Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          hquDxm23Z2R85CwzQ+12Jtz+GDKv0eXO4Z6X2WP3eJM=
Subject key identifier:   37:16:29:42:8D:A7:FD:47:31:3C:E1:64:23:F0:48:B4:D1:A3:D1:04
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       25F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1A2F
Signing time:             Mon 12 May 2025 17:33:54 +0000
Manifest this update:     Mon 12 May 2025 17:33:54 +0000
Manifest next update:     Mon 19 May 2025 17:33:54 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: 8Yj2Otz8DLDmbpGhRegNZNV/MPQ+UfR4d7V6vKYL40Y=)
                          2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: B9/ZOaKJ3mY7sCCRxWSrCr6EkWxFbiFs/1gThM69MvA=)
                          3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: IhxFd8GWyvHy4QvuXOqSBd0gnR5njQJdJ+TT3XDY6Ow=)
                          4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: w54klPBWsGxsJLf7o8O4d/YfYtzij9sx4wGXmrfgKPU=)
                          5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: Pfx0RtJcLLW5ZFj5crlklO0jOVyz0bjwf3XIGvazerQ=)
                          6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: hPYWDoyVhEAFfc0fBZwx5qajT1d+KFZshP+N3pa3wbk=)
                          7: B53FD334575411ECAA094876C4F9AE02.roa (hash: 296EaDfJGmx3e6D5O8LxaSDfTjgH5YD0MQVWUb0ic6U=)
                          8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: mjR3c+t+smHjLqMf4drJmz9rxODMszK1LD6+M9LGeIY=)
                          9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: 7dbxR4gR6b4iL0edOOJstgfP/HsQqg2y54IOaM0DIP0=)
                          10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: Y2jR//Hrw7Q/ZKuGuaywqyH4sSYkPxB7WKTzQDJJ9BQ=)
                          11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: bBPQcajtfbRygLugvzoj923We+I2sql4kYKXhjN1UGc=)
                          12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: cBkg3LGcn5rgVL8BTrJzLbW/3oKuwqj01X4Fx7CuIw8=)
                          13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: WUbEEgBTBdPZdhiwH726GQ5G4iBR6E6r7k+ETLp88Ns=)
                          14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: phbymQiMHWNNzrnLfh17wazzvcgfnjQBs+kEUNXCkRg=)
                          15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: 5XY9aEQMhi/DaHdge1N42tPN5dbj/xlmiK62csHhzwM=)
                          16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: DTA7CeW7cqTZop+4UQyYEWCDfju8wSx8DHDxAzeibSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 17:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9714 (0x25f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: May 12 17:33:54 2025 GMT
            Not After : May 19 17:33:54 2025 GMT
        Subject: CN=68223102-3721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:81:6b:0d:e6:d1:a5:ac:89:5f:2a:93:a6:
                    84:61:57:86:11:67:c3:39:0f:26:7e:f7:49:61:9d:
                    79:73:a3:4a:0e:40:ee:d3:08:25:a7:a5:4b:f4:1a:
                    a7:7d:f9:57:b5:e1:6a:a1:0a:c7:5c:ee:07:4f:b9:
                    a9:e5:f3:4e:c8:55:2f:6a:4f:ed:47:42:0d:81:51:
                    6e:5a:1c:74:f7:ea:37:3d:e2:54:18:1c:02:5a:22:
                    4b:f4:ac:74:13:9e:55:b0:85:54:8d:f2:fa:b0:26:
                    fb:61:ef:3b:bf:07:8d:34:89:b4:a1:d0:2b:de:7e:
                    53:e8:21:84:de:ec:3f:fa:bc:41:a9:a4:6c:25:50:
                    d5:92:b3:cc:15:00:5a:80:d4:31:94:a7:b0:8d:c7:
                    fb:82:46:34:46:e5:75:e4:58:85:ef:8b:b4:77:33:
                    62:94:59:b2:42:1b:e2:49:54:3c:d4:fb:ac:13:56:
                    63:94:7f:4f:9f:e0:21:3c:c0:0c:57:f2:ae:fb:9e:
                    c4:38:70:c4:76:93:35:26:5c:47:02:8d:25:7c:7e:
                    15:37:21:85:68:cf:12:22:c7:61:d0:b3:78:a6:c4:
                    9d:31:90:20:f3:09:5b:fa:eb:2e:65:d8:00:da:ad:
                    74:14:29:23:80:3f:b9:70:c0:6e:c9:e7:7b:d8:69:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:29:42:8D:A7:FD:47:31:3C:E1:64:23:F0:48:B4:D1:A3:D1:04
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:22:fb:b8:e3:2a:73:59:56:65:b5:b8:74:78:ed:46:76:e0:
         1e:1b:81:40:0a:51:c3:d0:14:15:53:62:62:bb:bb:76:e3:39:
         1c:83:00:13:74:38:bf:7e:e5:15:39:93:18:b7:d6:0d:e5:0a:
         ab:b5:7c:c4:ea:2e:09:72:03:da:03:15:0e:ee:a8:f0:8a:cd:
         27:fa:87:f3:7c:f8:b0:6a:2d:fa:21:58:9b:dc:94:96:95:8c:
         25:d2:b6:3f:15:37:2d:e5:05:34:fe:d3:39:82:cf:96:dd:c3:
         bc:75:cb:1a:63:07:e5:01:fc:b1:28:10:4a:02:76:04:7d:4e:
         ee:ff:db:54:5e:54:2d:e6:c4:b0:2d:20:41:0e:1e:63:13:38:
         f7:0e:fc:3b:1d:3e:96:b1:f6:74:0a:ad:88:89:78:b3:14:51:
         3c:99:70:a4:c8:80:4b:ac:2a:1e:a6:6c:96:60:fa:cc:ae:72:
         52:00:6b:f3:69:f6:84:19:43:0a:4f:a8:ec:7d:f4:e0:11:f4:
         40:a2:e0:de:0a:6b:73:25:c3:94:5e:54:4a:3e:2e:e5:56:a0:
         25:14:64:19:b3:5e:33:2d:b2:3f:1b:5a:a4:f8:26:60:9a:1b:
         af:00:7a:c5:b1:76:03:16:b8:f9:e5:af:80:ba:d3:f6:fc:01:
         f1:ca:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:06:20 2025 by rpki-client