Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
File:                     Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json)
Hash identifier:          sOHvHcjIwYl5LOssIo5phXF+O95y0c2Ls7WNqwpKDaw=
Subject key identifier:   2C:55:A9:76:02:BE:33:B3:C3:29:47:7F:EB:BD:94:14:61:6E:9F:C5
Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD
Certificate issuer:       /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
Manifest number:          011C
Signing time:             Mon 09 Jun 2025 03:50:39 +0000
Manifest this update:     Mon 09 Jun 2025 03:50:39 +0000
Manifest next update:     Mon 16 Jun 2025 03:50:39 +0000
Files and hashes:         1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: 9tMVqOGqaZ03X1qxZiULVjW9kP4l9s76m40WteNsYWg=)
                          2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: qMb5p2DafyW8EWL0hOaIMJWbQyW8PlH7p5vaUcSXFyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl
                          rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91237A2, serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
        Validity
            Not Before: Jun  9 03:50:39 2025 GMT
            Not After : Jun 16 03:50:39 2025 GMT
        Subject: CN=68465a0f-df66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:2c:da:fb:6c:4c:df:6e:e5:94:90:98:b4:
                    2a:67:bc:19:ca:58:56:2b:df:40:5b:ff:d5:93:56:
                    f8:6d:8c:59:29:8b:39:e6:45:0e:4f:d6:7a:f3:d1:
                    17:75:7b:0d:7d:3e:80:a1:b5:0c:da:59:45:8f:47:
                    d2:27:0f:91:bd:bd:0b:ad:c2:10:64:69:2f:6f:e2:
                    7b:29:cd:b6:4a:95:ea:6f:97:ec:e0:2c:be:57:62:
                    52:d7:58:b0:b3:34:4c:93:19:7f:38:85:e5:3c:57:
                    fc:54:6d:09:09:61:4f:05:1e:ae:e2:d8:04:fd:ee:
                    91:f0:0d:a6:c1:02:f4:59:85:03:75:72:88:ea:26:
                    21:90:c0:25:42:79:d4:ea:6e:58:5e:99:9c:ef:fe:
                    ff:ef:f9:6d:56:8f:db:99:b3:a5:c1:ed:95:ef:9b:
                    7d:38:ba:19:3a:4d:e8:af:61:19:ea:9c:45:b2:fa:
                    50:c6:df:c0:bc:59:9e:ab:aa:75:d4:4d:04:c5:98:
                    b2:d8:c7:bb:d7:0a:0b:e2:25:29:b5:ef:0f:fa:a6:
                    de:e8:df:ec:b7:03:e5:3d:8b:2e:1e:30:33:18:1f:
                    63:70:3b:5e:ac:02:7e:8b:a2:24:8a:df:7d:c7:21:
                    46:2a:65:f3:5f:2a:04:3d:55:98:6f:8b:83:d2:96:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:A9:76:02:BE:33:B3:C3:29:47:7F:EB:BD:94:14:61:6E:9F:C5
            X509v3 Authority Key Identifier:
                keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:11:82:7d:21:82:15:e5:62:38:b7:8d:4f:91:d8:d7:f1:2c:
         8c:ce:0c:ad:5b:32:77:27:4d:ed:35:b6:ff:90:ea:0a:d6:7b:
         14:28:e7:cd:73:9d:02:c7:a9:47:a2:8d:e7:e7:df:3c:e4:0a:
         b3:c1:6e:4d:01:4c:2c:a3:73:3c:70:43:a7:7d:be:fc:3c:8c:
         6e:01:eb:a1:51:16:9e:5a:b8:b2:f2:01:d4:5c:8b:16:db:75:
         28:cd:73:5c:b5:4f:24:62:d9:fc:1f:59:37:c1:54:58:17:97:
         64:d6:da:d2:7e:9a:22:02:3c:d6:3e:9a:06:90:a0:41:e1:cc:
         75:5e:be:ab:d5:c1:46:26:b6:c3:0e:23:7a:8d:33:0f:3d:5b:
         09:83:94:4d:0e:05:4e:23:14:97:a3:da:80:4f:37:dc:0c:7b:
         62:b7:db:ee:29:75:8a:01:d3:a9:40:dc:a9:ef:37:9c:c2:bc:
         8a:09:af:0a:a5:7c:31:5f:4d:ee:83:63:f2:9a:47:01:42:1d:
         aa:ee:34:fb:11:4e:4c:3a:32:d8:4c:59:31:35:8c:1e:4e:d8:
         9f:2b:e8:2c:57:6c:71:09:01:77:7b:66:db:a9:eb:bd:9a:82:
         d4:e9:e6:a7:d2:46:d1:49:e2:30:d4:3c:be:60:17:df:d6:0e:
         60:d7:d6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:47:08 2025 by rpki-client