Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
File:                     1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json)
Hash identifier:          n7x0FgVAg8lJzsBiHRVRoXTXDN3iQeoL5YpwWxWhpes=
Subject key identifier:   F2:0F:8B:01:5D:0D:B6:17:41:FF:F9:3A:E2:1F:91:ED:A1:AA:7F:67
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Certificate issuer:       /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial:       086C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
Manifest number:          0866
Signing time:             Sat 14 Jun 2025 20:29:02 +0000
Manifest this update:     Sat 14 Jun 2025 20:29:01 +0000
Manifest next update:     Sat 21 Jun 2025 20:29:01 +0000
Files and hashes:         1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: D+hlHJcqSGITnq7J1DAb2DeoBV9ohN8rbar9jqCZlmo=)
                          2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: tIeSqHeCHUuOJ39Gd9YUOSN/PIr6jNAJWJM2EB0gZPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
                          rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
        Validity
            Not Before: Jun 14 20:29:01 2025 GMT
            Not After : Jun 21 20:29:01 2025 GMT
        Subject: CN=684ddb8e-74eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:8d:e9:37:68:4f:ba:6b:c4:f2:ad:7b:f2:
                    22:4d:8c:6f:04:2b:b7:a2:9e:1b:8a:4f:b0:ef:7e:
                    22:38:94:e4:09:42:21:b9:25:12:a9:36:cd:73:43:
                    83:c4:51:36:f6:bf:ad:b5:a9:ba:11:a6:47:2f:d3:
                    15:02:7a:79:60:c0:0e:5b:5e:3f:91:19:c0:cd:31:
                    64:3b:6a:1d:2e:96:a3:d6:b2:04:a8:bc:b1:b9:b1:
                    f0:80:a8:18:0a:bb:0e:98:07:c1:3e:55:d4:c6:70:
                    70:10:5b:17:37:44:d6:30:02:5c:31:4c:b9:39:34:
                    63:1f:9e:f3:be:64:a2:0a:a7:94:0c:92:aa:b7:c0:
                    ad:a3:ed:fc:32:d6:97:39:52:68:07:5e:01:a2:8f:
                    d8:b7:40:5b:5a:c9:69:e6:b9:08:29:c6:98:59:da:
                    e0:b6:26:71:c2:95:af:36:6b:c6:43:0d:0a:89:fd:
                    9b:c2:b1:63:04:69:98:b8:0d:15:cc:22:6e:50:b1:
                    23:e5:7a:d1:3e:d2:90:c4:fa:e3:49:6f:8a:d5:21:
                    91:c0:40:ff:54:e6:94:5a:ed:1a:dd:4d:ca:20:e6:
                    a5:b6:56:6b:08:a5:09:9c:a7:d3:5e:f1:18:e5:9e:
                    b4:99:da:63:11:53:08:3e:63:58:fa:12:0a:d1:4b:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0F:8B:01:5D:0D:B6:17:41:FF:F9:3A:E2:1F:91:ED:A1:AA:7F:67
            X509v3 Authority Key Identifier:
                keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:15:e4:69:9c:4a:ef:be:dc:af:8c:53:b7:6f:e7:7a:da:70:
         ba:10:54:82:22:e3:c3:9a:b9:1e:72:78:eb:c9:1b:53:62:5f:
         20:3a:3b:3f:8e:9c:f6:73:9e:72:61:fb:dd:3d:f4:50:1c:82:
         a3:b4:06:f7:06:bb:e3:d0:52:cf:61:cb:f9:25:67:cc:5b:89:
         58:81:77:0c:8e:65:26:b6:ea:a0:59:c5:71:cd:ea:dd:f6:47:
         6c:00:db:03:ce:12:fc:40:7d:20:76:6c:71:98:6e:26:59:c5:
         c7:70:a7:66:1e:7b:15:ce:2e:2c:e9:7a:f7:56:0d:37:10:cb:
         d3:9c:2c:69:39:a6:08:3e:3c:80:6a:9a:19:35:e4:17:35:7b:
         0f:2b:8f:7d:1a:98:ad:48:6a:fc:f0:d0:8b:5a:c2:ce:8d:1f:
         d7:a0:7b:1c:55:7a:49:5f:36:71:5b:e2:aa:25:23:a1:f7:b1:
         36:b9:e4:16:e5:bb:2c:2a:23:d7:55:3b:90:d8:73:84:1b:39:
         e3:f0:c3:01:10:de:92:84:77:e4:15:41:58:7c:fc:64:df:09:
         0a:2e:7f:c5:6d:34:35:6f:c8:ac:ed:17:c5:4e:1b:c9:cf:a7:
         00:a9:72:20:52:2c:c1:c9:40:96:2e:37:36:1e:e7:b1:57:72:
         1d:1f:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:40:08 2025 by rpki-client