Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
File:                     qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft (raw, json)
Hash identifier:          ta7SmeSo+WLm3CDzEo1YKK6J71CWXlg/yiDz4sU946A=
Subject key identifier:   B3:0A:60:C3:F2:3B:B8:38:E2:67:A8:67:A8:92:AC:07:DA:6B:43:04
Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81
Certificate issuer:       /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
Manifest number:          30
Signing time:             Sun 11 May 2025 06:24:35 +0000
Manifest this update:     Sun 11 May 2025 06:24:34 +0000
Manifest next update:     Sun 18 May 2025 06:24:34 +0000
Files and hashes:         1: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl (hash: HmaUmNf3Deq6BGMmZwkKk6IJtA+EGuMjS/yjdLzVTVI=)
                          2: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (hash: ALIstNSOUyPJoG6tUF7wdbXN7LDhADIjhA1ktsIa/iA=)
                          3: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (hash: o0d52lCnr33Uh8iwtFl+nwRiBmZy5UFNqyfIv33Dtv4=)
                          4: 723F9406E9EC11EF9AC2151CC4F9AE02.roa (hash: IU1Sto6R/eoM72dkcviucBTl2Wo6d0jfNJDSJ53kN6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 06:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
        Validity
            Not Before: May 11 06:24:34 2025 GMT
            Not After : May 18 06:24:34 2025 GMT
        Subject: CN=682042a2-687e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:23:7d:b1:5f:2e:45:76:17:c2:bf:7e:b7:
                    bb:ab:00:6b:f6:8a:82:f7:1e:bb:22:4b:83:79:3b:
                    04:74:ad:ac:94:90:c7:ea:43:f2:03:14:6d:fc:19:
                    87:5b:d2:07:04:1e:d7:da:d2:79:b0:8a:c9:9e:dc:
                    99:38:00:f4:90:60:56:a4:95:34:fd:ad:39:aa:f8:
                    8d:b1:a9:d7:53:db:b2:5a:d6:ae:37:d3:71:f1:70:
                    f5:9e:d5:49:94:f7:21:ca:15:ee:69:89:61:84:85:
                    f6:e7:9e:b7:1b:c0:49:2c:73:ae:ca:7f:b7:89:ee:
                    9b:16:d2:1d:12:e2:de:4f:35:1a:f5:e5:b5:02:5f:
                    30:0d:f5:47:25:93:4c:eb:26:b1:b5:f0:0e:28:8e:
                    60:fe:f0:0d:a0:96:2f:47:5e:b3:b0:01:dc:b0:c4:
                    1a:ed:a9:ea:32:88:39:96:66:6d:f5:e8:3a:13:85:
                    46:a0:1c:b9:06:e7:65:67:36:c4:48:ad:9e:8b:30:
                    30:31:9c:e1:9d:de:bb:7b:d9:ca:2a:17:b6:71:06:
                    d2:c1:6d:ba:86:30:3e:ac:f8:cc:94:c1:c8:59:41:
                    98:63:89:30:4b:ea:60:88:5d:fc:15:1c:d5:01:5a:
                    4c:65:3a:c2:d0:0e:1c:cd:a5:9c:56:d2:ce:c5:a8:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0A:60:C3:F2:3B:B8:38:E2:67:A8:67:A8:92:AC:07:DA:6B:43:04
            X509v3 Authority Key Identifier:
                keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5e:04:23:81:8c:8d:d6:79:80:43:aa:66:6d:33:c1:2f:cb:
         9e:4e:84:e4:fc:f4:82:5f:8d:02:a7:f1:74:3e:98:2c:41:56:
         d3:01:a8:09:c5:91:db:6b:b9:3e:f5:85:5f:8e:a7:41:a7:f9:
         c5:e4:76:fa:74:53:df:21:20:6b:25:12:f5:b7:b3:6a:d5:5a:
         a9:1d:a8:41:3f:18:79:32:99:c5:f6:e3:83:6d:33:3e:6b:20:
         b9:5d:43:87:08:2d:19:ce:31:ef:74:cd:2b:44:90:53:6f:00:
         c1:f6:9c:f7:c7:e7:c9:1c:61:2f:c0:44:ae:2f:7d:a2:9d:30:
         67:ab:f3:20:26:99:47:f5:b8:68:8e:a9:c9:f7:70:e5:41:43:
         a8:de:f1:1a:e3:8b:86:9e:9e:a1:95:a5:85:60:9f:62:7d:8e:
         10:41:72:75:d1:6b:58:4f:de:7d:66:24:ac:ce:d8:4a:33:b2:
         d0:e1:45:d4:1f:ab:24:81:84:a7:ff:9c:52:39:ed:ac:2d:02:
         67:e1:1d:58:95:43:7c:e6:86:c9:9f:98:30:28:6b:b5:ba:d6:
         3b:b4:dd:c5:07:26:35:81:9e:d9:13:2d:71:f9:52:b1:f6:b8:
         2c:a3:a5:7d:b2:68:50:26:c5:a2:e8:66:ac:b1:8c:e3:13:ed:
         82:ae:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:21:56 2025 by rpki-client