Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File:                     QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier:          ICN7cIKb1bvP8Sv1vKDTymM9lvSFuXnMp+3vkK6SdaA=
Subject key identifier:   71:7E:F4:45:97:99:54:07:5A:65:E2:57:9C:0B:CA:57:0D:DD:63:A9
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer:       /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number:          53
Signing time:             Thu 19 Jun 2025 06:36:00 +0000
Manifest this update:     Thu 19 Jun 2025 06:35:59 +0000
Manifest next update:     Thu 26 Jun 2025 06:35:59 +0000
Files and hashes:         1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: yh+Jjag0/c4IkzI4xIePdv2+AtLy7lPUjW/hSjUGOeg=)
                          2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: DSiGqsj/wHYJqRQngYpUalsfP9r6Z3qaSue0LX+uo6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
                          rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 06:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
        Validity
            Not Before: Jun 19 06:35:59 2025 GMT
            Not After : Jun 26 06:35:59 2025 GMT
        Subject: CN=6853afcf-4fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:28:82:a7:37:a9:a7:75:63:18:8c:c4:fc:
                    3e:a9:45:f0:4c:05:a0:05:cc:2c:f6:f1:6e:20:16:
                    b5:f2:10:d5:77:91:9d:f0:52:d9:5f:2f:9b:76:a6:
                    9a:6d:69:b2:1f:b1:e6:55:25:17:0f:bc:d8:58:04:
                    d5:01:5a:59:1b:7b:cd:5d:37:7f:40:e3:c4:06:1f:
                    60:2f:8c:4a:88:b2:dc:03:82:e2:b7:ef:40:31:74:
                    a9:8f:e4:ec:ec:7c:5f:e6:cb:7a:30:56:b8:61:47:
                    2d:64:c2:86:28:22:ac:62:5e:2c:ab:98:65:25:67:
                    4b:e7:16:7a:48:64:12:1c:5f:56:d5:21:95:7a:e8:
                    6d:f0:83:1a:02:d0:41:8b:8e:4c:f3:38:bb:bc:04:
                    ef:10:1f:7d:7c:92:8b:08:46:77:02:9b:f5:d9:bc:
                    98:e9:10:1c:85:ff:e7:8b:0b:40:97:34:c8:fd:97:
                    78:bb:af:e8:b8:01:3b:0a:48:de:85:4b:ad:78:b6:
                    96:0e:ca:40:4f:df:45:dc:31:61:b2:08:0e:2d:3b:
                    99:97:c8:04:dc:d9:e7:f9:c3:49:d2:46:e4:e5:2c:
                    d4:39:6a:a4:de:af:91:42:d2:40:56:be:4b:73:22:
                    a8:51:96:5f:a2:2c:12:e0:c8:50:e6:20:49:ba:03:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7E:F4:45:97:99:54:07:5A:65:E2:57:9C:0B:CA:57:0D:DD:63:A9
            X509v3 Authority Key Identifier:
                keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:b7:85:b1:ca:62:79:c7:28:8f:e1:92:2f:44:94:dc:e5:
         85:51:4b:94:bc:92:28:51:df:04:b1:f5:77:24:ed:a1:b6:9e:
         ed:6d:9a:31:fe:0d:58:a4:ff:12:c9:89:ee:5d:06:10:e6:db:
         3b:97:2a:85:01:31:4d:59:9d:ac:dd:c7:12:5b:fb:d8:03:a2:
         d4:e5:fb:3d:0d:4f:7a:39:d9:e8:b6:02:28:8d:67:1a:d7:39:
         9e:74:32:34:2a:f2:a3:38:e5:07:f0:4b:19:02:76:f1:b3:4c:
         c4:5c:5d:01:1f:8e:f6:0f:55:98:f2:a2:bd:3e:7a:e2:ec:81:
         ae:9a:b3:af:a2:04:77:d4:e5:b0:da:f1:f0:1c:82:29:2f:8d:
         b9:03:d6:3e:21:12:66:40:99:55:f0:53:cc:ee:78:07:0b:83:
         f5:ff:77:a8:3d:77:e6:c7:47:7a:70:c4:c3:ba:7a:71:68:9f:
         42:9c:45:09:69:f8:9e:50:12:dd:89:90:83:13:05:f7:a1:bf:
         ac:05:04:c9:57:b2:9f:83:a4:2a:e6:94:0e:29:c6:b5:b8:e2:
         8a:e0:f1:d5:c5:a5:36:38:e7:18:2c:7c:52:34:d1:d0:e0:45:
         8b:ad:1c:05:a3:c8:4c:49:30:80:c2:4e:58:4c:26:8c:fd:74:
         b6:ad:67:50
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NjMxRjExMC8GA1UEBRMoNDAzQkI3QjkxOEY5MTU0QUQ4MkMyQUQzNUFFRkMwQUJF
OEQwNkFERTAeFw0yNTA2MTkwNjM1NTlaFw0yNTA2MjYwNjM1NTlaMBgxFjAUBgNV
BAMTDTY4NTNhZmNmLTRmY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyyCiCpzepp3VjGIzE/D6pRfBMBaAFzCz28W4gFrXyENV3kZ3wUtlfL5t2pppt
abIfseZVJRcPvNhYBNUBWlkbe81dN39A48QGH2AvjEqIstwDguK370AxdKmP5Ozs
fF/my3owVrhhRy1kwoYoIqxiXiyrmGUlZ0vnFnpIZBIcX1bVIZV66G3wgxoC0EGL
jkzzOLu8BO8QH318kosIRncCm/XZvJjpEByF/+eLC0CXNMj9l3i7r+i4ATsKSN6F
S614tpYOykBP30XcMWGyCA4tO5mXyATc2ef5w0nSRuTlLNQ5aqTer5FC0kBWvktz
IqhRll+iLBLgyFDmIEm6A9CtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcX70RZeZ
VAdaZeJXnAvKVw3dY6kwHwYDVR0jBBgwFoAUQDu3uRj5FUrYLCrTWu/Aq+jQat4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzFGLzdCM0YwQjFDQ0Yx
QzExRUY4MTk0N0Y4NUM0RjlBRTAyL1FEdTN1Umo1RlVyWUxDclRXdV9BcS1qUWF0
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUUR1M3VSajVGVXJZTENyVFd1X0FxLWpRYXQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
MzFGLzdCM0YwQjFDQ0YxQzExRUY4MTk0N0Y4NUM0RjlBRTAyL1FEdTN1Umo1RlVy
WUxDclRXdV9BcS1qUWF0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJXst4WxymJ5xyiP4ZIvRJTc5YVRS5S8kihR3wSx9Xck7aG2nu1tmjH+
DVik/xLJie5dBhDm2zuXKoUBMU1ZnazdxxJb+9gDotTl+z0NT3o52ei2AiiNZxrX
OZ50MjQq8qM45QfwSxkCdvGzTMRcXQEfjvYPVZjyor0+euLsga6as6+iBHfU5bDa
8fAcgikvjbkD1j4hEmZAmVXwU8zueAcLg/X/d6g9d+bHR3pwxMO6enFon0KcRQlp
+J5QEt2JkIMTBfehv6wFBMlXsp+DpCrmlA4pxrW44org8dXFpTY45xgsfFI00dDg
RYutHAWjyExJMIDCTlhMJoz9dLatZ1A=
-----END CERTIFICATE-----
Generated at Fri Jun 20 16:51:04 2025 by rpki-client