Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File:                     qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier:          YgK/NDpgiWcrSxrg0qFsygyUGahNKOZScIyUD8fcBvA=
Subject key identifier:   02:A5:74:A1:56:DC:79:E5:98:E3:90:28:93:CC:E7:63:7C:34:31:ED
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer:       /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number:          015B
Signing time:             Sat 19 Apr 2025 03:16:09 +0000
Manifest this update:     Sat 19 Apr 2025 03:16:09 +0000
Manifest next update:     Sat 26 Apr 2025 03:16:09 +0000
Files and hashes:         1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: N0ID0mpLA6gsITt/XAk90c+YY2stT61u4ioot/SIYus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 02:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
        Validity
            Not Before: Apr 19 03:16:09 2025 GMT
            Not After : Apr 26 03:16:09 2025 GMT
        Subject: CN=68031579-835e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:95:84:7f:92:3b:61:12:3f:21:4a:8a:01:
                    d9:30:7a:26:5c:70:ed:f9:e6:85:ea:1f:06:80:3f:
                    dc:3b:99:5b:ed:3d:e2:13:8b:e3:2d:3e:f8:59:4f:
                    8c:2b:e4:e1:d9:c9:79:9c:bd:af:02:47:39:9e:8a:
                    85:93:84:bb:84:7e:0a:2d:0e:43:e5:13:8d:98:7f:
                    77:ea:d2:f5:07:24:10:8d:ed:86:7f:20:6c:65:7f:
                    6a:c0:4d:77:0b:f6:73:f4:d3:2b:4b:be:a8:db:a7:
                    8a:73:39:01:9e:2d:52:9c:fe:59:bf:6c:b9:b6:87:
                    39:3e:36:b5:28:d5:f5:ba:14:9a:41:a2:79:cf:fe:
                    03:b6:aa:e8:05:78:40:ce:01:4b:a7:b4:44:59:1e:
                    7c:d0:42:fc:2c:eb:52:6f:a5:2b:36:01:29:69:51:
                    d5:be:b0:a2:1d:d9:11:e8:39:80:84:1b:a3:72:b2:
                    c8:9d:2b:16:8c:65:50:87:e7:ea:29:6d:54:10:2d:
                    f5:61:9f:34:14:43:71:ed:49:1c:16:2e:be:d9:3f:
                    8b:a1:8c:ec:d8:81:26:c4:16:cb:bb:54:d7:3d:70:
                    82:0d:7b:05:7f:22:89:75:5f:b9:46:5d:92:e8:f4:
                    09:92:5f:89:c5:8d:98:f7:55:aa:3d:3a:2e:58:8b:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A5:74:A1:56:DC:79:E5:98:E3:90:28:93:CC:E7:63:7C:34:31:ED
            X509v3 Authority Key Identifier:
                keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:7b:f6:e7:fa:77:8c:3b:e0:5e:f5:8e:dd:f7:d8:8a:58:
         5b:23:39:a4:5c:9b:56:ba:49:0b:ea:b3:5c:e3:54:a9:9b:56:
         63:28:75:e7:f8:6c:95:c4:01:02:a6:4e:3b:4e:3b:8d:4b:79:
         0f:91:12:f1:14:5c:a3:7f:b8:6f:1e:28:0b:c8:2a:5c:de:60:
         93:2c:a7:64:1c:66:d9:54:58:a2:d4:d2:87:ae:94:d7:cc:64:
         04:55:ed:f6:4d:fe:95:e7:00:e1:2d:cd:b5:60:35:92:33:0a:
         75:dd:dd:6f:2a:22:ac:a4:63:a2:f6:5c:a2:ad:21:61:88:c4:
         09:04:86:6e:04:12:af:b6:6a:08:52:c9:96:b3:b1:28:cd:ed:
         cc:79:e2:e4:f4:09:63:1e:55:b5:94:5e:d5:4b:fb:27:76:fb:
         97:29:5f:da:be:b7:df:f7:ea:18:c5:5e:69:b5:04:5f:44:b5:
         17:6c:9f:8d:5f:dd:b7:69:9f:db:f6:20:7b:d1:a0:42:d1:24:
         64:3b:46:2b:d6:64:83:67:2a:08:37:d2:be:4d:0e:f1:35:68:
         87:4b:50:1d:4f:07:f2:7d:71:c1:4c:33:42:0c:04:51:3f:87:
         a9:22:77:d6:8d:5b:4e:a3:75:cb:75:67:0a:44:6a:ae:3f:27:
         b1:64:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:02:29 2025 by rpki-client