Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
File:                     M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json)
Hash identifier:          TU3aY77iv85emPIfNKtxgVYcXxrLJrCDn4GEcKgeCVc=
Subject key identifier:   1E:A4:12:FC:41:E8:63:2B:EA:98:99:EF:48:06:B5:85:08:30:0F:8F
Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
Certificate issuer:       /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Certificate serial:       0CD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
Manifest number:          0CCA
Signing time:             Fri 18 Jul 2025 18:17:44 +0000
Manifest this update:     Fri 18 Jul 2025 18:17:44 +0000
Manifest next update:     Fri 25 Jul 2025 18:17:44 +0000
Files and hashes:         1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: MilNe3eTmTxjxEh565EHmZN8lICypMFfpPOQjtSSPys=)
                          2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: sVwxj8pb/X0KOyVBfmu/JHCV32hFIOXFbfXDeMrIHO4=)
                          3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: TvxmtDuu0g+5vHIGbKKqvtivjp3MqjbTQqIf6Vqxlu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
                          rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 18:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3288 (0xcd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
        Validity
            Not Before: Jul 18 18:17:44 2025 GMT
            Not After : Jul 25 18:17:44 2025 GMT
        Subject: CN=687a8fc8-b634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:b6:38:ca:45:fe:1b:50:87:7b:02:af:18:
                    8a:8f:7d:e7:9b:79:f4:5c:de:6c:c3:4a:97:25:a7:
                    a0:fc:ec:15:45:17:bb:6e:e0:a7:d1:ce:17:df:74:
                    f5:93:74:51:9b:92:6f:e3:86:49:6f:f3:f5:6f:43:
                    ae:2b:e8:1c:bf:67:97:da:89:75:1d:f9:44:98:53:
                    09:a4:b9:3e:59:2a:a1:2d:d6:82:8c:e5:64:f5:26:
                    73:77:fb:aa:b4:9e:b3:11:63:53:db:11:24:ee:6f:
                    1f:cd:c0:a1:55:02:0a:7f:20:70:92:5e:27:04:cc:
                    f4:82:2c:11:92:7a:f5:75:64:4d:46:30:4f:86:97:
                    cd:b3:28:f8:05:54:8e:42:ae:9f:94:a2:72:8c:d4:
                    bd:56:1d:db:8c:35:63:77:28:73:4e:67:17:79:16:
                    2f:14:4d:7f:5a:ad:9b:7c:0d:31:63:4d:ca:f0:d2:
                    71:89:62:5e:06:ad:d2:78:1b:c9:a5:e4:7a:51:d0:
                    10:d0:17:88:07:75:49:83:19:10:e0:8e:1e:09:7f:
                    7a:67:b1:13:57:3d:e2:0b:0d:18:1d:a9:9c:42:61:
                    7b:35:a9:4b:bf:fd:40:cb:51:e9:07:8e:65:46:d6:
                    40:ce:f7:d6:da:0f:25:6d:95:3f:ba:54:ff:e9:01:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A4:12:FC:41:E8:63:2B:EA:98:99:EF:48:06:B5:85:08:30:0F:8F
            X509v3 Authority Key Identifier:
                keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:f2:f5:83:04:b4:d4:2e:0a:26:40:1b:16:a4:7e:14:bb:
         cd:b0:bf:c8:8f:a8:8c:12:f5:2a:29:19:e6:03:6d:83:8e:ac:
         55:24:28:cf:4b:9d:de:2b:fd:75:04:95:dd:21:00:3d:4c:4f:
         ba:f2:b6:f1:71:a9:da:21:4d:70:fd:07:e3:60:67:5f:a5:80:
         6b:87:55:4d:ff:cc:9d:4c:15:5f:c3:25:50:80:80:d7:27:1d:
         16:bb:fd:d3:5a:1f:22:ae:50:d6:b1:70:3e:84:be:54:40:1d:
         d6:11:b0:42:6e:ac:86:8c:63:91:e8:fc:aa:21:cd:9d:a9:57:
         b5:20:8f:15:91:b9:4d:24:ac:fd:b6:bc:81:a2:a9:da:47:59:
         78:b6:cc:38:9b:9f:cd:a0:ee:52:02:09:0f:7c:4e:3d:13:a1:
         fd:2f:4a:1c:28:a3:4e:83:6a:ce:de:54:ef:04:d3:45:2a:84:
         ee:13:95:47:4b:32:49:cd:3b:2a:c6:d4:f7:ca:7d:20:3e:00:
         ef:56:64:48:1e:24:f4:58:86:22:a5:fc:13:7f:50:6b:9e:d0:
         63:af:e1:5f:67:6e:22:b6:a1:80:b2:11:00:5f:fc:42:55:19:
         04:ba:8f:dd:02:f0:e6:91:74:c0:9f:2f:42:ab:85:bc:b4:5b:
         da:fd:1d:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1
ODdGMDM5MTIwHhcNMjUwNzE4MTgxNzQ0WhcNMjUwNzI1MTgxNzQ0WjAYMRYwFAYD
VQQDEw02ODdhOGZjOC1iNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWq2OMpF/htQh3sCrxiKj33nm3n0XN5sw0qXJaeg/OwVRRe7buCn0c4X33T1
k3RRm5Jv44ZJb/P1b0OuK+gcv2eX2ol1HflEmFMJpLk+WSqhLdaCjOVk9SZzd/uq
tJ6zEWNT2xEk7m8fzcChVQIKfyBwkl4nBMz0giwRknr1dWRNRjBPhpfNsyj4BVSO
Qq6flKJyjNS9Vh3bjDVjdyhzTmcXeRYvFE1/Wq2bfA0xY03K8NJxiWJeBq3SeBvJ
peR6UdAQ0BeIB3VJgxkQ4I4eCX96Z7ETVz3iCw0YHamcQmF7NalLv/1Ay1HpB45l
RtZAzvfW2g8lbZU/ulT/6QEY2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6kEvxB
6GMr6piZ70gGtYUIMA+PMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy
NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3
X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXy/L1gwS01C4KJkAbFqR+FLvNsL/Ij6iMEvUqKRnmA22DjqxVJCjP
S53eK/11BJXdIQA9TE+68rbxcanaIU1w/QfjYGdfpYBrh1VN/8ydTBVfwyVQgIDX
Jx0Wu/3TWh8irlDWsXA+hL5UQB3WEbBCbqyGjGOR6PyqIc2dqVe1II8VkblNJKz9
tryBoqnaR1l4tsw4m5/NoO5SAgkPfE49E6H9L0ocKKNOg2rO3lTvBNNFKoTuE5VH
SzJJzTsqxtT3yn0gPgDvVmRIHiT0WIYipfwTf1BrntBjr+FfZ24itqGAshEAX/xC
VRkEuo/dAvDmkXTAny9Cq4W8tFva/R0N
-----END CERTIFICATE-----
Generated at Sun Jul 20 11:59:16 2025 by rpki-client