Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File:                     _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier:          skvUqcwWvgUJvaQpiAfy+hl0oo4CXaqQ01QIGAU976s=
Subject key identifier:   C7:D0:4E:5C:2B:87:58:D0:2C:47:4E:D7:7C:33:D9:50:D6:97:31:3F
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number:          AB
Signing time:             Sun 11 May 2025 04:54:18 +0000
Manifest this update:     Sun 11 May 2025 04:54:17 +0000
Manifest next update:     Sun 18 May 2025 04:54:17 +0000
Files and hashes:         1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: qAfgdavLykmBbyh4t6iRX37jal5Q3IpKpIEAL35B87Y=)
                          2: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: OuazFSoXGYM6zJItNa4jp1IfJllzFolsgf+lOTd60NE=)
                          3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
                          rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
        Validity
            Not Before: May 11 04:54:17 2025 GMT
            Not After : May 18 04:54:17 2025 GMT
        Subject: CN=68202d7a-3bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:e6:30:d0:e5:2f:da:d3:ae:e6:05:cd:30:
                    68:cb:fe:c5:59:ff:39:d4:df:83:61:32:f2:0a:52:
                    cd:97:de:05:e9:b3:e5:84:84:51:b5:a4:c4:0a:64:
                    fb:b3:df:a0:7e:07:5b:8f:81:0f:16:bb:57:7f:2f:
                    51:02:6d:6f:88:02:54:1f:bf:55:a1:75:81:53:56:
                    62:99:f1:34:fa:13:d3:37:85:e5:90:e9:b9:ca:11:
                    77:c2:67:b5:6a:95:77:19:a3:a9:f7:4a:4f:6f:81:
                    82:82:77:0d:0b:c1:d2:9a:05:bf:e7:54:b4:56:14:
                    4f:8f:d1:d6:0b:0c:18:45:91:c6:25:93:ab:8d:bd:
                    6e:07:20:b4:c8:02:06:10:ce:c0:92:a3:2a:f6:74:
                    5d:7d:fb:b2:aa:e9:ac:65:6a:b2:df:16:f0:38:b5:
                    d3:81:2e:c8:c1:dc:dd:81:b4:b7:ca:2e:eb:71:74:
                    3c:1a:82:67:58:3a:3c:d1:44:19:37:66:da:f2:17:
                    cb:70:65:27:08:ba:ad:a4:4f:61:a5:83:c9:e8:c7:
                    36:70:57:ab:9e:3d:9c:17:27:ce:10:5c:c0:15:80:
                    9e:c2:a2:7c:35:be:34:c6:e1:bd:39:16:54:85:6a:
                    9b:9a:a8:0c:9f:19:29:f8:02:9f:77:7c:91:65:c4:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:4E:5C:2B:87:58:D0:2C:47:4E:D7:7C:33:D9:50:D6:97:31:3F
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:14:8e:a8:20:ec:30:40:d7:03:46:84:2a:e3:ee:fc:9f:
         c7:5d:e7:97:7b:a6:cd:ed:79:67:b1:5b:93:da:76:9a:f8:6e:
         38:5b:85:4a:b1:21:ef:05:27:bb:41:83:89:60:bf:b6:d6:c1:
         b5:13:27:f9:6a:5a:a9:ff:89:de:d9:38:de:b9:f3:3d:f6:6f:
         c1:89:d0:e1:8a:a0:c3:89:88:25:79:3e:30:af:65:a3:a7:08:
         c0:75:8a:94:2a:22:0a:e7:20:b1:75:5a:39:dd:8d:45:1b:c4:
         f6:05:84:27:32:72:db:8b:4f:47:95:b5:f2:ef:d7:e0:97:9e:
         0b:82:f8:60:78:99:39:90:51:98:70:4b:17:00:dd:6b:d6:2d:
         fe:58:8d:9a:79:c2:fa:33:f9:4e:e8:11:4e:70:ef:05:29:61:
         81:6d:b9:76:46:00:ca:ad:55:a0:4e:f9:20:a8:89:df:61:e7:
         0f:ce:b8:68:a3:97:a4:32:90:1a:4a:62:59:04:bd:ad:f1:d9:
         fb:44:75:12:0b:d1:fa:f8:cd:a0:79:24:e3:2f:13:94:6e:14:
         be:9c:bd:e7:01:09:bb:11:7d:20:b8:3f:83:fd:cb:36:1e:cd:
         a4:6d:fa:a2:dd:e7:5c:f0:3b:33:68:4c:e7:74:6c:30:82:c6:
         9f:08:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:52:28 2025 by rpki-client