Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          Zd1BtMllnARuA4l1gf63BOMBvSZrXpnh3krRqFA41Us=
Subject key identifier:   4B:61:1E:66:04:22:8C:9F:A1:92:DE:7C:D1:A7:20:72:79:49:50:DA
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          58
Signing time:             Sat 31 May 2025 06:46:36 +0000
Manifest this update:     Sat 31 May 2025 06:46:36 +0000
Manifest next update:     Sat 07 Jun 2025 06:46:36 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: 8YHGGaX352BcSNlqBlYuRyWMbQU1NzKMb+bhb4JDwWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: May 31 06:46:36 2025 GMT
            Not After : Jun  7 06:46:36 2025 GMT
        Subject: CN=683aa5cc-8611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:8a:d5:93:24:0b:ce:d0:a2:c8:51:a9:0a:
                    cf:e2:ec:6d:1c:2d:7e:18:87:2d:c4:82:7c:05:b8:
                    98:ed:46:4d:53:76:17:1a:6f:b7:bc:13:5c:a1:64:
                    cd:1a:a7:a1:c6:d5:8c:7c:9e:7c:cd:15:36:1b:c3:
                    d6:b1:75:e8:1e:1b:a3:fc:04:46:99:f7:49:70:54:
                    58:ff:48:ee:36:64:ba:ce:2f:03:0d:af:5c:83:1a:
                    5b:5c:30:10:45:0b:70:53:c9:c8:dc:cb:65:30:c0:
                    ea:2d:1d:38:ad:66:f4:96:cf:be:b6:f0:0b:f6:31:
                    79:1d:d6:fe:e0:65:da:c4:20:74:a1:4a:f3:2a:1b:
                    e9:92:ac:2b:de:4a:e3:4f:91:3d:82:e5:e1:ae:5e:
                    3d:f7:90:20:71:e7:cf:f4:26:8c:a9:a2:01:a0:19:
                    4c:c8:15:17:2c:92:2b:ad:c6:fb:41:d9:bc:5a:0f:
                    c1:89:80:8b:7d:41:f9:de:5a:b2:29:4e:6f:5a:e4:
                    e9:b3:3e:2e:4c:8d:c1:10:7c:41:ef:df:cf:1b:96:
                    e0:b6:be:3a:61:27:bf:5e:8c:db:e7:f1:d8:d4:ac:
                    05:72:3c:59:a9:17:14:20:51:e3:47:87:ee:a4:96:
                    9e:99:0e:97:51:bf:c6:6d:25:e6:17:c7:db:26:5a:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:61:1E:66:04:22:8C:9F:A1:92:DE:7C:D1:A7:20:72:79:49:50:DA
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:de:69:ed:8e:d5:cc:2b:7f:42:f7:0f:f6:e9:05:8e:47:54:
         f8:13:10:cf:dc:e7:d2:69:dd:e3:a4:43:fb:56:0a:c4:f4:50:
         eb:60:b0:07:a2:51:8c:ae:9c:8a:e6:f4:7c:5c:63:51:bc:80:
         e2:5b:e8:fa:8b:b2:df:8d:1f:44:58:dc:eb:49:76:dc:1e:a7:
         d1:12:c3:76:10:c0:30:17:5f:8d:77:db:97:a9:84:cf:2e:ee:
         1f:f1:dd:fb:90:f8:b6:26:05:4b:73:56:ec:ce:38:96:c0:4d:
         80:a8:ff:bd:22:70:4e:86:3c:1f:e0:ef:4e:89:9b:28:85:a4:
         f4:2d:e0:8f:fc:d3:26:52:cb:aa:2b:3b:6a:76:9e:f1:41:2b:
         6a:ae:40:7a:ae:4f:63:29:97:6a:91:ba:7a:17:87:73:99:9b:
         fb:96:f1:43:e2:cb:a8:7b:86:c6:88:83:8c:d6:9f:6d:ba:d3:
         31:d8:2d:0f:33:b9:44:b1:4f:89:ae:c7:11:5b:7b:64:1e:2c:
         ef:21:07:95:b4:d3:6f:c8:15:37:8e:43:7e:e6:b0:3e:fd:94:
         d3:dd:41:2d:f9:83:90:4f:6b:76:6b:a9:7c:da:8f:8a:9b:72:
         5c:58:bc:26:19:8b:cb:53:e7:36:97:de:2a:65:a4:18:bb:b3:
         3e:48:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:04:52 2025 by rpki-client