Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
File:                     q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft (raw, json)
Hash identifier:          tZqoT5DLxrn21M+pw5ZJwO1i2iw6D/+uCrun485q2lQ=
Subject key identifier:   8C:BE:13:D0:D6:A3:76:10:56:4D:F9:48:F5:7C:53:E8:6B:7F:43:10
Authority key identifier: AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9
Certificate issuer:       /CN=A9182A08/serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
Certificate serial:       088B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
Manifest number:          0886
Signing time:             Fri 30 May 2025 20:49:08 +0000
Manifest this update:     Fri 30 May 2025 20:49:07 +0000
Manifest next update:     Fri 06 Jun 2025 20:49:07 +0000
Files and hashes:         1: q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl (hash: 4fKO/T6xd0P1nmwjgrKZhIdTDKHqAqq7cK6+ZdL+TO0=)
                          2: AAA8232C123411ED90E8CA59C4F9AE02.roa (hash: +d1wvy8yQ3YoFLntNLyk9Fck1IbhN/uojUrTCK6EF5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl
                          rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182A08, serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
        Validity
            Not Before: May 30 20:49:07 2025 GMT
            Not After : Jun  6 20:49:07 2025 GMT
        Subject: CN=683a19c3-a85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:cb:72:bb:f2:a5:d3:7c:55:f1:49:a7:e4:
                    58:30:48:2b:3c:67:5b:22:99:b7:33:13:9b:a7:a5:
                    6d:81:2b:84:3f:86:36:dc:b3:22:eb:46:4e:d0:29:
                    00:90:5a:da:59:57:01:7c:b3:81:58:54:4f:ac:97:
                    6a:a5:86:5d:f5:85:91:06:b8:d8:2c:ce:88:cc:8a:
                    db:51:3a:ee:9c:8f:20:71:82:2c:0a:ab:70:77:dd:
                    2f:96:57:f0:24:43:be:69:8d:b9:b7:32:cf:29:88:
                    f1:e1:b3:c7:c9:a2:a9:c2:fe:99:a3:41:81:24:b6:
                    08:69:d0:e6:50:1f:a5:a5:06:44:01:2d:4e:99:2b:
                    90:2b:50:a6:27:df:86:91:db:15:34:c8:7f:f2:66:
                    be:76:b4:f9:8b:27:1d:37:9f:30:7f:1a:ae:1f:af:
                    00:91:d7:ff:99:d3:84:65:46:3e:cf:6b:40:92:02:
                    d1:8e:18:0d:0d:83:46:3e:40:61:a7:ef:07:f0:47:
                    ba:c7:04:3d:fa:2d:28:b0:53:ee:7e:7b:04:af:12:
                    05:8c:5c:df:e9:1f:64:f4:47:87:bf:55:62:dc:8d:
                    c8:68:e0:76:f2:59:c6:a7:a5:6f:c3:53:6b:d0:32:
                    9e:c6:3c:06:b9:c5:94:f2:7a:77:08:7b:0d:28:b3:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BE:13:D0:D6:A3:76:10:56:4D:F9:48:F5:7C:53:E8:6B:7F:43:10
            X509v3 Authority Key Identifier:
                keyid:AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c1:f3:97:c7:c3:16:43:21:cf:b6:f9:07:9f:b0:95:e1:ba:
         7f:a3:55:96:04:27:83:f4:28:8c:9c:57:1d:2a:ef:e1:b9:b7:
         45:5b:c9:50:20:d3:bd:52:6b:84:72:e6:49:9d:5a:33:ec:c0:
         a8:18:a9:1c:56:23:c1:be:0c:2c:47:51:63:17:f1:18:9d:64:
         11:2f:22:8d:a6:17:94:d3:4d:94:fc:4a:41:bb:0a:3a:3c:43:
         e7:f3:c6:e0:68:36:bb:dc:67:a9:49:99:19:34:54:c0:50:f6:
         5d:cc:44:51:8f:43:9a:7c:c9:94:a5:d9:9b:f6:be:ce:3f:59:
         67:71:b2:f6:a5:f4:45:bf:28:93:ff:ec:65:71:4b:2a:ad:42:
         fd:55:09:3d:e0:33:25:4d:5f:73:40:a0:cd:26:4b:6e:59:e9:
         4d:66:4f:0c:97:78:4b:e4:f6:63:a8:19:c4:25:4e:08:6c:85:
         92:29:60:5b:4d:86:09:38:06:24:ac:06:08:08:00:82:4b:ce:
         ba:31:9f:4d:cc:15:2e:db:41:b7:a4:76:3f:cc:d8:a5:1d:4c:
         e4:43:17:8b:e1:df:7b:76:e3:37:c5:1b:4c:e3:17:c8:9d:e0:
         74:46:16:13:b1:b8:89:ff:ae:9c:25:1c:c3:33:f1:ed:9e:62:
         02:4c:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:14:42 2025 by rpki-client