Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
File:                     QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft (raw, json)
Hash identifier:          crzYn7RPzUn5qU89ki/qEVWkRPu5/SG+f/zpYWPUHT0=
Subject key identifier:   92:85:3A:B3:26:EB:85:66:BC:FD:44:60:BA:0A:13:8E:7D:C2:6A:EF
Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E
Certificate issuer:       /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
Manifest number:          CC
Signing time:             Fri 13 Jun 2025 04:42:12 +0000
Manifest this update:     Fri 13 Jun 2025 04:42:12 +0000
Manifest next update:     Fri 20 Jun 2025 04:42:12 +0000
Files and hashes:         1: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl (hash: ntFHGPHTfJ/bXQ9oElFlXKksWfBLa9guwe4w9LujgwU=)
                          2: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (hash: W33rXxSlvsCWhMMJptogBjvzdgDQoYwJi+V5ipdn5y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4475, serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
        Validity
            Not Before: Jun 13 04:42:12 2025 GMT
            Not After : Jun 20 04:42:12 2025 GMT
        Subject: CN=684bac24-d8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:44:7e:6d:4f:d9:46:90:76:33:c6:7b:59:
                    79:6e:44:4c:82:5b:99:24:8a:69:07:8f:4e:b6:27:
                    d3:09:16:e9:20:5f:1c:78:bb:00:4f:b9:7f:17:6e:
                    4b:53:a3:0b:42:cf:6d:d5:bf:c5:6f:51:49:e8:54:
                    5a:35:f9:cb:6b:07:55:32:f8:0d:89:50:2b:e5:84:
                    d9:45:8c:c1:9a:44:c6:d7:ec:8a:25:2a:28:37:18:
                    23:fe:c7:6c:55:c1:c6:b0:6b:7e:ed:ca:c9:17:e2:
                    53:a2:cc:19:3a:05:da:40:70:fe:6d:67:af:1b:9d:
                    ba:2b:fd:ab:3d:3d:6a:cf:89:a3:17:eb:2e:c6:43:
                    f9:93:c0:cc:42:27:9f:fe:fc:4d:6f:9a:13:13:1c:
                    f7:49:08:20:b3:16:4b:c2:93:02:00:d7:b6:7d:ca:
                    77:e2:f6:1a:a6:b7:61:6a:f0:38:92:a7:4a:5d:cc:
                    0f:e5:14:fe:72:8b:cb:eb:ad:1c:29:5b:c2:8c:bc:
                    af:c0:66:dd:99:a2:8b:3e:15:81:2f:fe:6f:21:ae:
                    d9:6b:eb:fc:cc:aa:92:c4:e1:1e:6c:4b:93:07:97:
                    54:7c:8b:a1:da:e7:97:e8:4e:09:bf:8f:ce:f3:dd:
                    b0:8b:c5:6a:f3:ee:94:11:c0:0a:18:7f:ab:fd:7a:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:85:3A:B3:26:EB:85:66:BC:FD:44:60:BA:0A:13:8E:7D:C2:6A:EF
            X509v3 Authority Key Identifier:
                keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:60:82:28:77:0d:16:fb:61:f1:0d:e2:5b:55:25:82:82:7b:
         fc:9f:6a:45:31:dc:28:14:53:88:5a:27:8e:9e:62:d1:66:9e:
         46:cc:56:43:0e:6a:c9:e3:27:3a:df:8e:9e:7b:e2:cc:45:28:
         85:e5:45:36:0c:71:f9:be:a4:31:d3:cb:90:36:08:f8:da:e7:
         68:1e:83:ab:53:b8:f5:fa:dc:15:7d:78:f2:89:e6:dc:a3:b2:
         39:7a:4f:07:32:9f:65:0d:c7:6f:c7:c1:7e:d1:8f:2f:24:aa:
         1c:aa:85:ce:5e:ee:7f:64:cc:1d:ee:c6:1c:81:52:58:5f:05:
         60:48:53:11:99:bc:2e:fa:bb:1d:8c:68:8b:66:71:ad:24:87:
         3d:87:b5:7c:e4:39:5b:d9:44:52:19:64:33:21:36:01:80:94:
         2e:f6:2d:5d:3c:e0:ba:62:81:52:28:f3:a5:13:ac:95:2d:40:
         62:74:9c:6c:72:9d:7d:6e:88:1e:4b:c9:e1:0f:f9:64:43:e6:
         e4:b5:e9:e2:e9:c8:29:7a:c5:03:ad:63:ad:12:b0:76:44:60:
         7e:53:23:46:d5:40:37:bb:5c:88:1e:5c:02:8a:14:76:87:79:
         3d:84:9a:b4:47:c4:3a:aa:1c:2d:37:12:11:51:e7:ae:de:6b:
         26:50:8d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:39:17 2025 by rpki-client