Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
File:                     qzsSgRukXmOSsAXTQfk6DQfyqxw.mft (raw, json)
Hash identifier:          EdlUYJoZqmvIr5i5tzB0U3XLWNiXH4nbmTue0roThFo=
Subject key identifier:   59:60:C4:8F:C8:4F:AF:11:90:0A:E3:C9:8F:89:00:80:A2:56:83:CA
Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Certificate issuer:       /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
Manifest number:          0191
Signing time:             Sun 11 May 2025 02:26:20 +0000
Manifest this update:     Sun 11 May 2025 02:26:20 +0000
Manifest next update:     Sun 18 May 2025 02:26:20 +0000
Files and hashes:         1: qzsSgRukXmOSsAXTQfk6DQfyqxw.crl (hash: sVad498cfoRSlcDBtKzFxCeDhcQVGEkT+5Gs/TicQuI=)
                          2: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (hash: RRFkv0+MhucpLar3G+6nK3AMY5KxybMxRqr09USf+uU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
                          rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918557B, serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
        Validity
            Not Before: May 11 02:26:20 2025 GMT
            Not After : May 18 02:26:20 2025 GMT
        Subject: CN=68200acc-f27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:98:5d:c4:cf:ca:cb:8e:36:c0:da:d8:f7:
                    61:34:ba:3f:fc:e6:a4:04:b5:0d:a7:bf:0e:aa:6a:
                    9a:d4:29:d8:77:88:d4:be:ae:b2:28:40:af:f5:f8:
                    b8:1b:9f:3a:13:33:25:8d:e9:d1:32:ae:d3:f8:b8:
                    c4:5a:93:2f:ee:37:c2:10:7d:11:fd:52:1d:6a:b5:
                    8c:68:3e:67:96:87:33:8f:73:53:50:e8:c8:3f:1b:
                    71:17:d9:dc:f4:a6:e2:5c:db:47:ce:b8:da:0d:1d:
                    ff:5a:99:b8:be:32:5d:ae:52:cf:c8:80:9d:a8:d2:
                    40:d5:ac:8e:bb:44:cb:6e:b8:54:ed:e2:e7:b0:79:
                    46:bb:78:fd:57:6a:ae:c6:aa:d9:fa:b6:cb:b3:75:
                    3e:2a:19:c8:e4:35:80:12:f3:32:7d:e1:1c:99:52:
                    5e:53:a8:2f:b0:23:bc:23:cb:3d:ca:79:e7:09:a7:
                    23:9b:b0:78:b3:8d:93:d8:c6:1a:46:d8:80:27:d0:
                    ec:43:ce:c6:53:f3:c3:c0:e2:88:f6:8c:ba:da:0d:
                    79:d6:fb:88:0e:04:f7:1d:08:ac:6d:26:67:f2:70:
                    5a:c5:ef:3a:dd:15:bf:5e:74:ea:7b:c4:8a:d1:1b:
                    b2:bb:89:18:7d:20:ad:c2:0b:42:b5:b5:e2:02:28:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:60:C4:8F:C8:4F:AF:11:90:0A:E3:C9:8F:89:00:80:A2:56:83:CA
            X509v3 Authority Key Identifier:
                keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:ff:f6:f8:96:8a:9b:bf:cd:d9:72:a6:dc:a8:1d:90:7c:
         10:74:96:b6:a6:a3:96:2c:4c:8b:3b:08:a9:0a:42:84:a0:8f:
         b0:8a:52:7a:9d:fa:cf:58:ce:16:44:55:95:6b:f7:f7:98:08:
         97:df:f3:ee:56:6b:84:63:3f:ab:3e:f6:21:93:56:71:59:66:
         a4:13:a5:4e:7c:22:af:05:7a:62:b1:3b:d7:51:fe:eb:91:a0:
         c2:2d:61:50:2b:08:93:73:fa:3d:6a:a4:38:9e:6b:1a:b1:39:
         4f:7a:6b:54:bd:13:52:be:64:6c:81:48:72:57:48:f5:d1:6a:
         1b:08:9e:a5:8b:b5:c4:a9:7a:35:6b:77:76:39:a8:4f:f3:19:
         9a:36:73:d2:4f:ef:33:5c:81:78:7a:4c:39:57:90:c9:aa:0f:
         e2:39:8f:33:4c:50:4d:76:5a:29:62:21:1d:ea:0c:6e:77:fb:
         f7:5c:be:da:e7:4a:86:2f:96:c5:98:7e:a8:da:b7:06:9f:59:
         30:f8:d0:77:ec:d8:b9:43:e8:5d:6f:bb:79:d8:63:e7:69:35:
         85:96:8d:af:c6:cd:b8:3d:b8:3e:09:8b:bd:91:02:54:8c:41:
         b6:5e:3d:35:5c:cf:5c:7c:ca:61:33:6a:62:c6:59:54:2e:d4:
         4e:f6:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:00:36 2025 by rpki-client