Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File:                     gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier:          hK6KKWvpKZt/CqLTXvXMxuwb57+7Kh79XPOEhh7hQTY=
Subject key identifier:   3C:B5:84:61:D7:63:E0:04:C2:BD:B9:79:1C:43:A9:2C:9E:B9:9E:F4
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer:       /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number:          69
Signing time:             Mon 09 Jun 2025 05:58:50 +0000
Manifest this update:     Mon 09 Jun 2025 05:58:49 +0000
Manifest next update:     Mon 16 Jun 2025 05:58:49 +0000
Files and hashes:         1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: 8wguyytaU5EtAr/Qubws9/KGHxhKjvEqBdUpHg62Ao8=)
                          2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: C8NuyzBs3UmSDZIg9iKH9kFYPl+i5KIJP5qS3W6HBKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 05:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
        Validity
            Not Before: Jun  9 05:58:49 2025 GMT
            Not After : Jun 16 05:58:49 2025 GMT
        Subject: CN=68467819-1803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:c6:98:17:33:10:0d:de:14:fa:1b:67:ae:
                    76:e9:9d:a4:a6:c9:21:b8:95:1f:70:6a:36:15:68:
                    01:d8:3a:be:48:c3:ea:76:14:88:ae:c4:2b:97:7c:
                    a1:d1:fa:12:3c:b9:54:39:33:f8:04:1c:a1:02:5e:
                    d9:99:65:ac:5b:22:b4:c0:c6:60:f9:27:99:0d:31:
                    84:d5:16:e6:20:ca:f4:91:8f:94:c3:a5:e4:3b:c3:
                    0f:69:74:0c:a9:2c:a9:c2:85:52:c5:f2:54:26:98:
                    ee:81:e3:ca:47:80:b3:52:f0:27:dc:8f:a7:5f:33:
                    6a:c4:ab:6f:16:94:8d:e9:89:0d:2c:b4:e0:d1:34:
                    0c:bd:bb:2b:9a:19:22:41:aa:f4:b4:f7:9a:9b:33:
                    fc:55:d9:20:4e:eb:bb:68:74:e8:03:00:aa:9c:55:
                    b7:d1:96:84:64:49:89:ee:6c:0e:a7:3c:ed:80:8c:
                    c4:08:5d:ad:88:a9:1a:4f:9c:30:71:13:b4:3e:fa:
                    c4:05:c6:a3:92:b6:b2:c6:85:28:63:6e:a1:38:5a:
                    a4:eb:c9:26:2e:84:fd:74:8c:d0:2f:bb:5d:94:9a:
                    03:f4:25:66:99:b8:da:8d:0f:5d:b3:8b:dd:5d:40:
                    5f:6a:8f:eb:a4:29:6d:59:0a:52:b0:41:bd:46:84:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B5:84:61:D7:63:E0:04:C2:BD:B9:79:1C:43:A9:2C:9E:B9:9E:F4
            X509v3 Authority Key Identifier:
                keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:45:26:01:cd:11:14:e6:f6:77:01:89:d5:7a:4a:57:00:
         15:4d:9b:45:b5:3b:c1:49:e9:56:68:ec:57:ba:d4:46:97:6c:
         18:82:3e:cd:75:75:70:c5:64:5c:38:df:2e:ba:9f:86:ff:00:
         93:43:b7:24:bd:4c:78:c1:07:db:3a:0c:00:b9:1f:12:ae:f4:
         f1:24:d0:90:f9:b4:f2:20:8a:46:74:59:fb:e5:7d:79:ac:fe:
         24:e1:90:0c:33:59:2f:03:bb:84:91:2b:41:e4:65:f2:ab:7f:
         b6:0d:fe:6e:c6:38:44:3b:72:fc:71:40:b9:f8:c7:af:d5:b8:
         cd:0e:23:f4:c0:40:bd:3a:a2:f6:77:73:4d:27:41:68:6f:94:
         71:14:ee:7c:8f:8b:25:9d:72:a4:94:19:54:26:e4:19:3b:3c:
         ac:34:6e:30:e6:55:24:87:56:c7:4d:82:e3:ad:b5:f2:72:aa:
         57:3b:b5:a6:16:ec:09:9c:25:84:11:00:29:06:07:49:8e:b6:
         b9:3e:e3:bc:bd:bf:d3:b6:91:39:bd:b3:3e:53:e7:e5:54:1a:
         7a:ec:5d:47:1d:e8:18:e0:b8:4e:7a:fa:10:65:88:91:27:84:
         6b:5b:ae:7e:32:56:8b:a6:4c:43:3f:ff:19:d9:28:74:6f:72:
         53:64:83:95
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MjFBRTExMC8GA1UEBRMoODJBNzY5REQ3NDZDODMxRjRDNERCMjlENkE2NURFMDhE
NkFEOTVFRDAeFw0yNTA2MDkwNTU4NDlaFw0yNTA2MTYwNTU4NDlaMBgxFjAUBgNV
BAMTDTY4NDY3ODE5LTE4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnhMaYFzMQDd4U+htnrnbpnaSmySG4lR9wajYVaAHYOr5Iw+p2FIiuxCuXfKHR
+hI8uVQ5M/gEHKECXtmZZaxbIrTAxmD5J5kNMYTVFuYgyvSRj5TDpeQ7ww9pdAyp
LKnChVLF8lQmmO6B48pHgLNS8Cfcj6dfM2rEq28WlI3piQ0stODRNAy9uyuaGSJB
qvS095qbM/xV2SBO67todOgDAKqcVbfRloRkSYnubA6nPO2AjMQIXa2IqRpPnDBx
E7Q++sQFxqOStrLGhShjbqE4WqTrySYuhP10jNAvu12UmgP0JWaZuNqND12zi91d
QF9qj+ukKW1ZClKwQb1GhOO9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPLWEYddj
4ATCvbl5HEOpLJ65nvQwHwYDVR0jBBgwFoAUgqdp3XRsgx9MTbKdamXeCNatle0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzc0OTEyQjJDQUM3
MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxl
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ3FkcDNYUnNneDlNVGJLZGFtWGVDTmF0bGUwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
MUFFLzc0OTEyQjJDQUM3MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5
TVRiS2RhbVhlQ05hdGxlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADZtRSYBzREU5vZ3AYnVekpXABVNm0W1O8FJ6VZo7Fe61EaXbBiCPs11
dXDFZFw43y66n4b/AJNDtyS9THjBB9s6DAC5HxKu9PEk0JD5tPIgikZ0WfvlfXms
/iThkAwzWS8Du4SRK0HkZfKrf7YN/m7GOEQ7cvxxQLn4x6/VuM0OI/TAQL06ovZ3
c00nQWhvlHEU7nyPiyWdcqSUGVQm5Bk7PKw0bjDmVSSHVsdNguOttfJyqlc7taYW
7AmcJYQRACkGB0mOtrk+47y9v9O2kTm9sz5T5+VUGnrsXUcd6BjguE56+hBliJEn
hGtbrn4yVoumTEM//xnZKHRvclNkg5U=
-----END CERTIFICATE-----
Generated at Tue Jun 10 07:58:08 2025 by rpki-client