Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
File:                     wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft (raw, json)
Hash identifier:          Q6f3VH3x2XKkFFEtU975c6zO0RVcxfSVs2lq9w6mpAY=
Subject key identifier:   E2:D5:DE:6E:49:E3:D0:57:7D:46:06:13:84:6A:AF:35:CB:68:12:48
Authority key identifier: C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
Certificate issuer:       /CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Certificate serial:       0792
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
Manifest number:          078C
Signing time:             Wed 02 Jul 2025 21:41:07 +0000
Manifest this update:     Wed 02 Jul 2025 21:41:07 +0000
Manifest next update:     Wed 09 Jul 2025 21:41:07 +0000
Files and hashes:         1: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl (hash: zdgnLfY0C82oQ/BWwY7kGjmSopmq8dSL1eYRl6+LH2s=)
                          2: 575CFFB013BE11EB943B905BC4F9AE02.roa (hash: q3e1SxYN4gO4HKEGgzyUKFkCIiem6r+fmpGDRyBSWN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
                          rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FF31, serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
        Validity
            Not Before: Jul  2 21:41:07 2025 GMT
            Not After : Jul  9 21:41:07 2025 GMT
        Subject: CN=6865a773-275e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:7a:6e:7b:64:b0:c0:38:62:ca:8c:ad:c4:
                    45:93:61:db:ba:b8:64:0e:6d:32:d8:3f:fd:06:ef:
                    97:cb:a0:37:f0:6d:32:28:be:0b:02:24:0c:80:b6:
                    1d:ce:8e:b8:38:02:6c:ad:42:ad:af:99:75:55:e5:
                    a5:42:ac:9b:d1:2e:3b:33:67:ee:90:50:31:4b:2c:
                    b0:a2:f1:0c:43:77:6a:77:61:9e:7b:ea:6a:11:9b:
                    16:0f:01:5a:01:f1:f5:1b:96:af:d3:91:d9:e5:eb:
                    ca:66:28:3a:e5:53:a4:23:67:ee:b4:18:f9:6e:f6:
                    29:30:5d:b1:e9:2b:c0:17:4c:9e:3a:cf:fd:bc:4e:
                    28:b7:45:b0:e9:2c:47:34:6f:52:52:88:d2:45:4a:
                    1f:7d:17:a2:3a:35:8e:65:7b:1b:ad:e2:3c:3a:c6:
                    5f:19:e3:d6:6d:8b:1c:d8:9e:03:33:9d:c3:8f:c6:
                    b1:f4:59:ad:cd:00:14:b4:7f:d5:25:13:b8:f7:98:
                    44:50:bb:81:b5:ed:d2:41:b0:4c:98:44:ed:0f:fc:
                    a9:b7:90:b7:a8:f5:37:b9:8f:47:54:ec:e2:44:c9:
                    ad:63:69:23:2b:d9:7e:85:8e:f0:ba:77:a3:12:d6:
                    72:ce:cc:d9:f1:b0:dc:ca:f9:d1:e6:d5:b3:7c:ce:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D5:DE:6E:49:E3:D0:57:7D:46:06:13:84:6A:AF:35:CB:68:12:48
            X509v3 Authority Key Identifier:
                keyid:C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:03:08:30:32:98:a9:95:5d:7a:ed:d2:aa:ad:09:2b:5a:28:
         9f:a4:30:ec:c9:3b:c3:63:b6:35:3e:46:d7:43:fe:0a:cd:88:
         36:f5:a6:ae:7a:a3:4f:5b:2b:61:36:ee:25:f1:f6:56:44:9f:
         91:3c:4e:ad:d5:5f:77:8f:1d:91:ac:18:76:00:f3:6b:cc:38:
         4d:a0:bd:4c:9c:df:e1:55:e3:a3:ea:ba:db:03:dc:eb:1a:77:
         e8:b2:a0:62:ac:64:c7:1a:30:eb:58:e7:77:91:55:ef:91:a6:
         24:91:60:1c:b0:52:84:11:22:f3:fa:fa:48:d8:dd:b8:70:bf:
         96:5f:b2:08:6f:30:df:78:95:ba:f1:b0:69:29:2e:4b:7a:fe:
         e9:f7:d8:6a:12:12:14:a6:61:bd:42:c7:37:17:e4:ef:69:56:
         24:52:4b:77:f6:9d:5e:46:88:86:36:9a:0b:00:84:3c:5e:aa:
         3a:49:37:30:c8:c0:df:c5:a9:38:21:9f:b0:67:a4:38:c1:d7:
         8b:da:64:61:ea:05:f1:62:62:93:fa:36:29:7d:df:c8:37:17:
         d8:85:22:1f:b4:81:86:44:62:ef:e6:f9:9a:4d:cd:ec:49:fd:
         f3:0e:90:c5:83:77:49:d3:11:2f:b0:7f:7d:f9:04:a5:9d:a9:
         30:e1:78:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZGMzExMTAvBgNVBAUTKEMyQUM5NDU0MTU4QTM3QzFBMTE4OUQ0NkEyRUUxNDUz
NzUwREE5QUYwHhcNMjUwNzAyMjE0MTA3WhcNMjUwNzA5MjE0MTA3WjAYMRYwFAYD
VQQDEw02ODY1YTc3My0yNzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDV6bntksMA4YsqMrcRFk2HburhkDm0y2D/9Bu+Xy6A38G0yKL4LAiQMgLYd
zo64OAJsrUKtr5l1VeWlQqyb0S47M2fukFAxSyywovEMQ3dqd2Gee+pqEZsWDwFa
AfH1G5av05HZ5evKZig65VOkI2futBj5bvYpMF2x6SvAF0yeOs/9vE4ot0Ww6SxH
NG9SUojSRUoffReiOjWOZXsbreI8OsZfGePWbYsc2J4DM53Dj8ax9FmtzQAUtH/V
JRO495hEULuBte3SQbBMmETtD/ypt5C3qPU3uY9HVOziRMmtY2kjK9l+hY7wunej
EtZyzszZ8bDcyvnR5tWzfM5SMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLV3m5J
49BXfUYGE4RqrzXLaBJIMB8GA1UdIwQYMBaAFMKslFQVijfBoRidRqLuFFN1Damv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkYzMS9CNTZCQjcyNDEz
QkMxMUVCQkNGRUIzNTlDNEY5QUUwMi93cXlVVkJXS044R2hHSjFHb3U0VVUzVU5x
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dxeVVWQldLTjhHaEdKMUdvdTRVVTNVTnFhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkYzMS9CNTZCQjcyNDEzQkMxMUVCQkNGRUIzNTlDNEY5QUUwMi93cXlVVkJXS044
R2hHSjFHb3U0VVUzVU5xYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDRAwgwMpiplV167dKqrQkrWiifpDDsyTvDY7Y1PkbXQ/4KzYg29aau
eqNPWythNu4l8fZWRJ+RPE6t1V93jx2RrBh2APNrzDhNoL1MnN/hVeOj6rrbA9zr
GnfosqBirGTHGjDrWOd3kVXvkaYkkWAcsFKEESLz+vpI2N24cL+WX7IIbzDfeJW6
8bBpKS5Lev7p99hqEhIUpmG9Qsc3F+TvaVYkUkt39p1eRoiGNpoLAIQ8Xqo6STcw
yMDfxak4IZ+wZ6Q4wdeL2mRh6gXxYmKT+jYpfd/INxfYhSIftIGGRGLv5vmaTc3s
Sf3zDpDFg3dJ0xEvsH99+QSlnakw4Xhk
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:40:56 2025 by rpki-client