Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          NBkQaNoU2nEOY8XeEeXKpG62/iv7i/m9xKiAiw48G5c=
Subject key identifier:   4A:95:DE:C5:FD:6D:AD:C7:71:FB:DB:DF:42:0C:46:13:F9:4D:BE:F5
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       05E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          05D9
Signing time:             Sat 14 Jun 2025 22:47:00 +0000
Manifest this update:     Sat 14 Jun 2025 22:46:59 +0000
Manifest next update:     Sat 21 Jun 2025 22:46:59 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: 2OzoKnrOF8zOA0CvonQgKUUtqj3ZnO/2b8MVm+LX1ag=)
                          2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=)
                          3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=)
                          4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Jun 14 22:46:59 2025 GMT
            Not After : Jun 21 22:46:59 2025 GMT
        Subject: CN=684dfbe4-0a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a5:65:d2:a4:b7:bc:a9:59:f7:d8:09:bb:df:
                    15:d1:90:11:e5:29:f1:82:0e:66:0b:09:cb:77:91:
                    ea:d7:86:4b:36:04:69:be:eb:b8:6d:a5:4f:c7:db:
                    5f:dd:bb:3f:1a:a9:27:1e:c5:48:f1:96:89:34:55:
                    ee:af:ab:db:37:df:38:34:f4:89:45:46:41:2c:1d:
                    b5:ad:97:0b:1e:5f:8f:86:1b:ab:e4:70:e8:83:5f:
                    25:bd:c7:05:67:c9:90:c7:a5:8c:c6:28:1d:81:61:
                    c6:74:e3:0c:96:e9:8c:81:f7:a3:6b:dc:56:41:95:
                    e8:01:39:c8:80:76:17:26:50:26:cb:e9:56:a1:96:
                    06:e9:a2:17:a5:64:e9:21:3b:0f:aa:fc:a8:16:e0:
                    1d:3e:ac:a1:2d:ac:24:94:58:40:74:f3:b1:d4:34:
                    bd:d2:2a:84:cc:14:7c:65:9e:d4:4c:1d:39:25:37:
                    9d:77:df:4c:34:e0:eb:95:04:d5:ac:56:30:2f:8d:
                    c9:5d:df:0a:25:2b:59:38:6d:fb:f3:87:8e:64:4d:
                    38:33:f7:dc:27:6f:5b:4d:cd:1f:dd:7e:aa:07:70:
                    77:68:b2:9f:1b:b7:bd:9a:fa:84:2d:fd:5f:4c:5c:
                    70:79:76:8a:ea:85:e3:85:d5:f7:d1:22:72:e0:68:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:95:DE:C5:FD:6D:AD:C7:71:FB:DB:DF:42:0C:46:13:F9:4D:BE:F5
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:94:0f:f6:6f:0c:4a:6d:3b:73:9c:2d:55:45:1d:9e:63:
         69:fb:90:69:a4:69:c3:1e:f7:e8:bc:2c:da:0e:76:a7:78:08:
         89:f8:6d:95:57:31:78:b0:10:a1:d5:65:4b:af:1b:5d:40:d2:
         0f:26:3a:ab:6d:a9:68:87:7c:60:d8:3a:6f:f9:61:6b:5a:08:
         a2:38:75:37:63:5a:f8:d4:00:b8:a8:da:0d:7a:e0:85:6d:09:
         74:63:5f:38:ec:b9:6e:22:c8:40:e1:34:1d:a9:54:80:f6:56:
         db:32:35:61:b5:bd:bd:23:84:4f:2c:f3:5e:59:dd:05:83:0a:
         93:7b:00:99:16:6c:59:e3:2b:8f:0c:57:a9:73:f0:d9:73:74:
         1a:62:54:71:fd:21:2f:89:28:f4:e5:e1:54:e2:5e:0c:ae:e8:
         20:58:e0:28:fd:4d:a9:89:2d:f1:0e:02:0a:4c:54:c7:58:d5:
         63:53:f0:11:5f:00:aa:c0:1e:18:95:fa:0a:d0:87:70:c9:2e:
         49:81:33:48:80:92:75:8a:33:4d:a2:0b:60:65:32:b3:22:0c:
         69:5c:b1:49:84:04:04:80:0b:bf:cd:2e:65:81:c2:fb:74:35:
         a9:c3:9f:6d:ad:1d:f3:25:1b:ce:10:4d:0f:c0:78:26:72:62:
         7d:08:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:01:46 2025 by rpki-client