Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          s+ePULcRJ9SQ+Qld4mcvkWKnhuSn4WHFH33qM8c1BHs=
Subject key identifier:   6E:C8:71:75:BA:1A:20:FD:B8:33:4C:76:A6:08:E0:6D:90:86:83:EF
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       25E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1A26
Signing time:             Thu 24 Apr 2025 17:38:41 +0000
Manifest this update:     Thu 24 Apr 2025 17:38:41 +0000
Manifest next update:     Thu 01 May 2025 17:38:41 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: N+xpprQbz3S0s64jLU5u/ryC00s+re6jsXa5p+cDmRs=)
                          2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: B9/ZOaKJ3mY7sCCRxWSrCr6EkWxFbiFs/1gThM69MvA=)
                          3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: IhxFd8GWyvHy4QvuXOqSBd0gnR5njQJdJ+TT3XDY6Ow=)
                          4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: w54klPBWsGxsJLf7o8O4d/YfYtzij9sx4wGXmrfgKPU=)
                          5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: Pfx0RtJcLLW5ZFj5crlklO0jOVyz0bjwf3XIGvazerQ=)
                          6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: hPYWDoyVhEAFfc0fBZwx5qajT1d+KFZshP+N3pa3wbk=)
                          7: B53FD334575411ECAA094876C4F9AE02.roa (hash: 296EaDfJGmx3e6D5O8LxaSDfTjgH5YD0MQVWUb0ic6U=)
                          8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: mjR3c+t+smHjLqMf4drJmz9rxODMszK1LD6+M9LGeIY=)
                          9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: 7dbxR4gR6b4iL0edOOJstgfP/HsQqg2y54IOaM0DIP0=)
                          10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: Y2jR//Hrw7Q/ZKuGuaywqyH4sSYkPxB7WKTzQDJJ9BQ=)
                          11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: bBPQcajtfbRygLugvzoj923We+I2sql4kYKXhjN1UGc=)
                          12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: cBkg3LGcn5rgVL8BTrJzLbW/3oKuwqj01X4Fx7CuIw8=)
                          13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: WUbEEgBTBdPZdhiwH726GQ5G4iBR6E6r7k+ETLp88Ns=)
                          14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: phbymQiMHWNNzrnLfh17wazzvcgfnjQBs+kEUNXCkRg=)
                          15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: 5XY9aEQMhi/DaHdge1N42tPN5dbj/xlmiK62csHhzwM=)
                          16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: DTA7CeW7cqTZop+4UQyYEWCDfju8wSx8DHDxAzeibSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9705 (0x25e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Apr 24 17:38:41 2025 GMT
            Not After : May  1 17:38:41 2025 GMT
        Subject: CN=680a7721-9b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:0c:63:39:16:e1:c2:ab:66:6f:57:c0:23:
                    7f:c6:2d:6e:34:ed:ec:23:06:eb:e5:47:85:0e:a4:
                    51:23:a7:7c:15:01:fe:fa:61:35:e2:3d:07:5f:61:
                    2c:6a:2d:f7:0f:53:bb:bd:af:89:8b:a3:f2:85:8e:
                    e3:82:b7:21:2d:15:2a:21:f4:ed:ba:22:42:9f:30:
                    83:74:77:17:32:17:51:19:d4:84:eb:2c:11:69:81:
                    92:cf:7f:e7:95:22:89:53:52:8d:12:32:6e:af:ed:
                    9c:b8:33:b8:15:08:bb:70:be:82:29:06:0b:b9:52:
                    c6:63:d6:78:6d:b6:14:9f:94:03:1c:ff:4e:37:f6:
                    0f:a0:2b:d5:e4:60:cc:0e:4b:9f:f6:e7:10:04:eb:
                    d4:9a:79:3f:dc:9f:24:6f:ff:30:71:d5:7b:36:89:
                    50:d6:55:0f:91:37:e8:9d:65:15:e0:2c:00:05:49:
                    08:d2:ef:7c:bd:da:97:0e:b9:f8:1d:84:e5:f0:15:
                    ed:02:42:f7:24:58:ab:dd:3e:d3:14:2c:39:f4:41:
                    ef:34:95:f3:a3:3a:9e:e2:8d:78:a9:72:cc:ca:02:
                    47:f9:bf:23:71:63:79:84:fa:f7:ed:ee:1e:68:d3:
                    c4:cb:1b:e1:57:bc:71:a3:4a:00:7d:34:dd:e8:bd:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:71:75:BA:1A:20:FD:B8:33:4C:76:A6:08:E0:6D:90:86:83:EF
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:a4:c7:7b:a8:34:18:8d:a5:af:84:8c:58:7f:84:e7:c8:
         71:16:a8:fe:db:6d:17:8d:08:e0:cf:f6:3f:98:64:a9:db:d9:
         63:9f:e4:3d:af:2e:e1:57:b2:27:fd:65:36:be:42:24:a3:90:
         30:10:d1:2c:7a:21:95:42:97:e4:9c:42:6d:28:64:35:60:e2:
         30:2a:78:db:4a:8b:d2:a9:4c:c7:39:c7:85:db:e0:67:e6:f3:
         9b:c9:98:6d:24:f1:e7:9d:88:0c:0f:33:fd:24:18:8b:85:49:
         14:5c:ac:77:16:a8:e8:5d:7d:fc:0f:38:d5:72:ba:aa:22:c9:
         62:3c:7a:4c:d4:35:f8:de:be:57:f9:80:1a:e6:7e:93:2d:8c:
         a5:99:2f:36:c8:e7:cb:b6:ba:ec:98:cc:10:ec:c5:f4:9b:01:
         2a:c6:87:31:a8:d0:03:d4:ba:54:2c:fa:99:09:e0:77:38:dc:
         b6:33:c5:b6:ce:aa:76:82:ad:64:d7:c4:6d:d2:76:da:18:c3:
         ec:aa:00:14:03:a1:c0:0c:d3:2e:da:b3:9a:54:81:41:bd:36:
         67:28:7f:9c:8a:e9:7f:df:e9:2e:84:ac:9c:2c:94:dd:98:31:
         42:3f:ce:12:f9:c2:74:dc:df:e1:05:2e:9b:42:66:f3:5a:31:
         a6:dc:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:29:46 2025 by rpki-client