6e:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B8:BD:67:A2:E4:D9:5F:61:EA:13:3F:A2:25:95:65:CB:0A:3C:32
            X509v3 Authority Key Identifier:
                keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0e:49:bf:1c:ec:71:d4:fe:b1:56:e5:a1:2d:2e:b7:1d:92:
         72:a5:d7:91:55:2c:5a:19:fe:ce:04:ff:a7:9a:ae:f5:8d:95:
         4a:9a:fa:f0:4e:55:7c:6c:fc:84:ce:ed:bf:66:44:7f:f4:5f:
         37:43:6d:7e:cd:bb:14:e4:f3:ae:c7:ea:b9:4d:e6:c7:bd:fe:
         9f:81:17:3f:ac:7d:4e:f0:b8:89:c1:61:bf:40:bb:99:01:3c:
         e1:a5:12:79:81:c8:f1:27:23:04:71:e7:80:be:80:02:8f:84:
         3a:e9:5b:a2:fc:36:3b:6d:97:f1:be:93:94:11:6a:60:dd:c3:
         4e:0a:50:cb:4a:38:97:c6:b8:eb:55:a3:c7:13:6a:2b:73:c2:
         87:35:ad:e9:fc:b9:dd:78:02:0b:6a:ad:e4:a8:e5:09:b9:35:
         29:9d:82:f1:25:e4:27:ef:66:40:88:f3:95:91:8a:35:7d:0e:
         b3:79:4e:5b:6c:fa:42:e7:aa:60:fc:ea:b3:01:36:32:0a:8f:
         b9:42:53:cb:59:b4:4f:26:b2:48:9a:90:1f:cf:54:58:f9:a7:
         a5:67:19:27:ac:19:96:69:18:1c:4c:47:35:61:4d:52:79:f4:
         35:23:c2:11:8a:15:d8:6d:04:fa:d9:54:f3:67:7e:07:81:cf:
         07:78:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:38 2025 by rpki-client