Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File:                     QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier:          FwsRziCKJuGEU0xHwaSLLh/XnIaoKZgHs7X1m3AQvec=
Subject key identifier:   67:BF:28:E1:95:F2:9F:CA:93:74:3F:64:60:E7:50:EA:3B:68:01:48
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer:       /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial:       062D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number:          062D
Signing time:             Thu 24 Jul 2025 23:03:33 +0000
Manifest this update:     Thu 24 Jul 2025 23:03:32 +0000
Manifest next update:     Thu 31 Jul 2025 23:03:32 +0000
Files and hashes:         1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: rm6+fBZ83zf1VIrAEmgh2OrOYcZv0Qkh/UxHImjTbZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 23:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
        Validity
            Not Before: Jul 24 23:03:32 2025 GMT
            Not After : Jul 31 23:03:32 2025 GMT
        Subject: CN=6882bbc5-33d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:7f:dc:08:ff:1a:69:8f:17:08:89:8e:66:
                    f3:c2:9c:08:41:dc:4e:60:ed:b2:d4:4d:ca:be:b5:
                    26:7d:22:56:00:08:57:27:ab:c1:ef:b6:00:c2:c0:
                    11:fe:ed:0b:d6:d1:c2:db:0e:58:bc:e0:6e:28:b8:
                    52:a9:a4:a9:d7:00:41:71:d4:e8:ca:23:f2:f9:26:
                    26:36:86:60:fd:dc:e7:4a:e1:0c:5c:fd:93:50:3f:
                    78:19:8e:0b:e1:c0:1c:ac:ae:18:37:a3:1a:f2:76:
                    9b:b4:cd:0c:5a:36:c5:ff:2f:9b:bf:ef:3e:29:f9:
                    cf:a1:64:38:6b:0b:5c:43:4a:5b:59:51:33:0b:5b:
                    53:22:92:ab:22:fe:2c:f0:41:8b:64:6d:c0:b9:b6:
                    25:5c:67:5f:03:b0:e7:48:51:e9:53:63:11:e0:88:
                    39:8d:63:0d:3d:14:72:b6:16:aa:5e:b1:6b:ef:e4:
                    a0:77:21:4a:7a:1b:bf:c4:6f:e2:02:00:54:75:06:
                    38:24:0b:04:70:5d:8a:4f:84:c5:a4:96:8e:8e:12:
                    0d:ea:d6:a3:12:50:15:a7:76:6e:4d:2d:0a:6f:bd:
                    4e:06:d3:06:06:df:54:7e:f7:5d:49:29:5b:8b:53:
                    da:a5:9a:d2:0d:6c:98:81:82:c9:9e:0b:3f:d0:02:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BF:28:E1:95:F2:9F:CA:93:74:3F:64:60:E7:50:EA:3B:68:01:48
            X509v3 Authority Key Identifier:
                keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:29:cf:74:75:30:57:4d:d2:a7:d8:5a:6c:49:0d:e9:78:b2:
         40:6f:e2:46:c8:0e:e0:3c:e3:67:cd:0e:14:9d:a5:d4:fa:db:
         74:54:ef:85:e5:b2:47:5d:2c:cd:d7:2b:13:be:24:2f:77:17:
         63:a0:b2:7d:3c:db:1e:0c:25:15:95:94:ff:00:37:f2:71:91:
         78:a2:0a:cc:0f:d8:3c:7d:21:94:0d:12:d8:ff:e6:7a:93:3d:
         04:4c:25:b4:72:2b:c2:c4:6c:8d:bb:0d:a4:78:6e:19:cf:6b:
         d9:0e:f1:23:71:ec:60:f6:4e:13:39:1f:e8:ff:13:cd:5d:51:
         58:60:83:d4:a7:ca:e5:f0:e6:d3:24:7f:7d:62:b4:aa:8b:f8:
         e5:d8:39:05:a1:2d:fc:5d:7b:58:74:7a:ff:92:db:ff:e7:6e:
         af:3e:ed:c2:09:60:f7:46:86:10:0f:e7:36:19:ce:7a:e4:d3:
         e4:a4:aa:a6:f5:0b:17:94:37:c0:84:6d:17:95:ec:bc:b5:fe:
         1f:af:fe:4e:2e:58:ab:f3:cb:68:11:cd:c9:2d:88:b5:ac:8f:
         d8:f7:08:56:d8:18:ce:c6:12:df:0d:a7:bd:e5:f1:b3:6b:fe:
         9e:e4:8f:80:58:d5:c3:17:fb:5f:c6:d1:87:49:af:e7:88:52:
         ce:a1:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:04:24 2025 by rpki-client