Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          PWDtGFCjaYvFMdLLNUbD9Wsk96/xLxKUfo4xrvza2CY=
Subject key identifier:   A8:5E:B7:F9:48:FB:A6:E7:12:77:35:F6:AD:7B:9B:B8:95:5D:2C:50
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       0502
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0C56
Signing time:             Sat 31 May 2025 21:37:00 +0000
Manifest this update:     Sat 31 May 2025 21:36:59 +0000
Manifest next update:     Sat 07 Jun 2025 21:36:59 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: ZJek601OymvtO7Lum+dyQ4PNXRrPVt0Hcf9Zrwi05R0=)
                          2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: 1xVLNQlNrVwrhPb266jUjImDeI1JBJLkEMDQeKUBnFI=)
                          3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: c9XW6vjr9ZRxN55xmeXFihDxkfyhr1D0e4wxYGC5e+I=)
                          4: A291634816B711ECBD752D47C4F9AE02.roa (hash: Ctq7IqjnfC2JklzmQsi0+l8pKomLg5k/LbwaF/nwW84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 21:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: May 31 21:36:59 2025 GMT
            Not After : Jun  7 21:36:59 2025 GMT
        Subject: CN=683b767c-6c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:20:6f:4b:a3:b4:9c:ff:f3:43:06:1b:a2:ee:
                    29:3b:70:b1:31:49:30:39:5b:2f:64:25:a5:8d:a3:
                    50:da:ab:68:b2:de:64:b3:66:8d:a3:3c:e3:86:04:
                    3c:ea:37:2a:10:92:5a:b6:b5:ee:3c:c2:a6:6c:13:
                    23:05:bc:97:e8:06:19:1f:49:21:8d:23:85:22:04:
                    bf:23:37:ec:d1:74:3c:ab:2c:14:53:ab:90:26:c6:
                    8a:6b:39:3b:95:81:55:c9:af:5a:de:9a:e5:0a:f1:
                    3f:45:5c:13:b9:6a:fe:2b:26:eb:81:0c:0c:9e:cb:
                    9c:82:e7:bf:fa:d5:fe:9d:7d:15:48:a5:7b:63:1d:
                    cf:82:bd:be:91:e2:7d:a2:ab:0d:cc:78:26:fd:ae:
                    3e:ab:41:00:da:84:cf:af:7c:72:38:0b:bc:c0:28:
                    c8:d4:f1:99:d1:61:a9:de:1a:ee:d7:cf:2a:d1:85:
                    21:b9:0e:2f:70:62:97:5b:d1:b4:f6:89:86:8b:73:
                    39:f6:a6:e1:39:fc:ce:11:ba:61:c5:8b:8a:29:dc:
                    94:0c:d6:e2:b5:d7:04:97:bd:dd:e7:57:22:64:14:
                    56:f7:7c:40:29:53:6e:ef:57:b9:6e:3e:12:c4:b0:
                    79:f3:70:7e:0e:3f:e1:25:fc:ba:b9:cc:aa:9b:f8:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5E:B7:F9:48:FB:A6:E7:12:77:35:F6:AD:7B:9B:B8:95:5D:2C:50
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:68:c8:83:7e:23:55:27:30:fb:81:02:9f:c3:92:57:98:7b:
         ff:7b:02:e5:c1:8b:77:42:66:b7:ad:68:54:2b:4f:bc:73:43:
         df:61:4f:fe:51:e2:e2:56:37:e4:f6:52:c0:f2:ca:92:77:f3:
         aa:2d:3a:c3:7f:1c:2e:31:00:80:06:df:65:45:25:8f:03:2f:
         70:30:71:fd:98:ef:35:6d:22:5e:67:1f:4b:04:54:c7:b1:d5:
         3a:93:1a:eb:2e:ec:46:28:7c:ea:3c:75:31:1f:fe:5f:1a:cb:
         03:a2:d6:2b:53:77:47:84:46:e4:96:7d:33:91:9a:cf:35:a0:
         9a:6e:ec:44:c1:24:9c:33:29:3f:ec:e3:ba:5c:6e:5e:51:1a:
         93:b1:17:30:a5:3f:3a:ad:e1:9b:6d:7f:46:a4:c0:fe:de:73:
         ab:6d:be:ac:96:5c:40:55:93:24:24:3a:22:0f:db:61:d0:56:
         eb:26:a8:35:d1:c4:a8:64:a0:38:17:98:9f:f9:aa:b3:b5:eb:
         8b:ae:c5:96:aa:d6:b8:9c:9e:b6:7d:94:4d:88:b1:5f:79:45:
         33:83:74:15:42:17:09:87:7b:01:b9:91:cf:76:5b:d9:57:e8:
         17:61:ba:73:23:65:97:73:16:ff:70:15:9c:af:01:7f:7b:93:
         02:14:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:48:54 2025 by rpki-client