Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
File:                     quimiBHXcVavSOB4FMqP1mI9mL4.mft (raw, json)
Hash identifier:          yFDVvMUc9S4tp6HC87EP+Mhio7KUWUM44MopCfIrFlI=
Subject key identifier:   FD:3C:48:76:7B:6C:56:44:CC:C0:44:9A:41:69:D6:6B:C5:C9:C0:06
Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
Certificate issuer:       /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
Manifest number:          2E
Signing time:             Tue 05 Aug 2025 08:18:58 +0000
Manifest this update:     Tue 05 Aug 2025 08:18:57 +0000
Manifest next update:     Tue 12 Aug 2025 08:18:57 +0000
Files and hashes:         1: quimiBHXcVavSOB4FMqP1mI9mL4.crl (hash: liY1asAfpqT5TIaazZu0a/dMCJu/k8JdB9T8QEqdQX8=)
                          2: E45745342AC411F0B2B1822CC4F9AE02.roa (hash: vV4viCWjAxoxyHSeBD7Bmq6t4EgnYb1F/xaDHHxFuCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl
                          rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 08:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
        Validity
            Not Before: Aug  5 08:18:57 2025 GMT
            Not After : Aug 12 08:18:57 2025 GMT
        Subject: CN=6891be71-9121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:9e:63:22:7e:84:9e:e0:da:83:5a:45:0a:
                    a1:bf:77:32:5b:b3:0c:f3:c2:50:38:e5:83:84:e2:
                    ad:3e:9b:59:f4:f6:f6:fd:0c:78:dd:b6:82:4e:42:
                    ad:62:89:a1:b3:a0:93:78:2f:96:a3:06:3e:b8:13:
                    60:96:68:9f:95:e5:ec:de:87:ab:28:3c:76:ba:44:
                    18:bc:57:28:fa:d9:de:82:30:92:81:70:d6:79:59:
                    96:52:20:fd:0f:bb:42:c1:e4:11:c4:5a:6c:15:09:
                    75:5a:f8:af:9a:59:7d:47:db:e8:7f:d7:21:2c:0f:
                    55:da:59:92:94:80:d2:33:d5:89:0e:58:43:f4:9d:
                    bd:27:a7:de:f9:3f:d2:ea:2e:50:bc:3a:7f:6a:f5:
                    8f:22:29:46:c0:e0:2e:ad:58:a0:bd:f2:b8:98:4f:
                    d5:27:04:db:da:26:4b:d3:68:dd:10:a3:9b:3c:9f:
                    a8:90:5e:e9:d7:b6:65:78:ba:04:7b:de:3e:c8:5b:
                    74:b4:18:ef:0b:4d:b6:d3:f8:22:90:63:fe:ff:08:
                    1e:da:55:e1:e7:a8:b2:bc:7a:58:4d:b4:b6:f3:de:
                    16:a2:44:b5:c3:d1:d1:aa:d3:ed:ee:23:16:6b:3e:
                    cd:07:8a:b9:17:36:39:00:0a:23:db:8e:af:75:06:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3C:48:76:7B:6C:56:44:CC:C0:44:9A:41:69:D6:6B:C5:C9:C0:06
            X509v3 Authority Key Identifier:
                keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:50:0d:2f:04:39:32:47:9d:3a:3b:df:f3:6d:02:ec:80:
         1c:21:77:ef:c2:15:a6:d9:c0:14:df:fa:e1:3e:c4:45:16:24:
         e6:0a:56:e6:f8:e5:73:07:63:0d:ff:56:c7:a0:14:c9:d6:1b:
         2f:da:0b:20:28:46:07:8b:a6:6a:29:58:a8:b1:ee:ee:64:8f:
         75:76:d6:5d:ff:79:2f:f6:d0:39:2b:a7:bd:bd:55:cf:7f:f3:
         d1:38:ad:62:85:63:5e:96:81:bc:22:22:e1:10:60:2e:74:de:
         b8:e8:e3:f2:f9:9f:57:5e:10:ae:45:65:c6:71:cd:b4:9d:34:
         e4:43:21:4e:95:38:c1:7a:2d:9f:28:b2:26:bd:28:85:a4:3f:
         78:90:ac:03:50:5c:09:8c:7f:8c:06:f1:0b:57:e1:d7:89:d6:
         dc:60:24:f0:9d:76:cb:08:16:69:37:e2:0b:13:bf:06:99:d3:
         e5:8f:4d:bc:ea:2b:6b:c3:bf:76:21:db:58:63:c3:22:a0:07:
         f3:9f:ac:34:2b:45:20:43:70:5c:dc:55:9c:1d:db:8e:87:52:
         5e:6b:ba:24:a6:85:53:c3:a6:4d:b8:30:61:2f:16:b6:87:60:
         8a:54:d7:ad:f5:1b:87:4b:9f:60:c3:b5:62:5d:68:cd:4d:55:
         6c:ed:02:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:04:37 2025 by rpki-client