Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File:                     vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier:          yWZBorNn5ct8SxEyNhHQNwu5i1ir/JMRvK8tWoDTPu0=
Subject key identifier:   EB:89:A2:75:49:CE:E4:B0:78:42:54:01:33:05:17:7B:D6:4C:FA:1C
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer:       /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial:       0710
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number:          0706
Signing time:             Sat 10 May 2025 21:32:35 +0000
Manifest this update:     Sat 10 May 2025 21:32:34 +0000
Manifest next update:     Sat 17 May 2025 21:32:34 +0000
Files and hashes:         1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: tTkgQBBbmcYT6MKlA43XfJ0KLruCDKKh79FZIvF9HyU=)
                          2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: QraXnZCET4DytM5/10lXcxYbwH8hmrtP3mDCaQ6jJXk=)
                          3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: TJhxFRJSMHDZftvXajaD5yBRa7CxOx/OA+78HFtd2eM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 21:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
        Validity
            Not Before: May 10 21:32:34 2025 GMT
            Not After : May 17 21:32:34 2025 GMT
        Subject: CN=681fc5f2-eaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:27:90:83:52:cb:e7:87:37:c9:78:36:f1:
                    ac:5f:b5:0c:b8:1c:d5:76:ea:b4:be:4a:96:5e:1c:
                    b9:14:55:a3:fe:f6:ca:69:70:b1:37:f8:9c:05:20:
                    26:6f:3a:c4:90:e3:84:18:df:eb:14:7e:26:94:60:
                    19:63:0a:42:4d:a1:32:c5:30:1e:0a:27:81:e6:e5:
                    84:92:42:72:9e:90:f9:b5:30:e1:55:5f:0a:86:79:
                    25:bd:47:b6:8f:ac:5f:69:38:df:d3:12:18:40:44:
                    ed:e0:5d:8e:26:7e:fa:8e:df:04:8a:bf:d0:96:e1:
                    af:18:b5:12:b2:0c:50:f2:0f:7c:29:4d:9a:c9:92:
                    5d:c2:b4:94:31:15:03:c8:5e:43:ee:1e:7c:c8:f4:
                    ee:6e:d7:a1:c2:7f:22:df:71:23:bc:93:b5:60:3f:
                    01:d9:d4:fd:8c:a8:04:9b:37:da:7c:9c:db:19:f6:
                    9e:b6:bc:8a:d4:09:de:6e:61:a9:35:36:c0:d5:1b:
                    9e:fd:26:17:1f:ae:04:22:b2:2d:0a:93:63:89:54:
                    11:1b:b0:09:b8:66:fd:6a:1c:16:a3:0e:6f:f6:f1:
                    2c:4d:57:fe:ef:35:2b:5d:6a:de:bd:0c:84:fd:23:
                    ff:06:0b:1f:9b:7b:50:91:04:2e:f2:b7:7d:3e:cf:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:A2:75:49:CE:E4:B0:78:42:54:01:33:05:17:7B:D6:4C:FA:1C
            X509v3 Authority Key Identifier:
                keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:3a:4e:87:68:32:c4:5b:57:27:23:5f:74:e8:25:71:bc:
         20:03:e3:4f:7c:c9:75:e9:f7:49:65:dd:e9:6d:e4:f8:79:2f:
         7c:47:58:e2:f5:86:9f:31:a4:dd:0e:1e:70:26:b5:18:56:2e:
         26:2d:f1:a6:1f:94:17:61:33:a4:c6:c4:dc:74:ac:ea:98:85:
         6c:ec:75:2a:71:cc:dd:a5:3d:25:c0:7d:f0:0f:c4:00:dc:42:
         eb:33:8c:d5:02:64:0e:9d:ce:67:ea:5b:8c:1d:ae:b2:17:60:
         7d:c0:2f:bb:5e:86:19:80:eb:ea:0f:23:00:d2:e9:0c:7d:c5:
         07:83:a2:83:6e:65:1a:35:8e:f4:16:57:57:9a:88:37:21:09:
         c6:df:f3:b1:62:a1:d3:08:46:5a:4a:54:d7:1c:7e:f9:d6:47:
         f6:4d:6c:b1:21:af:08:46:1a:69:d1:3a:df:41:da:5b:f0:39:
         40:17:93:a6:07:b1:da:d7:7d:8d:c7:ae:b9:96:57:9d:ba:92:
         6f:a4:21:6d:d4:61:88:98:cc:57:9d:d4:9e:40:c6:28:a9:ed:
         a4:2f:9e:ab:c9:d0:e7:9b:f8:a7:e8:ff:ea:cd:59:cc:c3:d0:
         22:e2:b6:f0:05:59:1c:43:5e:fe:e2:b8:f6:a1:82:d2:24:40:
         dd:2a:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:04:12 2025 by rpki-client