Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
File:                     QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json)
Hash identifier:          SlT+mh5airlzYMWUuiUfj4+A5yDwhUNj6Bmn+qJYTzo=
Subject key identifier:   DE:62:AD:FE:F5:CF:83:09:10:7E:2A:9B:15:D4:C4:06:0F:3D:0B:37
Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Certificate issuer:       /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
Manifest number:          6C
Signing time:             Fri 13 Jun 2025 06:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 06:00:51 +0000
Manifest next update:     Fri 20 Jun 2025 06:00:51 +0000
Files and hashes:         1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: WsFMTC/uEb5dQOTZsZLsq4vv0S8TgWOQcHn5YXS9F+I=)
                          2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: fSJH1SOLPO4NysKX51na/qXDmlPOAQyyNuZ41eZmd8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
                          rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
        Validity
            Not Before: Jun 13 06:00:51 2025 GMT
            Not After : Jun 20 06:00:51 2025 GMT
        Subject: CN=684bbe94-4ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:f3:44:f4:90:c2:96:89:72:d2:78:46:0a:
                    74:63:f4:d7:cb:ff:c4:90:31:87:3b:2e:9d:b8:d5:
                    c0:72:c2:07:52:8b:96:a1:ef:9d:60:2c:ae:49:cf:
                    ea:ec:33:27:99:e3:c9:73:18:28:f5:7f:2c:56:e9:
                    46:0a:0c:8f:9f:42:f6:a5:dc:8c:19:b3:12:ae:7c:
                    0d:6f:c3:f7:55:30:38:10:36:36:9b:f3:b9:aa:78:
                    c7:75:69:4b:86:9d:0d:92:cc:59:0b:a4:01:0c:f1:
                    7d:ee:24:65:e6:68:12:11:e4:d2:93:bb:41:5e:22:
                    6e:8f:41:01:e2:75:aa:6e:44:a6:2b:96:2c:84:57:
                    41:0f:c6:bd:53:13:f8:0b:f7:0f:8f:6c:90:44:08:
                    b7:29:66:1a:ab:80:2c:d9:1d:25:7b:c0:50:17:39:
                    75:e3:ee:a1:dc:e0:5b:9c:57:df:fa:fd:3e:c6:db:
                    a3:de:15:5f:d4:23:e3:e6:4b:66:8c:f5:89:22:20:
                    19:01:87:e7:e2:47:4d:6c:0a:52:b4:a2:48:b6:e3:
                    77:bb:12:d8:56:01:06:56:6b:3c:8f:48:f4:10:73:
                    b8:ee:fd:e1:2c:98:63:a2:a1:14:15:a9:fc:c5:f7:
                    ab:b6:f5:b8:2d:e3:20:b5:4f:d9:c6:b0:e8:14:e7:
                    0d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:AD:FE:F5:CF:83:09:10:7E:2A:9B:15:D4:C4:06:0F:3D:0B:37
            X509v3 Authority Key Identifier:
                keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:27:11:0d:d0:0b:20:c4:f6:f6:3e:e3:53:49:f9:53:da:82:
         ea:5c:a5:bf:bb:19:85:27:83:8f:f3:1f:ba:3f:9a:f3:68:70:
         9e:62:40:16:92:c4:75:38:20:7e:30:56:36:ee:fc:9e:22:03:
         6b:94:4e:0c:1d:b5:1c:23:ce:2b:81:37:8e:82:41:1f:f7:3d:
         46:02:9f:36:9b:9e:c3:67:2a:05:ad:d4:0c:c3:5b:51:41:01:
         16:5a:ae:0b:3d:88:32:4c:80:11:5a:ca:fb:38:1f:6b:c3:13:
         41:d7:d3:86:73:74:c8:f0:25:9c:cb:e9:4d:e7:03:92:4b:3c:
         c7:21:fa:ff:af:fe:a5:04:5b:2c:41:25:94:5e:2a:0d:ca:04:
         1a:a2:d9:8d:97:b3:e6:a3:ab:44:b7:4a:12:83:b3:c7:05:02:
         ea:f3:3a:5c:81:b8:89:ad:47:57:de:1a:9b:8b:9e:98:5f:18:
         be:74:cc:c1:4c:7d:6a:70:04:07:cb:f2:04:33:0b:3a:07:18:
         3f:cc:18:f5:54:eb:22:79:0c:66:03:23:ad:c2:70:0f:da:29:
         c7:5a:f9:9a:de:fd:a6:18:3e:91:fb:b0:5e:02:ed:e7:46:16:
         58:45:8c:7b:53:03:0d:c8:46:a2:93:22:af:46:9e:3b:05:dd:
         06:d4:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:37:57 2025 by rpki-client