Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
File:                     QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json)
Hash identifier:          a+rxJ5J9JBkIbtL9Kgh86Dao6JwWxEBmyz3bUqVhKoo=
Subject key identifier:   13:4B:DB:AC:AD:F1:F6:CB:24:C7:1C:A4:1D:D3:3E:85:24:FD:03:09
Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Certificate issuer:       /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Certificate serial:       0613
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
Manifest number:          060E
Signing time:             Fri 16 May 2025 23:06:09 +0000
Manifest this update:     Fri 16 May 2025 23:06:09 +0000
Manifest next update:     Fri 23 May 2025 23:06:08 +0000
Files and hashes:         1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: 1AowJjAFj4cCOEcY7aVTFFwXhuUrPkCP3Rgj5wLGZYI=)
                          2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl
                          rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 23:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
        Validity
            Not Before: May 16 23:06:09 2025 GMT
            Not After : May 23 23:06:08 2025 GMT
        Subject: CN=6827c4e1-de41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:ff:88:e9:69:77:2a:ef:04:8d:0a:29:a4:
                    3b:54:07:46:92:4f:95:2e:b5:fd:19:7f:21:63:c0:
                    82:4c:51:8c:40:a6:1c:a3:cd:ab:ce:54:95:7a:43:
                    8e:35:47:28:19:c6:ca:3b:e4:31:31:6d:43:18:13:
                    ce:f9:72:61:fe:b4:db:87:b8:31:f8:5a:9a:67:42:
                    4a:62:d4:1c:db:e8:ed:e1:a0:7e:5a:f1:55:9c:12:
                    05:34:b1:6d:c2:a0:df:82:a6:29:ce:fd:96:79:09:
                    35:18:0a:ac:45:8a:c5:90:65:0d:c8:fb:a2:39:99:
                    06:fd:2e:82:37:53:17:97:4d:34:ac:dd:98:9d:3c:
                    f9:93:48:39:c4:74:95:fd:9e:52:51:0c:a9:40:64:
                    14:82:2b:2b:2f:bc:12:96:8e:b8:97:03:67:de:25:
                    24:6a:4b:97:f9:ee:4f:f5:b1:82:d9:aa:b7:1d:36:
                    4a:a5:8f:8b:eb:18:91:5a:ad:ac:74:52:db:b0:f6:
                    97:72:81:42:63:9b:40:22:da:13:90:fa:59:20:2d:
                    ae:65:49:3d:c6:98:31:67:61:cf:33:1e:77:e1:dd:
                    ad:3e:a3:de:55:13:70:a4:97:01:73:04:1a:b4:5d:
                    51:81:23:68:8f:85:1d:00:09:13:cf:17:33:0c:51:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4B:DB:AC:AD:F1:F6:CB:24:C7:1C:A4:1D:D3:3E:85:24:FD:03:09
            X509v3 Authority Key Identifier:
                keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:92:72:16:39:94:26:c1:41:43:87:ab:b1:c2:8e:74:8d:57:
         88:cb:7a:da:d6:6b:3d:42:0a:77:86:0d:a0:48:31:ff:6b:05:
         a1:e2:be:7b:8f:31:c7:04:c0:67:1d:c6:e8:1a:5a:33:49:6d:
         9c:e8:1b:de:bb:7e:5d:92:24:c5:d4:ef:93:02:9f:c6:c6:6e:
         6c:cf:42:95:fa:6b:e3:63:59:15:7e:25:88:9e:84:25:bf:42:
         f6:21:6d:41:32:06:d8:45:8f:60:b3:5f:05:6f:e9:d5:fb:e7:
         70:35:19:fa:a4:e6:b7:e8:a1:f8:7f:86:74:35:d6:af:57:38:
         3b:ba:09:cb:7d:13:f3:12:c5:1d:71:3c:e4:5e:c9:95:c4:2e:
         57:fd:43:65:c7:d6:fc:97:87:0e:3b:3f:b1:e2:37:b3:b3:7c:
         44:87:cd:b6:0f:0b:44:04:2f:38:c2:67:3f:ea:d5:1e:7b:63:
         36:fc:cb:69:73:c1:8d:68:c4:c9:19:48:7c:b7:4f:26:c8:25:
         76:4f:ad:6d:43:6b:9f:e0:11:2b:cc:4b:6a:06:6d:56:9d:f0:
         ff:df:80:79:f7:d6:53:b5:bb:41:60:08:3d:ea:3e:89:25:62:
         2a:e0:10:11:11:72:d3:78:7b:4a:f5:a1:4c:0e:4c:d5:93:43:
         f9:12:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:49:20 2025 by rpki-client