Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
File:                     QuOGLXRTXCypqrN6cZW1keruIeU.mft (raw, json)
Hash identifier:          N09ph/vwLdsbOMrCYq1FPFe5JBoxpJfbiGM2CiLUNHo=
Subject key identifier:   D9:A5:9B:2F:D2:66:CF:A4:1D:17:85:5F:CD:31:B8:46:53:54:63:BE
Authority key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
Certificate issuer:       /CN=A91580E4/serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
Manifest number:          23
Signing time:             Sat 31 May 2025 07:24:31 +0000
Manifest this update:     Sat 31 May 2025 07:24:30 +0000
Manifest next update:     Sat 07 Jun 2025 07:24:30 +0000
Files and hashes:         1: QuOGLXRTXCypqrN6cZW1keruIeU.crl (hash: zz6KjdFdTybOJELQ1H0pSeDEmUYHXnSz5IaKRUWjUU4=)
                          2: E78F55A408BC11F09C4FB471C4F9AE02.roa (hash: voOUCH7zRGxksu2fNV8QOYiL4kmVMcLs8S+aobdc9H8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl
                          rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
        Validity
            Not Before: May 31 07:24:30 2025 GMT
            Not After : Jun  7 07:24:30 2025 GMT
        Subject: CN=683aaeaf-996a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:ba:9a:3b:fe:d0:00:7a:1a:bb:76:02:6b:
                    44:4d:21:7b:71:c5:60:65:d7:f0:16:c5:5d:9c:59:
                    7b:bb:59:bb:c1:02:01:34:76:eb:fb:92:74:72:91:
                    fc:25:31:03:f1:ab:5f:b9:a3:0f:28:61:00:dc:8e:
                    60:14:7e:2c:92:e1:30:cf:7c:99:ab:d6:97:83:24:
                    36:48:e1:56:44:e5:ee:b9:af:c3:37:12:58:54:71:
                    e0:7a:58:b3:16:ab:09:10:62:04:80:b2:74:3c:13:
                    2b:23:83:e5:85:81:38:10:c2:97:f0:66:ea:8a:cc:
                    a6:ea:c0:c3:6e:dd:3e:ef:5f:c8:2a:76:3f:11:9d:
                    f4:3a:d9:28:04:f2:83:a1:c5:a5:02:ac:de:e3:fa:
                    8b:32:2c:6e:cc:99:d9:05:96:6f:ce:64:15:e1:55:
                    a6:8d:84:a1:ad:ec:b1:a1:13:c7:42:5a:34:7d:9a:
                    72:12:bb:8a:9c:ed:a5:fa:97:af:02:bf:f6:50:11:
                    32:6e:46:72:b2:ee:f6:d1:95:e8:c0:e4:2d:86:5e:
                    5b:c1:5e:45:3c:74:a3:e5:b8:4c:b3:8e:72:47:de:
                    12:32:7f:52:30:65:ce:4a:59:c4:fa:d7:45:4c:5a:
                    47:4b:40:56:2f:cd:fd:a5:2c:08:96:ac:80:09:2f:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A5:9B:2F:D2:66:CF:A4:1D:17:85:5F:CD:31:B8:46:53:54:63:BE
            X509v3 Authority Key Identifier:
                keyid:42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:4f:c4:08:e5:5b:ae:9f:cd:56:61:94:ed:ae:8d:42:38:
         64:42:ab:31:c5:f8:b5:e1:58:8e:84:67:42:19:72:44:16:c6:
         28:3a:08:59:a9:fe:67:a1:4d:95:3b:d6:a4:83:30:72:1a:0e:
         a8:b1:92:e6:02:03:e9:1b:99:34:81:61:b8:c8:a1:31:63:39:
         87:e8:87:92:60:a2:1f:18:a7:3f:93:00:f8:be:77:d8:c7:b9:
         c2:e0:bf:22:22:b5:d4:cb:fc:f2:8a:b2:20:a9:c7:f2:de:44:
         1f:6b:5b:f2:e8:3e:c8:7e:36:44:4c:39:bf:1c:0c:f2:87:3c:
         88:de:dd:56:57:2e:46:19:52:3c:9e:24:98:7b:ec:d7:c5:b8:
         7a:ab:08:a1:18:3b:c6:3f:48:c2:a3:05:fd:cc:b3:87:97:2f:
         11:cd:88:af:cb:56:a0:c0:21:21:c5:9a:68:8c:09:65:4f:df:
         56:6e:bc:94:84:3f:d1:06:11:30:a7:95:08:8d:40:26:eb:a2:
         9c:94:94:fa:04:58:35:04:11:5b:ce:ed:2e:ba:d3:e1:8f:40:
         57:3a:b1:63:44:fc:dd:13:05:2e:90:85:56:da:9a:bd:52:93:
         76:39:df:0a:eb:2c:56:db:df:50:0d:db:90:58:fb:09:9f:79:
         ba:10:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:49:13 2025 by rpki-client