Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          Vx1cw2h7EVbvE7Ixi6r5i1sYbov1QNvbMFdj+gGKQ6o=
Subject key identifier:   AF:33:0D:03:F3:88:91:FA:5F:75:BF:8B:49:ED:39:29:B6:E3:D0:99
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       0509
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0C64
Signing time:             Sat 14 Jun 2025 21:18:19 +0000
Manifest this update:     Sat 14 Jun 2025 21:18:19 +0000
Manifest next update:     Sat 21 Jun 2025 21:18:19 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: p1rEPfyp+bvAV3dshKk1BiBckbzb97+QLZYzrvMUuZA=)
                          2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: 1xVLNQlNrVwrhPb266jUjImDeI1JBJLkEMDQeKUBnFI=)
                          3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: c9XW6vjr9ZRxN55xmeXFihDxkfyhr1D0e4wxYGC5e+I=)
                          4: A291634816B711ECBD752D47C4F9AE02.roa (hash: Ctq7IqjnfC2JklzmQsi0+l8pKomLg5k/LbwaF/nwW84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jun 14 21:18:19 2025 GMT
            Not After : Jun 21 21:18:19 2025 GMT
        Subject: CN=684de71b-c337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:e5:11:12:b2:4f:43:c9:ba:72:7d:57:26:
                    e5:b6:1f:ab:06:52:19:19:3b:d0:8b:34:e4:90:b5:
                    cf:12:3b:52:88:22:44:59:05:ed:97:9f:56:0c:f6:
                    a6:64:c4:42:dd:e1:1c:7c:6d:d9:0a:ab:71:a7:4d:
                    b0:89:23:d1:a7:82:54:48:6c:dc:4e:b9:c4:69:b3:
                    78:5f:08:cc:aa:a2:e0:2a:f8:aa:db:a7:0d:e2:29:
                    05:53:88:5b:8a:d2:a3:0b:1b:f0:10:f4:08:dc:0b:
                    2e:1f:af:e0:72:93:17:bc:ca:c3:a7:d2:6d:61:b2:
                    1f:2f:07:b8:5f:1f:e6:3e:3e:59:19:67:fd:6d:6c:
                    73:b7:6f:36:f7:b5:dc:bf:ab:e4:23:b5:64:c0:71:
                    95:7f:ab:94:0e:89:e2:ba:df:30:27:8b:f0:5a:8a:
                    0d:46:b2:b6:d4:76:c6:8d:ff:7c:45:ff:15:1e:b5:
                    31:07:4c:63:3a:9e:b6:c0:c5:97:21:1c:52:ab:35:
                    84:3a:59:30:89:7e:5d:4b:87:a2:c5:f0:2c:11:c7:
                    8a:e0:7a:8a:b8:8a:a8:16:67:a8:5b:6f:f6:99:29:
                    ab:94:f2:69:45:92:8b:70:1c:28:b4:86:7e:a9:08:
                    fc:57:3a:ba:e5:55:f5:5e:50:9b:9f:ec:cc:a6:e9:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:33:0D:03:F3:88:91:FA:5F:75:BF:8B:49:ED:39:29:B6:E3:D0:99
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:1a:d6:f9:4b:2d:da:42:a2:da:57:e8:2b:ad:06:7b:4b:
         88:d3:a9:f5:83:ee:32:35:07:5e:6c:11:82:8a:0d:7a:82:48:
         15:9e:ac:db:74:15:dd:53:83:82:d3:fb:b5:fd:0f:2b:3e:bb:
         71:0c:78:d9:75:1f:b9:f0:55:21:e6:65:69:f5:f8:4b:51:68:
         19:c6:01:da:a2:99:a1:9a:7b:9d:7f:e8:c9:6a:84:1b:4d:9a:
         7f:b8:7e:d7:7c:31:49:82:05:4c:02:70:77:fb:30:13:03:4d:
         e2:25:33:f5:4f:af:97:0f:e0:56:99:f5:3f:e2:f3:4d:d1:2b:
         fe:10:62:39:cd:5c:f0:75:31:37:bb:3c:49:cc:b4:50:cf:c1:
         d1:88:fe:1a:22:ad:2f:67:06:cf:06:2d:c9:94:d0:11:b3:90:
         da:c0:aa:e9:8b:9f:7b:2c:c7:ed:fa:5c:8f:15:fd:65:be:fb:
         fb:02:30:4e:d8:99:0a:5a:3e:ad:0b:eb:cd:1f:79:d8:2b:5d:
         c5:14:69:48:71:5d:e1:71:3c:af:df:60:fc:f9:48:24:bf:0a:
         86:5a:c3:48:1d:2e:73:f8:48:ca:eb:db:70:45:83:e3:f2:d3:
         86:28:9b:b3:b5:8d:bd:47:65:bd:b3:91:f8:00:68:ab:1b:6d:
         09:a4:07:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:36:48 2025 by rpki-client