Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File:                     q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier:          HSIgAVEIJoQvVXfHdJbZ7felZP1ZHCPYl1edmc5PBxM=
Subject key identifier:   8D:34:ED:3E:8F:36:44:CB:4C:4D:D0:8A:EB:96:BA:71:09:22:9B:93
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer:       /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial:       0A9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number:          0A12
Signing time:             Thu 12 Jun 2025 19:49:39 +0000
Manifest this update:     Thu 12 Jun 2025 19:49:39 +0000
Manifest next update:     Thu 19 Jun 2025 19:49:39 +0000
Files and hashes:         1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: k/7HrwnZTV+pZ5VWR+H2fDCPlPMWmRve0to2OzoLYZA=)
                          2: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: FB2huuZ/tiCR/IS/ucieD51OLCSYw6eG3ZIKY9r9AjQ=)
                          3: 690F19C87A0111ECA0BAAA6AC4F9AE02.roa (hash: lu63+cwqSrIKv2ZVnfH2yEez/5BkMz6uH5nrUh7uTnc=)
                          4: C09E796C50EB11EB86E24A3DC4F9AE02.roa (hash: UQMFUiM1jX1o70DBy2Eb/ReLKfgNQRjP4wwuSyVg/Io=)
                          5: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ytc9ndn0dlR+m8jI9GCXZzm6gP/TjFiRbPEGnx2/DEc=)
                          6: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 19:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2717 (0xa9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
        Validity
            Not Before: Jun 12 19:49:39 2025 GMT
            Not After : Jun 19 19:49:39 2025 GMT
        Subject: CN=684b2f53-131f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:03:16:04:bb:a3:8f:8a:76:b3:84:6f:11:
                    c3:dd:99:e0:65:3f:ea:ef:5a:d8:ee:d7:bb:a5:80:
                    ac:91:99:67:2b:67:05:c2:e4:c2:39:c4:83:9b:d2:
                    b1:15:97:34:a2:a4:32:7a:d8:1e:a6:59:a9:5c:7a:
                    db:52:18:df:02:b0:68:64:16:a7:b8:2c:06:86:cd:
                    b7:72:07:a5:cd:39:23:47:d0:10:1c:e3:e4:20:4f:
                    48:96:ea:68:39:6c:18:af:e4:f4:a7:b4:bc:63:77:
                    a5:5b:a8:20:15:25:06:9e:e0:fb:59:c3:19:1a:54:
                    cb:7e:4b:ae:74:dd:23:91:f9:f8:c2:56:17:47:a5:
                    da:27:77:d0:d6:f2:9a:3a:4f:2a:34:1a:a8:9a:92:
                    c2:af:8d:dc:f8:9b:04:67:e2:14:7a:63:cc:03:f2:
                    b0:c7:43:72:6a:69:7e:90:ef:b6:a8:d7:91:05:ac:
                    e7:03:d6:b3:2c:10:2c:9b:49:cf:49:a1:3b:08:46:
                    9c:4b:bf:56:8c:be:60:77:e4:8e:28:aa:fa:13:e9:
                    01:86:74:bf:70:1b:76:e0:0e:40:26:e4:42:37:30:
                    c9:67:f8:18:63:69:6a:73:fb:24:4b:d3:27:6d:6e:
                    cd:75:3a:2e:91:89:7c:73:9e:2e:14:99:d7:61:6a:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:ED:3E:8F:36:44:CB:4C:4D:D0:8A:EB:96:BA:71:09:22:9B:93
            X509v3 Authority Key Identifier:
                keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:c0:2b:cc:7e:4d:ae:04:fd:df:a8:e2:6c:7b:bb:44:3c:
         f6:e4:bb:7d:a2:85:10:e0:2b:a5:2d:03:91:ae:8b:59:fb:8f:
         a0:35:10:9b:80:2e:f6:74:c2:67:2e:e9:72:94:3d:23:81:71:
         00:fa:a2:8f:ee:94:73:bb:f0:ed:cd:bc:0b:ac:16:40:97:73:
         9a:33:1f:57:e1:23:74:a4:af:6d:ce:c7:90:2e:d3:17:92:e5:
         f9:53:68:b2:27:74:ee:02:85:74:a5:a6:8d:cb:ce:ab:eb:b2:
         95:34:83:39:be:43:f0:dc:87:45:b3:e6:2c:0a:56:03:bd:9d:
         f4:1f:2e:0b:a2:34:b7:aa:91:52:56:c8:bc:e6:19:d2:cb:ad:
         f1:63:6e:a9:f7:b7:14:13:c1:1c:40:27:d3:30:f2:47:eb:b9:
         9d:0a:db:4d:1c:75:93:05:76:c4:5e:dc:7b:9c:6c:f1:32:87:
         8b:14:e0:ac:63:70:e0:98:05:6a:2c:c8:81:41:f6:18:03:53:
         4e:a8:81:c3:e7:d6:c7:83:0e:ae:5d:bd:64:57:82:fd:cf:5a:
         b8:45:c4:4b:52:02:e5:42:71:df:f8:10:34:f2:20:61:cd:8d:
         f9:2c:2c:b7:90:5d:89:9d:d3:ee:d9:2d:1d:48:64:80:ac:23:
         d8:1b:9b:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4
RThDRUI3NUYwHhcNMjUwNjEyMTk0OTM5WhcNMjUwNjE5MTk0OTM5WjAYMRYwFAYD
VQQDEw02ODRiMmY1My0xMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTgDFgS7o4+KdrOEbxHD3ZngZT/q71rY7te7pYCskZlnK2cFwuTCOcSDm9Kx
FZc0oqQyetgeplmpXHrbUhjfArBoZBanuCwGhs23cgelzTkjR9AQHOPkIE9Ilupo
OWwYr+T0p7S8Y3elW6ggFSUGnuD7WcMZGlTLfkuudN0jkfn4wlYXR6XaJ3fQ1vKa
Ok8qNBqompLCr43c+JsEZ+IUemPMA/Kwx0Nyaml+kO+2qNeRBaznA9azLBAsm0nP
SaE7CEacS79WjL5gd+SOKKr6E+kBhnS/cBt24A5AJuRCNzDJZ/gYY2lqc/skS9Mn
bW7NdToukYl8c54uFJnXYWqVdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI007T6P
NkTLTE3QiuuWunEJIpuTMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4
MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkIxRS84OTM2Q0MwNDg4MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5
ZHUtTk5iZ2hMNE9Pak90MTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+YsArzH5NrgT936jibHu7RDz25Lt9ooUQ4CulLQORrotZ+4+gNRCb
gC72dMJnLulylD0jgXEA+qKP7pRzu/DtzbwLrBZAl3OaMx9X4SN0pK9tzseQLtMX
kuX5U2iyJ3TuAoV0paaNy86r67KVNIM5vkPw3IdFs+YsClYDvZ30Hy4LojS3qpFS
Vsi85hnSy63xY26p97cUE8EcQCfTMPJH67mdCttNHHWTBXbEXtx7nGzxMoeLFOCs
Y3DgmAVqLMiBQfYYA1NOqIHD59bHgw6uXb1kV4L9z1q4RcRLUgLlQnHf+BA08iBh
zY35LCy3kF2JndPu2S0dSGSArCPYG5vu
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:30:52 2025 by rpki-client