Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File:                     qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier:          rO1b5Slgy0m3qN+tbRAljlWGb7eLa/S16BohKLS76I8=
Subject key identifier:   D4:A7:2D:AC:0A:BB:AF:D1:40:A7:6D:8F:43:41:85:48:3B:9A:01:B8
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer:       /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number:          0137
Signing time:             Mon 09 Jun 2025 03:57:26 +0000
Manifest this update:     Mon 09 Jun 2025 03:57:25 +0000
Manifest next update:     Mon 16 Jun 2025 03:57:25 +0000
Files and hashes:         1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: nlehuGVYa9LDJuXTUCky1tuvKhl2fRo8ujp39y5pOOo=)
                          2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=)
                          3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
        Validity
            Not Before: Jun  9 03:57:25 2025 GMT
            Not After : Jun 16 03:57:25 2025 GMT
        Subject: CN=68465ba6-89b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:fe:20:6b:98:61:92:13:e6:38:06:88:02:
                    bb:b9:52:fb:42:07:a1:0d:8d:26:c2:c2:d3:24:3c:
                    60:5a:e7:e4:32:6b:68:65:98:c5:b6:a3:f0:9f:b9:
                    d0:d6:75:e1:3c:b3:10:1f:e6:41:6e:21:a7:ba:c6:
                    9f:85:d5:2b:c7:25:9a:eb:9a:44:46:80:26:c4:0e:
                    d7:43:c6:77:34:49:0c:f1:27:7b:a3:5f:b2:7f:2b:
                    0e:c5:5f:c6:aa:da:00:f5:5a:76:1d:e0:f4:f2:19:
                    97:01:69:77:61:32:ee:a7:f0:ec:9f:65:6f:ac:5a:
                    ad:2b:7a:fb:bc:cf:c6:bb:e7:4e:4a:d6:c8:60:56:
                    af:84:57:84:30:1e:2a:91:ad:a9:ac:76:e4:74:e2:
                    d4:3b:90:0e:f9:a5:c4:de:7b:31:be:0e:ab:bd:84:
                    4b:e2:f1:aa:14:94:04:ec:b2:91:93:e4:ad:0c:7f:
                    09:34:2e:28:d2:df:e8:22:95:8a:8f:31:49:69:72:
                    0e:d9:7b:1f:93:8f:e8:4a:a2:49:6c:19:47:b3:09:
                    f5:e2:22:e8:c7:b7:a7:69:b5:bd:72:ab:0e:b8:2b:
                    bf:e0:72:40:76:2b:9d:bc:8a:a5:57:1d:06:d0:24:
                    8e:ec:eb:27:d2:e9:08:58:fe:47:05:70:06:15:33:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A7:2D:AC:0A:BB:AF:D1:40:A7:6D:8F:43:41:85:48:3B:9A:01:B8
            X509v3 Authority Key Identifier:
                keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:1c:89:64:a7:9d:c9:38:cd:b4:fa:37:66:1d:21:61:d0:36:
         7e:6d:0b:90:ae:8a:6a:3e:48:3e:f6:10:f7:e3:8b:32:7f:54:
         2e:36:b1:ed:61:fd:2c:09:da:fd:15:1b:3c:66:87:bb:79:dd:
         f8:81:2a:44:ab:7b:62:24:2a:ef:f1:2d:55:a0:49:b7:60:69:
         23:8c:fc:83:e8:c7:26:35:cf:84:03:d5:d2:88:63:ff:2f:de:
         c0:6a:27:c9:d1:01:ca:9b:d7:83:37:76:c9:2c:8c:31:ec:0d:
         7c:23:b8:e5:61:01:3a:82:9d:c9:93:d2:70:db:27:5c:aa:bf:
         3b:48:9b:1f:84:5a:c8:df:9d:d9:65:55:8b:c8:55:4f:c0:0c:
         96:38:be:6d:d7:85:c4:45:50:54:89:3e:c6:69:f7:ff:12:a6:
         94:9a:36:66:ad:9a:02:52:71:96:e8:bc:02:41:86:92:e1:13:
         24:8c:52:71:51:19:fa:0d:96:f9:ba:b2:f7:bc:11:1d:ee:1b:
         11:20:38:a5:ed:89:d4:29:80:cd:04:46:15:cb:9c:8d:4a:f5:
         96:ee:aa:04:4b:11:a2:46:12:80:71:c0:9f:5f:6b:08:5d:39:
         e0:b2:4d:18:a8:97:64:87:2e:2c:0f:0f:7f:e7:a6:f0:09:9f:
         27:ad:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:12:16 2025 by rpki-client