Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File:                     q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier:          R93LQFNvVUcSH/DnI7kEOk7Wy7EYuJ19yxY+Cp5HW2M=
Subject key identifier:   AC:85:3A:A8:C7:1E:7C:D0:5A:4D:5F:E0:19:9C:31:42:10:6A:E6:E6
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number:          071D
Signing time:             Wed 14 May 2025 21:56:45 +0000
Manifest this update:     Wed 14 May 2025 21:56:45 +0000
Manifest next update:     Wed 21 May 2025 21:56:45 +0000
Files and hashes:         1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: 4Sx1koDCOkrbKNBlhGWM4DdKk+lzlKvVD+oYKOGGZqg=)
                          2: 1E812B043A9611EB8CD4224BC4F9AE02.roa (hash: 2rloIWspoTdsayqQCE8TDyVLzZgtkvVp6yhHBSi7B7A=)
                          3: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: TlDhnldYuakAwxJhMCiNbVx6zqDuO+DOexXHVfVHcu4=)
                          4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: R7FrPdkL1ySrHNC5nrqzQKSqKbGci3RcVPsSdrI/vVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: May 14 21:56:45 2025 GMT
            Not After : May 21 21:56:45 2025 GMT
        Subject: CN=6825119d-12ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:7f:4f:f0:a4:06:0f:d5:bf:09:28:6f:70:
                    c1:70:4a:dd:75:ef:64:eb:c9:51:16:4b:ea:0a:fe:
                    ff:97:24:d4:f0:e4:3d:b8:02:9e:69:e5:62:91:41:
                    a8:b0:6a:fd:e8:2e:7e:d0:57:bf:e0:91:61:82:58:
                    c3:5c:42:24:c9:c1:eb:7e:46:66:23:bb:22:de:20:
                    50:ae:65:85:86:3a:6f:e8:ce:82:10:1e:dc:96:18:
                    24:48:69:98:2e:94:76:ba:ed:af:1f:7c:64:3c:48:
                    33:19:c8:10:29:c6:d8:0b:57:a0:68:1b:74:a9:48:
                    24:07:c4:06:be:90:ab:05:6e:85:63:0d:32:95:e5:
                    be:b1:44:22:a9:04:e0:b4:e6:d6:c2:a7:e8:4c:b7:
                    f5:f3:6a:e5:23:bc:6f:cf:fd:ed:63:cf:69:72:72:
                    10:c6:af:17:17:c0:fc:41:4a:e4:d3:30:09:5f:5f:
                    76:75:a8:3b:34:4e:fc:af:ec:11:6b:70:12:7f:b6:
                    cc:3e:e3:3a:91:e1:2c:99:f1:ca:b7:50:9a:d3:45:
                    e6:b6:59:f6:9e:f9:b4:58:79:8d:cc:73:ee:f5:c0:
                    59:f2:47:31:e2:90:7d:a5:d9:12:ee:fd:34:3d:37:
                    14:00:e2:8c:71:c7:79:f5:3d:29:79:1b:71:f6:ab:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:3A:A8:C7:1E:7C:D0:5A:4D:5F:E0:19:9C:31:42:10:6A:E6:E6
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:8f:a7:9e:d9:86:79:5e:43:2f:69:5b:e4:98:56:01:f0:
         f4:83:1c:92:44:cc:62:e5:99:85:55:e9:b3:ff:2f:8f:1e:cf:
         38:05:e5:5e:2a:31:ba:46:dc:9f:52:41:e1:4b:b8:24:1d:80:
         ec:53:91:61:28:d0:08:6b:c5:0f:53:25:82:01:d9:dc:d4:28:
         fa:58:8f:85:fa:0b:e2:f3:39:ba:e2:ca:df:f0:44:cb:36:04:
         26:36:10:9f:ff:15:e0:ef:46:29:41:1a:d9:7f:60:fe:ba:fb:
         58:54:38:c7:61:f9:3c:f8:e5:68:c0:c1:35:8f:07:5e:60:11:
         ea:38:6e:13:c2:80:ec:51:df:15:29:25:2c:e5:bd:57:fb:70:
         e3:14:c0:e2:dc:09:44:b2:ff:d9:a9:3b:45:fd:8f:50:5e:28:
         8b:71:e0:70:76:04:e7:dd:db:b2:0b:0b:2c:72:4e:f0:a8:94:
         e3:19:85:3d:49:73:72:1f:59:f2:e5:59:75:02:a1:f6:bd:18:
         a1:b4:53:af:6b:36:5b:c3:49:00:b2:83:87:90:3c:04:b8:28:
         ef:b2:1d:b9:a1:6a:24:df:17:e6:6c:c4:8b:a2:8e:08:e7:5f:
         e6:08:ed:d5:46:aa:91:49:ef:ba:5b:1d:91:7a:c1:0f:1c:fe:
         3d:95:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:12:12 2025 by rpki-client