Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
File:                     q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json)
Hash identifier:          PahPVI3lrb940Z3vM3WgwUCyNCWDhYcnku7dAcAlxVE=
Subject key identifier:   F2:5F:E2:99:FC:8A:91:17:37:EF:26:51:F2:77:A9:84:40:D6:01:6E
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Certificate issuer:       /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial:       18C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
Manifest number:          18AB
Signing time:             Wed 14 May 2025 16:34:56 +0000
Manifest this update:     Wed 14 May 2025 16:34:56 +0000
Manifest next update:     Wed 21 May 2025 16:34:56 +0000
Files and hashes:         1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: xTXrBTRS/9bKLGq/xOdyouqI7lKsB9Hgywo6TQalfAc=)
                          2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: YcDZtKeRh1UHltnHTYosXa988+fvsMaT0V4n1NKi1tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
                          rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 16:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6340 (0x18c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
        Validity
            Not Before: May 14 16:34:56 2025 GMT
            Not After : May 21 16:34:56 2025 GMT
        Subject: CN=6824c630-d4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:5e:5b:74:9c:77:46:e6:72:32:71:33:f1:
                    9d:c5:46:fd:f1:31:b8:50:75:a8:27:1a:1d:41:04:
                    01:33:ec:ae:ae:1f:3a:c3:be:40:66:51:a7:5d:aa:
                    ac:05:f9:ab:35:d9:fc:1b:6b:ab:b3:b4:9f:5a:db:
                    e6:fb:84:bc:2f:bb:7c:b9:4f:01:2b:c4:d1:be:a6:
                    00:57:dd:7e:44:2f:0a:f9:6b:48:1b:2d:d7:76:f1:
                    31:58:34:fd:e0:b4:12:7e:63:e2:8f:fd:6f:35:74:
                    44:07:a8:32:8b:44:b2:97:3e:53:a3:d3:0a:76:98:
                    fe:2c:39:82:b8:72:f1:a3:2f:e7:80:37:82:88:92:
                    e7:1a:53:f4:a8:62:44:13:c8:b0:1c:29:ad:6c:bd:
                    1f:c7:a1:b6:12:2e:72:7f:d0:29:68:3f:76:ac:b8:
                    03:ca:23:9f:77:c7:2b:ac:49:1a:7f:a6:de:a7:42:
                    8e:cb:a9:19:e0:70:00:15:f1:49:a3:df:e5:15:e3:
                    3e:45:22:bc:6a:8c:39:61:60:8e:81:a3:71:69:b3:
                    83:e5:53:f3:a2:a0:b2:d5:5f:57:56:14:73:bd:8e:
                    25:5e:3b:f2:33:41:7c:41:d7:6c:4f:b5:83:47:78:
                    2f:71:25:56:b2:66:c9:48:c9:41:07:0c:38:9d:09:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5F:E2:99:FC:8A:91:17:37:EF:26:51:F2:77:A9:84:40:D6:01:6E
            X509v3 Authority Key Identifier:
                keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:28:04:80:b7:c9:9e:9a:ed:de:12:88:e2:8e:fb:99:f3:
         bc:69:4b:42:3a:97:32:e5:aa:d8:2f:db:92:38:7e:22:28:e6:
         81:ae:20:be:2b:ba:03:76:32:83:23:2a:ac:80:9d:0d:83:90:
         86:76:c4:f8:93:0e:fc:a4:d5:53:48:69:9e:37:6a:40:00:1b:
         01:a9:6a:19:c5:14:ae:b3:78:18:86:80:c8:80:ed:fa:4b:46:
         82:74:6b:2b:fa:2b:07:6a:72:4f:63:86:1c:a9:7c:1a:70:84:
         02:85:df:79:0e:7f:cc:ec:2c:38:eb:81:d2:f4:56:fc:34:a1:
         c9:65:d8:df:02:50:04:0c:e4:99:7f:6a:25:f4:da:7a:d4:b8:
         8e:5f:b6:6b:d0:6e:ff:c6:09:29:21:95:00:aa:4c:c2:c2:c1:
         65:ce:a2:3f:61:f4:fc:d1:62:e7:49:b0:80:95:07:7f:ca:d6:
         99:bc:5d:70:25:ae:36:1a:40:57:9e:e8:d5:4a:7d:06:b1:b5:
         61:73:6f:f7:8a:59:31:35:f8:c5:9a:e2:9b:c4:0f:fb:a8:d1:
         54:a4:e3:f6:9e:6a:93:8d:f4:6c:34:f4:b8:5f:7e:01:79:11:
         1b:e3:d8:af:6e:bd:be:98:b9:54:60:72:db:66:9b:62:6f:d7:
         74:3e:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:18:52 2025 by rpki-client