Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
File:                     q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft (raw, json)
Hash identifier:          TCfhy+w6lr/4mu/xCJiezFGzGQF+D0G54tjy/6bk37k=
Subject key identifier:   35:07:7D:2C:6A:12:B0:67:76:E4:2D:20:D7:25:AA:39:4B:DC:46:F1
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Certificate issuer:       /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
Manifest number:          0535
Signing time:             Sat 10 May 2025 23:05:31 +0000
Manifest this update:     Sat 10 May 2025 23:05:30 +0000
Manifest next update:     Sat 17 May 2025 23:05:30 +0000
Files and hashes:         1: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl (hash: R3a5ouvQG2CmCxc5heEe9ZqQ3PbkSsrMnj30B4vXO7g=)
                          2: 012EAE068C1411EDA66E4F28C4F9AE02.roa (hash: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
                          rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 23:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
        Validity
            Not Before: May 10 23:05:30 2025 GMT
            Not After : May 17 23:05:30 2025 GMT
        Subject: CN=681fdbba-51ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:a9:67:77:4f:68:58:a7:90:31:0b:3f:b1:
                    2f:e6:fa:44:61:48:27:d2:e8:46:e7:41:c1:33:01:
                    1a:20:c6:f1:01:c7:62:5b:b5:f6:d2:d1:b8:fb:30:
                    5a:7d:e3:48:da:b0:89:f3:b2:46:a5:ad:ea:7a:72:
                    dd:f9:b5:95:96:a4:12:a6:49:48:8c:37:66:43:ce:
                    f0:e1:2f:f3:50:a5:2e:35:f4:a3:3d:6b:58:8c:ef:
                    cc:fe:7c:31:c8:11:f3:1b:04:a3:ee:21:5d:a0:8f:
                    a3:11:44:23:e9:04:8d:f2:f1:78:04:5f:36:82:ca:
                    4f:17:c7:83:a4:8a:37:4d:dd:f8:07:d6:c7:83:73:
                    f1:61:68:56:c5:53:cf:d6:df:7b:e8:73:ff:f3:f4:
                    fc:29:58:90:12:db:2d:e1:1b:b0:b9:d4:f9:f9:e6:
                    78:81:72:a6:f0:f4:9a:95:bf:4b:bb:56:93:f7:f2:
                    45:2c:4b:30:d8:d7:71:ef:b2:30:26:f1:d8:88:19:
                    76:fd:44:fd:88:0b:6d:a6:3a:5a:74:4d:43:9d:90:
                    0f:ba:ec:d2:7d:28:c5:8e:3b:eb:60:58:a9:58:c3:
                    3f:61:e2:c9:1f:c3:e3:b3:67:e7:1d:37:a8:21:67:
                    7e:3a:ec:e7:db:0f:69:b7:c2:7d:05:49:be:3e:89:
                    44:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:07:7D:2C:6A:12:B0:67:76:E4:2D:20:D7:25:AA:39:4B:DC:46:F1
            X509v3 Authority Key Identifier:
                keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:1e:74:fc:e5:51:5d:de:58:cb:9e:78:0e:50:65:20:90:
         6c:b7:c1:a6:bc:94:12:78:fc:60:31:8f:6d:c3:08:58:87:18:
         39:5f:91:8f:27:9b:66:40:d7:a0:65:f2:10:3b:9a:02:02:c3:
         92:da:51:1b:c1:7f:6a:74:46:82:5b:51:45:c2:a9:c8:e9:40:
         fb:07:01:e6:80:1f:cb:38:e4:0c:f9:ed:88:3e:fb:b9:1c:be:
         31:bc:9f:65:a0:77:ad:46:3b:50:05:3b:db:cf:ae:1b:a7:d5:
         3d:0e:78:21:85:81:a2:4f:ad:f1:94:57:24:77:4e:fc:62:2e:
         ca:8f:1b:bf:7c:d4:c7:f3:a2:27:91:a0:f0:6f:c5:7d:af:d0:
         97:40:e6:e4:9a:40:83:4b:b3:55:75:e7:9d:ea:9f:71:aa:91:
         9b:1b:8b:39:dd:77:a3:d6:9d:84:52:1e:79:d4:e3:cb:8d:02:
         54:a4:36:aa:b3:36:0f:80:cc:c6:94:d3:32:a7:dc:80:9d:09:
         e2:e1:c4:4f:c3:29:02:b1:c5:cd:a4:84:16:0b:8f:e2:c4:71:
         f9:23:a6:87:33:bb:9f:06:49:fc:f4:da:28:e1:5f:fd:74:84:
         b7:92:d1:df:da:64:9f:b8:87:03:0c:a9:c1:86:45:e1:64:7c:
         7a:d2:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:51:07 2025 by rpki-client