Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File:                     QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier:          Ldg0Bza8ENR2No9IaAcckUXuJqaDxYLN9kEnreHWjxI=
Subject key identifier:   41:FA:3A:62:CA:14:65:F0:BD:BA:E3:05:2A:33:77:C0:F6:FE:F1:D9
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer:       /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number:          FB
Signing time:             Sat 31 May 2025 04:47:01 +0000
Manifest this update:     Sat 31 May 2025 04:47:00 +0000
Manifest next update:     Sat 07 Jun 2025 04:47:00 +0000
Files and hashes:         1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: OxuVn5aJ0Dq04nYU2aj7047pEX2gsGUSw8h8iMMGOUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
                          rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
        Validity
            Not Before: May 31 04:47:00 2025 GMT
            Not After : Jun  7 04:47:00 2025 GMT
        Subject: CN=683a89c4-b6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:ee:f4:92:f6:20:b9:ff:00:5e:0d:75:53:
                    34:73:fe:44:b1:7f:26:56:2d:53:ec:c0:47:a8:23:
                    a6:24:ed:56:fa:99:57:b9:3d:a4:46:a7:27:65:4b:
                    a0:50:9c:85:e5:5d:91:2d:92:70:d3:2d:99:6f:c7:
                    d4:7e:be:0d:92:09:eb:3b:b4:ab:cc:10:6b:ce:2d:
                    95:e3:05:1c:3b:09:0d:79:a1:fa:4b:5d:f0:f6:8b:
                    49:b4:a4:c5:2b:eb:68:af:c1:e7:f9:02:dc:3c:c0:
                    19:61:c4:37:fe:cc:91:77:45:bd:33:ab:68:d2:de:
                    a9:f8:07:d8:d2:e3:a8:22:72:3a:d4:28:64:a6:8b:
                    a8:86:43:6a:b4:73:e4:c8:ca:f6:29:b0:ae:58:d4:
                    55:e9:58:85:8f:a9:c1:01:ca:21:69:ef:63:74:a8:
                    18:a1:74:8e:73:7d:7e:a2:b1:36:59:1b:9a:1d:9b:
                    cd:78:0f:5f:fc:15:90:4b:ce:6d:d8:b2:38:a7:19:
                    f8:db:d3:9f:c4:9f:e8:34:ae:87:3d:14:fe:8c:f1:
                    ef:de:15:e3:62:3b:fa:74:9f:af:e7:ee:06:61:1f:
                    59:a5:1a:29:8f:d8:f9:d9:a2:6b:0b:b1:32:60:3b:
                    34:8c:2b:97:ac:5d:f1:d5:eb:9d:57:3c:b4:72:c7:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FA:3A:62:CA:14:65:F0:BD:BA:E3:05:2A:33:77:C0:F6:FE:F1:D9
            X509v3 Authority Key Identifier:
                keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:55:17:e5:b9:3e:36:77:ce:cc:9e:9d:b4:66:c8:9d:cb:f5:
         56:66:bd:67:dc:9e:04:6a:d1:64:da:82:e2:13:1e:a0:a9:48:
         77:d9:4f:d3:88:14:75:23:b5:44:85:76:ac:9c:7d:45:ed:ca:
         07:e9:a0:8d:a2:32:72:7e:99:74:dd:ad:90:dc:f8:e0:05:88:
         2b:cb:36:b4:9f:32:74:28:b2:65:dd:d0:95:e7:59:21:91:77:
         b8:97:1d:1f:46:46:15:31:04:34:4e:06:69:30:a9:a7:df:1a:
         8a:42:6b:2a:7c:8c:eb:3a:50:92:9c:d5:a6:d7:74:be:15:a3:
         5b:03:b3:ee:57:45:c1:42:fc:cb:f5:d1:9a:29:f5:86:39:59:
         c4:7f:1f:85:9b:7b:47:a3:9b:bd:8b:86:b7:c0:c2:c8:33:ec:
         98:9f:60:06:eb:ce:bd:70:01:f4:74:73:d7:55:61:f5:94:38:
         08:6a:ad:4b:70:f9:bb:13:1f:28:f2:b2:58:7d:b4:35:f5:55:
         8e:41:4e:ae:c7:b4:e2:4b:e7:0c:66:6e:60:53:83:fa:dd:2c:
         69:b8:3e:d3:ea:ba:5a:4b:bf:e2:c5:43:e0:16:1c:05:a1:7b:
         69:48:35:8f:46:e5:d5:48:12:33:08:fa:d0:16:42:b5:fa:ba:
         9a:88:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:34:24 2025 by rpki-client