Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File:                     q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier:          bwU3L56sbLN8Cxy4bbXeh98IbiNg/biQp3i3jOVEF/8=
Subject key identifier:   0C:40:86:A1:5B:94:43:75:D6:86:0A:7F:5A:F5:72:AA:FF:9C:18:89
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer:       /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial:       0A8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number:          0A02
Signing time:             Wed 14 May 2025 20:11:42 +0000
Manifest this update:     Wed 14 May 2025 20:11:41 +0000
Manifest next update:     Wed 21 May 2025 20:11:41 +0000
Files and hashes:         1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: wXeAzEnyJqnp+wf08UzjzHkfsAgdyC3uTfhpW9dXPc4=)
                          2: 690F19C87A0111ECA0BAAA6AC4F9AE02.roa (hash: lu63+cwqSrIKv2ZVnfH2yEez/5BkMz6uH5nrUh7uTnc=)
                          3: C09E796C50EB11EB86E24A3DC4F9AE02.roa (hash: UQMFUiM1jX1o70DBy2Eb/ReLKfgNQRjP4wwuSyVg/Io=)
                          4: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ytc9ndn0dlR+m8jI9GCXZzm6gP/TjFiRbPEGnx2/DEc=)
                          5: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=)
                          6: ED4952AAEA5F11EE914FC26AC4F9AE02.roa (hash: MeIbIUw/2jlMhWfxDLyaSLt8wCeP1GJPfyd4A+Tq+a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 20:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700 (0xa8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
        Validity
            Not Before: May 14 20:11:41 2025 GMT
            Not After : May 21 20:11:41 2025 GMT
        Subject: CN=6824f8fe-1ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:7c:b7:a5:ea:79:f6:3c:c4:1b:1d:9a:4c:
                    de:b9:b5:0a:d6:0d:76:cc:d6:25:22:ac:35:eb:3b:
                    e8:46:af:ae:3b:a7:64:35:05:5f:67:06:65:d8:cb:
                    96:9c:35:d3:9f:51:94:b8:23:1e:10:71:24:4c:01:
                    78:8d:16:32:97:f2:63:f0:f3:12:d9:bb:65:56:b7:
                    99:01:1d:b5:39:91:b6:89:77:30:6c:34:d0:a9:f5:
                    d1:be:5b:83:c0:7a:78:9e:a9:6d:dc:c7:4d:b3:63:
                    ee:b5:d9:26:d9:5d:e8:21:fc:b2:96:07:1d:e1:e3:
                    aa:6f:bd:3f:ab:36:2e:68:c5:f4:8c:19:d0:4d:49:
                    86:3b:1f:fd:6e:e9:af:9e:f4:48:bf:1f:1d:fc:0d:
                    02:2e:45:ca:1f:6e:61:b4:0e:ea:c4:44:96:5f:aa:
                    c9:99:d0:80:2e:16:18:56:fa:d9:cc:19:ee:d6:c8:
                    c6:2b:9f:f0:35:27:77:c8:95:a2:92:bf:e2:ac:08:
                    9f:fe:91:86:f7:37:e3:b7:01:46:bd:b1:4a:1b:ba:
                    0d:71:e4:cd:74:66:32:53:d6:e2:68:1f:64:90:91:
                    c2:dd:4c:8e:b0:c0:21:37:73:1a:74:67:3d:76:8e:
                    48:20:99:dd:e1:43:56:49:d5:d7:cf:1b:f5:6b:6a:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:86:A1:5B:94:43:75:D6:86:0A:7F:5A:F5:72:AA:FF:9C:18:89
            X509v3 Authority Key Identifier:
                keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7f:4b:59:8d:d7:f0:a6:3d:63:9f:a8:06:7b:8d:e9:ef:49:
         a4:de:ca:f1:29:06:28:ce:7a:b9:a0:f9:96:b5:24:af:33:c9:
         84:7b:d6:19:32:69:c4:6e:e8:7b:fe:f4:3e:83:f7:ad:45:7c:
         f2:16:89:9e:30:77:39:d9:d3:bf:e3:ce:75:84:fe:97:ae:ce:
         ea:b1:c8:0f:ca:fd:4c:6b:35:7a:20:36:b3:ef:3d:9b:8d:1a:
         2e:ee:f4:83:ca:22:78:93:f5:1b:ab:62:e4:03:5d:d3:2e:ab:
         ef:2a:3e:8d:68:f5:c7:e5:57:9a:9e:5a:09:28:91:27:a8:2f:
         fb:94:12:f0:83:56:fd:ad:cb:5d:e6:c5:8f:70:ec:75:8c:e7:
         1e:d9:0b:86:69:69:39:65:62:9c:80:15:14:a2:b0:7f:a1:70:
         e6:78:54:4f:94:82:d8:0d:65:68:13:9a:7a:5a:38:4a:ea:cf:
         f7:b7:18:6c:1f:a6:49:2b:af:02:03:c2:75:72:c8:cf:41:79:
         f7:a4:c9:61:63:af:cf:ed:01:9b:25:1f:a7:46:ca:5c:19:4d:
         c0:38:da:18:eb:65:33:7b:c5:6d:14:62:59:56:a9:c8:fc:28:
         a7:ce:63:59:0a:53:43:83:4d:44:26:a1:a9:5e:3e:9b:9c:31:
         fe:23:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:33:41 2025 by rpki-client