Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File:                     Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier:          3zwTJC6qfUyItJkC4efmJtx/9oMI+nO0ub4m+B4jwWk=
Subject key identifier:   29:BD:78:D7:4B:0F:BC:EC:85:AD:7D:DF:CA:30:76:7B:87:48:BF:DB
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer:       /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial:       0743
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number:          073B
Signing time:             Sun 08 Jun 2025 21:24:47 +0000
Manifest this update:     Sun 08 Jun 2025 21:24:46 +0000
Manifest next update:     Sun 15 Jun 2025 21:24:46 +0000
Files and hashes:         1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: yu4vcOX5qknNjLAVNiDmrG+tQkJaywnSiOHJBkg+u7A=)
                          2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: bx4OdIF/hMTyewKQzRXbYDvV0LVN5invBqXfdlpkEUg=)
                          3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DlksN9MScupAjFsSOvELPpNk78Lxd9jwsZlpaixwA5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
                          rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 18:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859 (0x743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
        Validity
            Not Before: Jun  8 21:24:46 2025 GMT
            Not After : Jun 15 21:24:46 2025 GMT
        Subject: CN=6845ff9f-b2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:1b:73:d8:88:a0:a9:c8:2d:89:88:29:9d:
                    be:95:0b:73:72:03:4c:f6:0b:38:32:02:0e:f6:fa:
                    a4:ef:bd:8f:b5:b9:33:0b:c3:6d:2d:33:11:57:27:
                    41:a2:5b:b3:1c:3b:66:c3:23:9f:a4:ad:f9:34:3e:
                    8d:92:cc:ea:39:7c:55:7a:2a:92:4d:a4:fd:ba:44:
                    61:2b:80:3e:7f:04:72:61:bc:06:b1:02:9c:14:a7:
                    d1:c2:dd:57:bc:5e:ea:4d:7d:78:c6:fe:80:97:d4:
                    56:de:95:8f:73:f1:79:73:1f:b7:d2:2a:62:c1:2d:
                    83:17:8e:fe:76:e3:86:5e:8a:cb:e8:f4:0d:e3:54:
                    71:76:d3:c5:f7:c3:58:47:65:94:ba:96:8c:6f:1e:
                    b4:b3:ee:d5:08:55:72:f4:18:9f:e6:79:fd:06:02:
                    22:04:d7:7f:55:80:51:e1:5f:c0:7a:41:75:a6:08:
                    34:32:65:57:f6:42:82:af:2c:15:23:84:40:4a:35:
                    8e:6f:e2:d5:73:94:7e:06:c5:28:6c:00:70:56:77:
                    d6:4b:bc:53:be:bd:64:70:95:2b:4f:5b:52:c6:df:
                    20:d4:4a:38:9f:32:76:92:c0:05:7a:1c:5f:22:fe:
                    dd:ea:a4:e1:8a:89:cc:06:b8:77:61:03:c4:b9:30:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BD:78:D7:4B:0F:BC:EC:85:AD:7D:DF:CA:30:76:7B:87:48:BF:DB
            X509v3 Authority Key Identifier:
                keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:74:ea:a5:10:f0:27:06:0b:f0:6d:3a:8f:c8:f9:b8:11:
         09:55:68:69:40:fd:91:ef:70:ce:0d:20:2e:21:23:44:1b:ec:
         0d:c6:5e:14:cb:ab:0f:ac:fb:fd:e0:94:0f:33:01:af:c5:e4:
         e2:19:5c:ad:29:81:84:06:a1:7c:ea:0a:02:fd:9c:7d:90:58:
         b1:59:ad:77:55:a1:8a:de:c0:fc:e8:70:a9:be:16:51:c8:68:
         e4:10:42:4f:9c:c9:8d:9a:54:a2:c7:17:8f:8c:6f:9e:4f:02:
         16:b1:53:c9:ed:d6:09:72:e5:f6:c0:3c:45:e4:aa:d7:75:77:
         9b:b6:5c:9a:d0:ec:04:7a:e2:36:a6:b4:81:94:f8:2a:48:f3:
         df:fd:f1:82:55:6f:d4:ac:b1:7e:ea:75:39:12:7d:62:62:3b:
         c5:20:4e:9d:14:88:b5:26:c2:68:cc:e3:96:33:e7:ea:21:a9:
         da:7d:34:16:5e:78:00:7d:86:19:51:63:9f:ad:80:74:dd:5e:
         1e:1a:b1:97:b1:1a:8a:ee:f7:6c:1f:7d:d7:8a:52:e7:df:1c:
         55:89:07:3c:ec:ec:4c:10:e9:08:35:e7:a1:ec:7b:2e:be:5c:
         dc:81:0c:13:c7:0c:84:b8:fa:1f:ca:13:37:be:b7:8e:d0:60:
         96:8d:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:24 2025 by rpki-client