Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
File:                     qtqjxEEWYN9cNEipHISuV1eibhM.mft (raw, json)
Hash identifier:          Ty4nNJIHkV94MuwhQdvmd3meEnZTNGufh5zLGTZFIyI=
Subject key identifier:   83:05:30:BF:4F:A2:40:D6:1F:56:9C:81:A6:AE:2B:2D:24:37:05:92
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
Manifest number:          06A5
Signing time:             Fri 30 May 2025 22:24:51 +0000
Manifest this update:     Fri 30 May 2025 22:24:50 +0000
Manifest next update:     Fri 06 Jun 2025 22:24:50 +0000
Files and hashes:         1: qtqjxEEWYN9cNEipHISuV1eibhM.crl (hash: 0slV6CSjr4nYY5zhW4s8a/9IchTUA2j4DSJ6aTvtazo=)
                          2: E349FB7A6B8B11EBA041C843C4F9AE02.roa (hash: pH5N/Qx1YY5gq3cEOXWljF1Kkz3BHRfE8oyjPHPjT5Q=)
                          3: E4C0040A8C8C11EBB81BA228C4F9AE02.roa (hash: zHLsyhTV60ZHxvQdwbDX5bbqYkoP6kC08f+Bv/mppKY=)
                          4: 9D181A24D78211EC944E227FC4F9AE02.roa (hash: yUMXKBsm+dh5a8mwbXbljjnmOf1V4J6P/dOjZa9dbcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D, serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: May 30 22:24:50 2025 GMT
            Not After : Jun  6 22:24:50 2025 GMT
        Subject: CN=683a3032-cb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:79:a2:9f:45:26:4a:0e:4d:57:30:94:8a:30:
                    cd:ee:63:93:18:09:c5:15:11:db:6c:55:8a:3c:84:
                    a5:a9:8d:53:da:18:e5:0a:d1:07:d6:a6:86:ae:cc:
                    e7:18:3c:60:54:e1:c1:d4:57:99:d8:6a:a4:73:3b:
                    b2:07:c5:af:1a:ae:bb:1f:be:c8:55:06:2a:82:01:
                    44:24:80:5d:c0:54:1b:30:5c:22:87:c7:3f:7d:63:
                    ec:a6:a3:f6:f0:f9:09:05:df:56:16:83:1f:59:db:
                    17:49:74:96:48:8a:b8:73:c2:c4:f7:61:6a:98:9c:
                    fa:39:d5:90:17:31:35:3f:fa:5d:a9:40:a1:12:61:
                    19:5c:46:4b:04:f4:3f:26:22:fd:af:96:cc:cf:f9:
                    2b:36:4b:f6:d6:29:50:d5:6e:80:bf:02:e6:28:a6:
                    f6:28:a2:4a:87:93:39:ae:d3:59:df:3e:21:07:7d:
                    62:46:b0:8b:e3:9c:e3:96:bf:fc:67:5a:b1:8c:7e:
                    db:ed:ed:13:65:d5:3f:98:40:b4:12:d1:05:5d:af:
                    5c:f3:58:b1:a3:cb:0d:93:ae:9d:61:79:2f:c6:2e:
                    8e:f7:79:0f:43:95:b9:59:3b:8f:7b:0d:fc:0a:d0:
                    0c:c6:d0:72:b5:26:7a:40:30:56:40:be:d8:53:71:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:05:30:BF:4F:A2:40:D6:1F:56:9C:81:A6:AE:2B:2D:24:37:05:92
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:49:7d:88:e6:bd:c6:ab:94:a8:b2:a2:4a:28:ca:63:dd:
         31:2f:23:24:e2:ae:9c:3c:6a:95:65:e2:dd:c0:8e:9b:fc:3a:
         7f:c6:62:79:d8:32:fe:da:8a:a0:d2:45:26:ba:5d:f8:35:fb:
         84:89:4f:51:97:ea:4c:00:c4:9c:db:2d:91:f8:1b:11:76:e0:
         0e:39:de:9a:78:42:0e:7a:b2:67:32:81:ee:cb:9d:75:a8:4b:
         30:ec:32:15:98:51:c6:c9:3d:d2:c5:4e:ce:fd:54:3a:fb:e5:
         8e:d3:16:52:41:0b:50:4a:f9:5a:af:ae:b2:a1:95:11:e4:87:
         ea:54:35:b4:65:9f:52:76:e7:f2:fc:02:f0:db:d1:dc:7f:64:
         3c:18:20:78:6d:48:b7:b8:ad:38:95:3b:fe:88:52:2b:b5:69:
         8a:d1:51:a1:9a:ae:4e:86:3b:9a:0d:00:f3:6f:73:ed:b6:a8:
         4e:03:51:ef:29:c0:37:17:94:2c:73:88:b7:b2:01:35:1d:55:
         48:9b:d9:86:66:7e:4b:c9:11:f5:94:c4:7b:dc:69:d0:60:3b:
         bd:59:cb:c9:38:a7:5e:14:97:5d:72:33:88:8c:03:08:3c:95:
         cf:c9:63:19:1c:2a:7a:db:24:c9:44:8a:c2:22:ad:47:6d:ff:
         65:c6:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:47:47 2025 by rpki-client