Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
File:                     nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json)
Hash identifier:          bKus/dT8iU1fHOrg41VtFCJzjk4ETl8anMiGpRbT1FQ=
Subject key identifier:   12:30:1D:AE:4C:B1:D8:0B:45:EC:06:06:27:25:0B:DB:AF:45:DE:C4
Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
Certificate issuer:       /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Certificate serial:       09AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
Manifest number:          09A0
Signing time:             Tue 10 Jun 2025 19:59:00 +0000
Manifest this update:     Tue 10 Jun 2025 19:58:59 +0000
Manifest next update:     Tue 17 Jun 2025 19:58:59 +0000
Files and hashes:         1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: 8yQ1BSQTOcOf+CLuF6hcM+xwgmHATvBrPHBqblhHnts=)
                          2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: mjCI51z49d/ZR6NIO/Fc5BsNeBRLESAiodQLOKBux1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 19:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2475 (0x9ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
        Validity
            Not Before: Jun 10 19:58:59 2025 GMT
            Not After : Jun 17 19:58:59 2025 GMT
        Subject: CN=68488e84-cd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:12:49:05:48:a8:79:0e:90:e1:e3:95:96:
                    32:be:bc:25:0b:d9:d1:b2:e4:97:6a:3e:c4:f3:dc:
                    4e:72:4c:15:c9:fb:f2:56:f8:07:b5:c6:fb:e0:c5:
                    2f:05:32:34:3d:d0:92:22:5f:3d:68:3e:bf:18:10:
                    82:60:2f:3c:f4:11:36:b1:59:6d:57:70:f4:6e:27:
                    d8:5b:1b:eb:e6:78:72:df:b6:b4:5f:13:3f:53:39:
                    36:4b:7e:d5:27:f4:25:b9:78:23:e3:3c:86:90:ee:
                    5e:cf:69:57:20:04:ee:32:71:3d:c0:00:b2:36:37:
                    3e:a1:1a:99:ec:8c:99:bb:41:fb:d5:fb:db:62:c3:
                    d5:67:81:61:86:fc:0e:14:31:1d:9b:ee:ba:0c:7a:
                    73:60:b3:41:6f:69:14:74:67:31:ab:ff:f1:20:5a:
                    18:42:74:e1:23:e3:66:a3:44:30:37:c2:48:81:d1:
                    98:ff:c7:06:74:d0:56:99:f1:b3:c6:af:76:04:b1:
                    c7:76:fa:8f:f6:69:82:63:16:21:c8:b2:24:66:7d:
                    84:3d:80:c9:70:00:4b:8e:c6:b0:e2:21:49:96:3c:
                    f0:78:ae:b5:3e:68:4b:fa:a4:30:86:5d:14:e7:6d:
                    4b:7c:63:6a:d4:ff:a4:ef:c3:bf:bf:5f:af:bf:60:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:30:1D:AE:4C:B1:D8:0B:45:EC:06:06:27:25:0B:DB:AF:45:DE:C4
            X509v3 Authority Key Identifier:
                keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:dd:a8:72:ef:55:c1:a8:7f:f8:e0:68:c8:16:f0:d7:43:
         79:1a:e9:03:dc:ad:a2:3c:96:f5:e7:77:aa:e5:22:42:9c:4e:
         9f:a7:b6:9a:da:82:ac:68:5f:20:6c:08:d4:ac:d7:f1:3c:44:
         74:ab:97:25:7e:e8:7f:78:0e:7b:ba:4d:7d:83:5d:6f:ad:e3:
         e7:53:1d:39:c1:03:59:78:b8:c5:9d:ba:62:ab:e3:3b:f2:b1:
         95:32:50:c2:11:e7:08:ee:26:64:ca:60:b8:15:77:cd:21:db:
         0d:af:55:85:f4:6f:f0:1b:d1:c8:73:c9:27:46:77:b6:73:8d:
         83:4d:68:30:28:75:8c:86:82:bc:d2:74:2b:40:2a:20:2a:0d:
         6d:1e:2d:f7:df:b3:ed:85:dc:1a:6f:a0:44:f5:ad:a7:8e:55:
         ba:02:89:eb:95:fb:7c:66:8f:8f:7a:a5:6e:de:11:43:cf:1e:
         95:3a:23:53:1c:74:4f:80:cc:7f:60:12:d7:28:28:7b:d0:ec:
         62:52:94:14:b8:49:ed:d9:23:16:25:ba:75:de:99:af:88:d7:
         d5:34:9d:d9:2f:cb:44:a7:6b:d7:9b:78:a3:3d:d2:f6:da:f8:
         fd:53:e8:0a:44:27:71:1b:2f:77:a0:80:6a:91:3e:df:63:e3:
         3f:9b:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:05:05 2025 by rpki-client