Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
File:                     qTjv-5Y64q628LJmWWuKQSN3ydk.mft (raw, json)
Hash identifier:          AunP8TsHSymclbyeiK2Me38Vzoew/dMDrSwjEqDN2L4=
Subject key identifier:   1B:42:50:88:91:51:F6:E9:43:79:58:6B:DD:07:1D:B1:ED:3C:E2:D2
Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9
Certificate issuer:       /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
Manifest number:          15
Signing time:             Tue 01 Jul 2025 08:47:01 +0000
Manifest this update:     Tue 01 Jul 2025 08:47:01 +0000
Manifest next update:     Tue 08 Jul 2025 08:47:01 +0000
Files and hashes:         1: qTjv-5Y64q628LJmWWuKQSN3ydk.crl (hash: 0Bi1+jEdQ9qNUzMg3/Wct5uz++zN7UUdAVcDHqi+61o=)
                          2: 605C88EC362811F08A82E10DC4F9AE02.roa (hash: ICDTjfptMFLAWgu+lY50xT8rCv9IQat8S3hCjv+v8vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl
                          rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
        Validity
            Not Before: Jul  1 08:47:01 2025 GMT
            Not After : Jul  8 08:47:01 2025 GMT
        Subject: CN=6863a085-4c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:eb:66:12:a1:28:bb:b8:19:c2:65:52:8a:
                    80:6f:b0:44:23:1a:36:80:17:58:ca:e0:e6:6b:d2:
                    eb:69:9c:e5:2e:09:98:86:90:bc:d0:37:31:fa:ac:
                    59:fb:4e:3c:20:8f:2b:5e:6e:6b:0f:48:2a:a0:5c:
                    3b:ba:d9:ce:bb:c7:00:eb:24:02:23:2a:fe:9a:a0:
                    19:ca:2f:d3:30:1b:80:71:51:ba:53:e7:ca:3c:b8:
                    e3:df:98:be:3d:e8:42:3b:14:4f:95:5e:de:29:f0:
                    3f:a4:59:59:14:13:a7:6d:f9:32:8a:6e:28:38:2d:
                    d3:d6:f9:1a:69:99:48:39:4c:13:88:eb:3d:f1:04:
                    75:f6:58:51:16:11:7b:9d:74:e8:3e:e2:f8:f7:a0:
                    b4:26:e1:6b:e0:38:d7:04:ba:f5:17:82:14:83:bc:
                    44:1b:9a:a2:f6:6c:98:71:2f:c4:0e:13:1d:8c:fa:
                    b6:6b:7d:04:32:d3:77:78:9f:08:45:18:a0:e7:4a:
                    32:b8:2a:0c:4d:f2:3d:d7:d0:2c:f3:da:6f:59:73:
                    ba:e2:72:ed:80:df:87:8a:78:77:ea:88:a4:38:cc:
                    b1:48:ed:6d:fa:97:6b:5b:69:3b:a3:85:fa:f3:3a:
                    31:31:6d:a9:c0:3c:99:fb:5b:71:96:d1:b8:36:0d:
                    b2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:42:50:88:91:51:F6:E9:43:79:58:6B:DD:07:1D:B1:ED:3C:E2:D2
            X509v3 Authority Key Identifier:
                keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b4:d9:2c:ba:e7:6a:93:29:35:f8:d5:fb:10:a5:6f:ac:30:
         e2:3a:1a:73:89:7d:a1:47:c2:62:55:22:33:c7:3d:31:bd:7f:
         a7:f1:3d:37:84:34:63:21:59:32:00:4f:34:f7:0c:4d:10:a4:
         f7:2a:d5:d4:ff:dd:18:6f:e4:19:ba:6c:b8:79:9a:24:6b:1c:
         96:3b:0b:3c:8d:3c:cd:a5:6a:7a:0b:21:32:8d:da:35:17:94:
         15:0c:1d:fe:ee:40:3a:b2:3c:4c:93:90:35:dc:96:de:8b:b1:
         ee:9f:ab:05:80:53:a5:63:29:af:48:28:a5:29:1b:e7:07:72:
         25:59:09:8e:88:18:15:e0:13:61:61:00:a9:fc:91:ec:80:d2:
         f4:a9:55:9b:c2:ca:0e:4a:fa:3c:02:e4:be:ec:b9:e7:9e:7b:
         b5:c0:44:b8:44:78:6d:40:80:45:1b:41:47:34:af:04:d7:fc:
         29:fe:d3:d8:1e:bc:60:aa:58:c9:4c:e2:51:b9:83:e7:77:57:
         40:e0:56:1f:fb:81:b9:3f:7f:0f:2a:05:02:90:e4:bd:e8:15:
         97:d1:b2:a7:56:48:3a:82:83:40:66:49:b8:dd:92:58:6e:76:
         53:f4:51:65:f0:80:56:c9:d7:d7:43:89:00:03:65:51:22:5e:
         68:55:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:55:01 2025 by rpki-client