Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
File:                     quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json)
Hash identifier:          dgWB4ER8aZGkWZfEdVxgIya7iBMekd48XbPby785Zpk=
Subject key identifier:   70:13:6B:49:86:7E:59:AE:A6:EA:14:11:14:98:68:9D:5E:76:96:FF
Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
Certificate issuer:       /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
Manifest number:          73
Signing time:             Fri 13 Jun 2025 05:45:12 +0000
Manifest this update:     Fri 13 Jun 2025 05:45:11 +0000
Manifest next update:     Fri 20 Jun 2025 05:45:11 +0000
Files and hashes:         1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: MsVwiJjEoCeWfEzy7kDB/yGmO2leiP61psdWMFmontQ=)
                          2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
        Validity
            Not Before: Jun 13 05:45:11 2025 GMT
            Not After : Jun 20 05:45:11 2025 GMT
        Subject: CN=684bbae7-6634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:ca:1b:6d:35:70:82:ba:d6:7b:4e:6f:01:
                    76:01:0d:33:c3:b3:7a:9e:a6:0f:ad:ec:ee:27:69:
                    46:20:b5:81:50:dd:86:99:88:aa:10:09:a9:f6:ab:
                    24:76:8a:42:08:a5:e6:eb:b1:9c:20:a9:65:73:0c:
                    e1:8a:8b:c0:ff:3d:e8:4c:bc:85:6e:da:95:70:1d:
                    3a:a7:73:f5:58:47:df:55:d2:ad:b0:51:e4:ac:c8:
                    07:e0:2b:0f:db:8c:91:d2:57:46:37:41:29:97:09:
                    85:94:a6:06:f6:b2:a7:9e:e9:49:d0:22:b6:ae:23:
                    e9:8b:93:73:be:25:bf:32:df:c4:b5:25:6b:b5:3d:
                    b7:14:5b:fe:b2:a4:cf:a0:02:67:86:85:ea:17:a7:
                    45:96:5a:60:28:12:d7:93:64:31:44:2e:5c:a9:eb:
                    32:ed:a3:b2:42:bc:25:8f:6d:6e:ea:35:a2:98:0d:
                    f4:cd:04:a7:09:b9:c5:ff:71:c9:58:4b:56:b5:27:
                    63:c6:0f:9b:60:32:c3:1c:07:6c:ae:6b:5c:ab:7b:
                    58:47:7b:f7:d5:13:d1:9e:bd:bd:95:c9:db:52:e8:
                    02:ee:82:e8:ba:74:8d:9a:44:41:11:19:9d:64:78:
                    9f:55:a5:e1:15:70:d9:70:3e:00:c9:0a:a1:48:98:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:13:6B:49:86:7E:59:AE:A6:EA:14:11:14:98:68:9D:5E:76:96:FF
            X509v3 Authority Key Identifier:
                keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:43:45:df:43:f7:f2:cc:dc:01:e2:91:ce:03:71:bf:b1:99:
         5e:c5:70:c4:87:1b:49:63:c5:3e:6b:4c:3e:f2:67:7e:f4:b5:
         7f:21:9b:c8:30:20:1b:2f:0d:20:e0:e1:cd:39:35:c7:96:c7:
         e2:82:02:60:3a:6f:11:73:c3:31:dd:00:13:6c:06:b1:ae:7a:
         85:63:08:39:5a:fe:eb:f4:5a:13:04:5b:a3:1a:c0:d6:68:7d:
         6e:80:34:2c:74:db:24:9b:15:92:eb:d8:43:f5:e4:9b:d9:8f:
         aa:47:ce:1b:26:0e:d8:2d:4e:a0:74:1f:c0:2a:68:f0:47:0c:
         41:ec:eb:31:e0:70:a7:0c:90:3c:ac:e9:36:92:62:78:c6:f4:
         58:64:6a:12:7d:6f:01:0c:58:5e:68:e0:37:c9:19:a2:92:b4:
         6b:a9:7d:06:fa:7d:b5:b1:23:4a:e2:fc:fb:49:69:cf:cf:e9:
         57:5a:ee:ef:fe:59:fc:7d:c3:e4:95:b9:c9:00:c9:7d:43:b1:
         bd:29:56:22:2b:e3:23:81:a0:37:d0:70:97:8d:55:83:60:ab:
         c7:50:ba:0e:75:0b:b5:3d:1b:98:24:96:a7:8d:52:86:16:a8:
         a2:a0:ff:8d:dc:ec:72:35:11:24:8c:21:01:8c:7d:c1:7a:cd:
         c8:95:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:30:04 2025 by rpki-client