Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
File:                     qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft (raw, json)
Hash identifier:          U6CIbYOiULKoZkD/uYoy3jt1/wUrf7CPfCtNsPMtXi0=
Subject key identifier:   28:8B:67:A7:39:A6:D6:4D:14:67:D9:1E:AC:04:47:3A:05:3A:8E:51
Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4
Certificate issuer:       /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
Certificate serial:       089E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
Manifest number:          0897
Signing time:             Wed 02 Jul 2025 20:50:30 +0000
Manifest this update:     Wed 02 Jul 2025 20:50:29 +0000
Manifest next update:     Wed 09 Jul 2025 20:50:29 +0000
Files and hashes:         1: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl (hash: lo3poHxR1onr+NN2NrrMQ7ORf6Ls5cNw7mDrmkLZLGw=)
                          2: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (hash: Ikd/LHIFGkrNvlawlhSa/JEAr9UmpAWA/8H+UH2uQws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A13F, serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
        Validity
            Not Before: Jul  2 20:50:29 2025 GMT
            Not After : Jul  9 20:50:29 2025 GMT
        Subject: CN=68659b95-266f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c1:e9:79:42:e5:8a:45:3e:18:e4:6e:f9:e6:
                    79:5c:4d:44:2e:83:ac:f3:7d:35:86:9e:f0:24:ad:
                    da:db:c4:03:2d:c9:eb:9a:17:8c:c1:21:f3:23:30:
                    ca:ae:cf:73:5c:fa:20:c6:6d:0d:34:37:ad:e4:4a:
                    82:85:d8:8d:08:95:7e:50:ad:69:b7:40:5d:e8:8c:
                    ab:49:2d:b0:57:f3:cf:a8:22:2a:b5:18:37:5f:62:
                    9a:99:09:4c:71:c1:07:af:50:3a:94:1c:3c:c2:04:
                    bf:1a:45:38:1c:b8:7e:ef:d1:1f:d4:7a:e8:15:db:
                    e0:bc:a6:02:39:d4:b1:31:71:c1:30:fc:21:3e:24:
                    b4:09:26:ae:5f:e0:46:e0:f0:3d:cd:7b:e7:3e:5d:
                    1b:58:0f:c0:71:76:1c:f4:2e:1b:23:3d:4f:c1:82:
                    9b:ed:f1:fb:b9:4a:d8:b6:3f:b7:0d:da:04:78:bc:
                    0c:6a:8d:9e:55:b1:1f:c1:cd:7d:04:c3:66:ed:99:
                    30:70:fc:72:6c:72:df:a0:b0:b4:51:42:8e:10:f5:
                    f1:84:69:c3:68:cd:1c:66:7a:f5:d9:37:55:56:09:
                    b2:9a:d6:76:b6:16:07:cf:cf:86:09:db:d5:1e:4c:
                    ad:3e:e2:65:63:82:76:56:b5:11:c6:3a:91:54:0f:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8B:67:A7:39:A6:D6:4D:14:67:D9:1E:AC:04:47:3A:05:3A:8E:51
            X509v3 Authority Key Identifier:
                keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cb:07:5c:28:c3:b0:9c:04:f1:b1:02:ca:d0:d1:8a:1f:83:
         26:4b:ae:a4:93:9f:96:1b:70:17:a7:07:be:c4:e1:c9:26:c8:
         4a:19:f4:9d:47:b3:9e:87:02:82:a1:ba:a5:eb:0b:79:47:b6:
         ba:63:a2:70:e7:14:54:2a:be:09:2d:1e:1a:14:0e:6e:7f:50:
         c3:41:84:1b:26:cd:96:02:bd:e4:58:40:07:be:3f:e3:f7:52:
         f3:bb:4f:f9:c1:d0:c5:f4:3c:dc:d2:3a:91:c8:5a:e7:52:ed:
         9e:ea:7c:9d:8e:5c:c8:40:75:11:a5:74:16:f8:d7:85:b5:12:
         fb:b7:7b:23:67:c4:3b:ae:63:2a:79:92:df:7f:cf:3f:63:03:
         ca:69:64:fe:19:4e:15:26:6a:17:f7:35:f8:e1:72:84:28:79:
         9d:e1:56:6f:cd:5c:5c:8a:9d:4a:3f:ba:fc:f9:29:30:8d:13:
         19:5c:b0:25:b1:3a:39:89:e1:89:67:16:82:3a:04:5b:e5:0c:
         ff:de:5d:d6:00:27:0f:ab:ef:a3:e5:7c:ea:c8:6a:68:26:3c:
         d0:a1:c4:35:40:32:e4:16:d4:ca:e4:67:7f:59:66:68:ac:f6:
         af:86:ac:b0:74:d7:0d:f9:b3:aa:42:4c:9e:1f:0a:81:99:43:
         d9:7d:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:09:42 2025 by rpki-client