Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          coicpIEaN8sfy+eZnUbX4zEw2rcOnuxAXd8Bs9/xBWc=
Subject key identifier:   1D:CD:35:D4:72:65:A7:DF:E2:EF:73:F7:5C:87:BD:7D:25:2F:2C:DD
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1C01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1BE0
Signing time:             Mon 16 Jun 2025 16:19:32 +0000
Manifest this update:     Mon 16 Jun 2025 16:19:32 +0000
Manifest next update:     Mon 23 Jun 2025 16:19:32 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: If2bidS9gdkYRnigAT6bZ7ZcpF1lR+WSYkeAveTpEnA=)
                          2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: BbGcUbwtP+aZHPYce4149SbFzjL1B5hYLShi68qQcek=)
                          3: A3B7573EF01A11EE935E4329C4F9AE02.roa (hash: 3Fv5pT2XLktCrAEzJ7qYpsBgXpFiEdMr09ecsEjPwls=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: HlwCeu7nRQrhAHteeDH8/AzpstkCTMTYbzNnFUCPtI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 16:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7169 (0x1c01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Jun 16 16:19:32 2025 GMT
            Not After : Jun 23 16:19:32 2025 GMT
        Subject: CN=68504414-8e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:99:43:81:57:e8:fa:9e:28:e0:56:4e:b6:
                    0e:65:b9:a4:79:5e:f1:74:f4:fd:90:95:cf:99:0e:
                    dd:f3:75:d7:a7:11:cb:19:0b:50:b6:31:0d:65:91:
                    a0:b4:81:8d:1e:75:61:46:1c:e0:11:b3:da:67:17:
                    b4:2a:d1:08:f9:a4:e1:ca:b4:f4:d7:05:5e:fd:1c:
                    3d:e8:2b:c0:ae:e2:20:53:50:22:71:e0:c3:24:71:
                    33:45:47:a1:bc:ec:88:5f:d0:b6:70:d2:62:ae:54:
                    86:4a:1b:a4:3b:00:22:11:01:c6:a5:6f:a9:7d:ef:
                    26:16:b1:a8:56:bd:5f:3f:56:4c:d1:ec:86:30:5b:
                    fc:44:3a:38:91:88:d9:f0:43:d6:00:a8:cc:43:c1:
                    fa:4a:5e:e5:b0:fa:57:4f:7b:9e:06:26:6d:2c:c5:
                    16:cd:8b:3c:d4:5d:11:7a:fe:0a:99:6d:d3:ca:49:
                    30:ef:fd:32:b3:1f:a5:9a:c5:ed:e6:d6:8e:ca:45:
                    40:1e:29:a2:79:85:38:97:3b:0b:6c:25:31:45:df:
                    da:40:63:8e:f5:8e:24:31:86:79:ac:c8:a9:1f:2a:
                    ae:ee:87:01:98:fd:36:76:8e:01:32:bb:de:02:f4:
                    dc:b0:09:36:68:b5:2f:84:29:a3:5e:68:ab:a4:25:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CD:35:D4:72:65:A7:DF:E2:EF:73:F7:5C:87:BD:7D:25:2F:2C:DD
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:65:d9:61:1a:c1:64:0f:72:57:73:72:cd:79:13:5b:e6:
         5a:f3:46:9d:e2:7f:e9:1d:80:e9:3f:9d:57:2f:3b:40:bc:d9:
         72:d3:86:80:dd:8e:e1:8c:8a:59:c2:b7:cc:53:d0:10:9b:21:
         c2:c0:1b:e2:f0:71:55:55:d9:5e:58:b5:37:00:49:00:33:3b:
         f7:79:77:3c:8c:79:96:53:1e:85:85:f7:47:40:1f:9c:a1:80:
         20:4f:af:8a:0b:ea:74:5c:7d:4b:16:43:16:cb:44:29:9a:e6:
         0b:c2:80:8d:54:d6:cf:bb:d8:4a:db:cb:9f:15:49:41:2b:86:
         d2:b9:65:ab:d9:3d:15:cb:e9:42:c6:b5:b5:26:5d:57:5b:90:
         a5:ab:fb:1d:ed:18:24:af:bf:d6:61:22:be:0f:b2:8c:a9:4e:
         a3:c0:8a:0b:b7:70:9b:f6:e4:57:11:bf:eb:07:86:4b:63:ec:
         15:2e:5e:43:79:7c:51:25:5f:f0:0d:b4:86:85:6d:96:fa:71:
         1d:37:41:4b:c7:ec:67:32:62:93:d7:70:7d:75:25:a9:78:6e:
         91:e8:d1:5e:c3:1c:32:09:75:e3:49:3a:2c:cf:a9:b0:dd:7a:
         b2:1a:6e:8b:02:bd:60:83:b5:52:d3:60:f1:f1:73:27:12:2b:
         4a:99:8a:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB
OEE0QjdERUEwHhcNMjUwNjE2MTYxOTMyWhcNMjUwNjIzMTYxOTMyWjAYMRYwFAYD
VQQDEw02ODUwNDQxNC04ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvmZQ4FX6PqeKOBWTrYOZbmkeV7xdPT9kJXPmQ7d83XXpxHLGQtQtjENZZGg
tIGNHnVhRhzgEbPaZxe0KtEI+aThyrT01wVe/Rw96CvAruIgU1AiceDDJHEzRUeh
vOyIX9C2cNJirlSGShukOwAiEQHGpW+pfe8mFrGoVr1fP1ZM0eyGMFv8RDo4kYjZ
8EPWAKjMQ8H6Sl7lsPpXT3ueBiZtLMUWzYs81F0Rev4KmW3Tykkw7/0ysx+lmsXt
5taOykVAHimieYU4lzsLbCUxRd/aQGOO9Y4kMYZ5rMipHyqu7ocBmP02do4BMrve
AvTcsAk2aLUvhCmjXmirpCVlRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3NNdRy
Zaff4u9z91yHvX0lLyzdMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD
QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1
eFVJNnZfZEhncmlvcExmZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiy2XZYRrBZA9yV3NyzXkTW+Za80ad4n/pHYDpP51XLztAvNly04aA
3Y7hjIpZwrfMU9AQmyHCwBvi8HFVVdleWLU3AEkAMzv3eXc8jHmWUx6FhfdHQB+c
oYAgT6+KC+p0XH1LFkMWy0QpmuYLwoCNVNbPu9hK28ufFUlBK4bSuWWr2T0Vy+lC
xrW1Jl1XW5Clq/sd7Rgkr7/WYSK+D7KMqU6jwIoLt3Cb9uRXEb/rB4ZLY+wVLl5D
eXxRJV/wDbSGhW2W+nEdN0FLx+xnMmKT13B9dSWpeG6R6NFewxwyCXXjSTosz6mw
3XqyGm6LAr1gg7VS02Dx8XMnEitKmYph
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:46:48 2025 by rpki-client