Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          2czq8TzfQvrEqoex24AOYVXQLLb9FUXxo/cyAowRPfI=
Subject key identifier:   DE:40:F3:6C:AC:26:38:5B:C9:05:76:B4:1F:40:A5:6B:77:EA:68:47
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       09C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          09BB
Signing time:             Thu 12 Jun 2025 19:47:09 +0000
Manifest this update:     Thu 12 Jun 2025 19:47:08 +0000
Manifest next update:     Thu 19 Jun 2025 19:47:08 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: QXIJI4qztuyZMu9Lj7GgVX53bz58U9aTkAL4GamgVAI=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: H/OVGlOkL0NhP3BGJyz6i1zChcNr+09N/UDEg/ELwo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 19:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2498 (0x9c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Jun 12 19:47:08 2025 GMT
            Not After : Jun 19 19:47:08 2025 GMT
        Subject: CN=684b2ebd-dab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:52:35:9c:2a:82:e0:00:c3:00:dc:0e:10:
                    d4:47:73:58:1b:f2:0c:b4:c7:e7:85:9f:2f:f6:af:
                    2d:8a:72:db:49:4e:6c:bb:73:0a:e6:c3:27:9b:d9:
                    17:ce:e9:f6:68:98:ea:94:fa:98:8e:35:f4:79:c7:
                    72:7f:89:57:1a:d7:88:9d:80:98:25:4b:78:8d:da:
                    d7:b3:f7:ca:92:a5:8a:d6:f4:0b:ca:93:b1:92:37:
                    9a:d9:d7:12:de:c9:0c:33:79:1e:22:e1:65:44:0d:
                    75:3d:8e:4e:eb:6e:63:19:87:ff:f9:3c:3d:f0:f5:
                    c0:16:51:38:84:68:dd:af:8e:cf:4c:08:6e:d1:dd:
                    65:c8:ab:e7:99:ac:d1:41:75:c2:df:78:cc:2d:0f:
                    33:66:ae:ba:2a:56:c1:77:d8:c3:94:1a:c4:da:f5:
                    2b:d1:b9:f6:91:16:dd:e7:90:21:65:04:68:46:28:
                    1b:9f:86:b2:aa:46:a3:ea:ae:e0:cc:ff:12:f7:ac:
                    68:2c:a5:44:8f:c4:30:6e:35:cd:45:0f:d6:0d:0f:
                    62:af:30:d3:4e:7e:fe:00:4d:6c:dd:c2:52:3f:84:
                    4b:39:80:bd:71:ab:bd:d9:00:e6:55:aa:1f:1c:3d:
                    e2:fe:13:51:6d:62:7d:fb:f6:4a:d1:c5:5c:1b:06:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:40:F3:6C:AC:26:38:5B:C9:05:76:B4:1F:40:A5:6B:77:EA:68:47
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:60:b6:e7:6d:a0:83:83:5b:44:ce:4b:8f:98:15:ce:87:
         de:6a:e4:cf:b4:d3:0a:ce:80:17:18:25:5f:b6:b6:86:e3:4b:
         3c:64:da:5d:71:80:9d:e2:8a:81:c0:a5:ee:b4:e4:d8:ed:6d:
         d4:6e:14:37:25:03:38:6f:78:c6:6a:4f:b9:f4:c4:14:26:ee:
         b6:99:c7:9a:81:14:77:10:dd:04:19:f2:4a:5f:3a:44:01:a2:
         82:34:2f:c7:c9:95:7d:07:62:40:24:2b:64:0b:4e:e7:17:87:
         f7:5b:08:b2:34:e5:4e:37:14:b7:c0:a5:f7:51:60:03:c1:c0:
         2a:5e:e2:b2:94:b0:07:44:14:2b:25:37:9c:0f:50:f8:4b:de:
         1a:c4:55:ee:08:83:c1:62:e5:9c:d2:e9:1b:48:fb:ab:8e:b0:
         b6:6a:1d:f2:bb:98:08:d2:50:ef:cb:35:35:08:2e:17:be:1b:
         fa:d9:36:52:a6:de:4e:cc:02:84:38:3f:7f:77:12:fc:c8:bc:
         d3:de:ce:df:46:4b:0e:8c:a7:81:ba:f4:44:b6:5e:1c:35:b5:
         6b:b7:ab:14:63:53:ef:9d:cd:53:b8:9a:27:29:bf:7f:a1:f2:
         32:f3:9e:b4:b9:b2:38:ab:e0:96:42:ef:8e:c6:8c:df:b1:50:
         02:e4:88:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx
NURDODRCRUIwHhcNMjUwNjEyMTk0NzA4WhcNMjUwNjE5MTk0NzA4WjAYMRYwFAYD
VQQDEw02ODRiMmViZC1kYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzNSNZwqguAAwwDcDhDUR3NYG/IMtMfnhZ8v9q8tinLbSU5su3MK5sMnm9kX
zun2aJjqlPqYjjX0ecdyf4lXGteInYCYJUt4jdrXs/fKkqWK1vQLypOxkjea2dcS
3skMM3keIuFlRA11PY5O625jGYf/+Tw98PXAFlE4hGjdr47PTAhu0d1lyKvnmazR
QXXC33jMLQ8zZq66KlbBd9jDlBrE2vUr0bn2kRbd55AhZQRoRigbn4ayqkaj6q7g
zP8S96xoLKVEj8QwbjXNRQ/WDQ9irzDTTn7+AE1s3cJSP4RLOYC9cau92QDmVaof
HD3i/hNRbWJ9+/ZK0cVcGwZSqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5A82ys
JjhbyQV2tB9ApWt36mhHMB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0
NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUVEMi82MjFFODYxMDg0NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZ
a2dzVkhhcFZSSndWM0lTLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMGGC2522gg4NbRM5Lj5gVzofeauTPtNMKzoAXGCVftraG40s8ZNpd
cYCd4oqBwKXutOTY7W3UbhQ3JQM4b3jGak+59MQUJu62mceagRR3EN0EGfJKXzpE
AaKCNC/HyZV9B2JAJCtkC07nF4f3WwiyNOVONxS3wKX3UWADwcAqXuKylLAHRBQr
JTecD1D4S94axFXuCIPBYuWc0ukbSPurjrC2ah3yu5gI0lDvyzU1CC4Xvhv62TZS
pt5OzAKEOD9/dxL8yLzT3s7fRksOjKeBuvREtl4cNbVrt6sUY1Pvnc1TuJonKb9/
ofIy8560ubI4q+CWQu+OxozfsVAC5IgW
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:41:14 2025 by rpki-client