Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft
File:                     QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft (raw, json)
Hash identifier:          GAup3AkklXFO5gHFRoGzgpI1TcK4M+Af2I5EXnB1nsY=
Subject key identifier:   ED:E1:AD:9C:2D:D9:1D:AB:82:A4:E3:B8:94:E6:E3:50:7E:9D:E9:7F
Authority key identifier: 43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
Certificate issuer:       /CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Certificate serial:       076D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft
Manifest number:          0764
Signing time:             Fri 18 Apr 2025 21:37:38 +0000
Manifest this update:     Fri 18 Apr 2025 21:37:37 +0000
Manifest next update:     Fri 25 Apr 2025 21:37:37 +0000
Files and hashes:         1: QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl (hash: o4Cal3cX7wW4JoAqtBvsxvbGjhomU8CxZY/UZnFPVrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 21:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1946, serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
        Validity
            Not Before: Apr 18 21:37:37 2025 GMT
            Not After : Apr 25 21:37:37 2025 GMT
        Subject: CN=6802c622-9011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:33:70:8c:5c:20:74:26:48:0d:b5:1d:66:
                    eb:5b:0f:8e:40:2d:b1:32:13:a1:05:ac:a2:7a:83:
                    94:21:6b:b5:57:b1:3b:7c:57:1b:44:0f:56:2f:d0:
                    6f:60:b0:b5:1d:8d:8a:60:a2:22:25:26:bc:0d:ca:
                    c0:79:d6:b0:54:da:87:01:df:f5:23:f9:7c:f1:d0:
                    68:a2:c8:81:48:38:e0:c1:1b:65:8b:cf:8e:81:12:
                    0e:2c:e7:21:d2:81:1e:f6:1e:6d:7e:e7:ff:50:54:
                    a3:87:33:43:8d:22:bf:e0:68:18:aa:f3:5a:5c:af:
                    d4:23:9f:b4:a3:19:e7:f4:b2:45:4e:94:72:d2:ff:
                    a3:7c:ae:72:22:8c:d7:7b:08:46:88:8d:3c:d0:91:
                    16:f7:31:13:a3:15:74:d5:45:b5:c9:c2:61:b8:86:
                    e8:dc:f4:4a:ef:d6:b9:d8:88:4a:3d:53:43:c3:f9:
                    a4:97:a2:48:29:94:eb:13:f6:53:4a:4b:02:ed:c6:
                    1a:71:81:8d:a5:8a:1c:bf:97:93:a0:54:96:37:08:
                    f1:80:31:80:f7:53:a2:74:78:de:96:08:c2:33:5e:
                    a0:5e:db:c1:7d:7c:4b:4e:0c:bc:ba:0e:71:4d:2a:
                    ea:1f:12:aa:f9:b1:68:21:a5:26:75:a6:05:a0:ae:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:AD:9C:2D:D9:1D:AB:82:A4:E3:B8:94:E6:E3:50:7E:9D:E9:7F
            X509v3 Authority Key Identifier:
                keyid:43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:3d:60:c9:6e:85:00:d9:89:cd:72:59:11:9b:4c:69:a3:
         b3:df:c9:dd:ec:1c:a3:55:05:28:dc:2f:5e:f5:6e:c7:e1:d8:
         d0:7c:0a:9c:d4:d7:df:42:ea:f0:06:24:93:d0:62:8a:90:14:
         c0:63:96:6e:8b:e2:90:43:fb:b7:0d:02:61:32:88:a5:ff:9d:
         6a:ca:e8:44:3b:7a:dc:7d:d5:79:e2:fb:60:b1:3a:07:93:ea:
         de:3a:c4:fa:44:a9:9d:83:65:9c:7d:73:4a:3c:87:f4:ca:24:
         8f:5c:e0:bf:93:14:01:7c:58:31:ef:df:ac:a4:6b:87:9f:27:
         2c:3b:20:a0:c9:b0:ad:fa:76:af:ac:47:ea:b3:44:02:d8:01:
         6e:27:29:d9:10:13:74:50:80:e9:c0:30:20:a7:31:16:da:99:
         fe:7b:19:94:32:d3:b9:83:53:d6:56:cd:5a:2d:dd:1f:60:4d:
         77:4b:46:96:a0:25:f3:fe:a7:7f:de:73:c4:76:41:0e:a1:a3:
         8c:de:d4:1e:37:37:b9:aa:6d:0f:b5:f4:9e:04:2b:ab:0d:91:
         17:2f:73:f6:45:c1:8f:3d:76:32:df:e1:22:55:1b:5b:10:99:
         fc:80:70:73:3d:37:fd:2a:01:c3:31:3e:30:fe:49:a3:90:5e:
         14:87:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:56:32 2025 by rpki-client