Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
File:                     qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json)
Hash identifier:          GWzV7S3PMRWWknN8ISx6k82Q4BtorJkLRYz8rxszT3E=
Subject key identifier:   C9:A5:B5:40:3A:F3:92:8E:CC:6C:94:4B:13:EB:F5:84:0E:A3:9A:7E
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Certificate issuer:       /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial:       1C5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
Manifest number:          1C3A
Signing time:             Wed 14 May 2025 16:17:41 +0000
Manifest this update:     Wed 14 May 2025 16:17:41 +0000
Manifest next update:     Wed 21 May 2025 16:17:41 +0000
Files and hashes:         1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: sgJQ7hWesf4jKZT57jgpLIKgw+QBB2YGcceBc6yAjLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 16:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7262 (0x1c5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
        Validity
            Not Before: May 14 16:17:41 2025 GMT
            Not After : May 21 16:17:41 2025 GMT
        Subject: CN=6824c225-b2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:ea:c4:7c:3d:69:a9:97:67:40:87:cb:e5:
                    44:31:d1:b9:96:01:f4:2d:a2:b4:ae:94:2b:92:ec:
                    5a:6a:65:97:40:84:ac:65:3d:5a:35:c7:df:dc:4a:
                    eb:61:c0:4a:ea:47:01:a4:da:7f:ed:96:02:6e:3d:
                    54:8a:61:6e:26:28:4c:f3:9d:83:b9:72:48:97:dd:
                    7a:9f:93:f5:ce:42:35:0c:3a:3f:4c:5f:df:fa:30:
                    89:dd:d5:0f:9c:0e:65:e1:63:20:28:6e:16:20:35:
                    b0:17:96:31:b8:3a:8f:c3:b7:7c:b7:62:11:1d:c2:
                    73:04:31:b2:a4:1b:6a:86:04:d1:e3:5f:16:55:19:
                    b2:28:87:7d:0c:08:5a:df:53:c5:6f:c5:d8:1b:a2:
                    ff:03:71:1c:df:14:15:0e:fe:9f:a8:0d:b6:0d:59:
                    33:31:24:f3:55:bf:ce:70:4b:8f:2c:36:a4:20:80:
                    a3:e2:fa:43:09:1c:39:80:b2:b4:a3:ff:6e:3e:f6:
                    3a:50:03:e0:af:48:99:cd:e2:99:48:fb:42:3e:c2:
                    13:2f:7e:61:e9:dc:5c:25:c0:f1:fc:28:c0:ec:b3:
                    04:f6:66:87:7c:cb:61:a2:78:e6:a9:ae:78:e6:f4:
                    0e:d2:83:91:62:5c:29:24:2c:98:45:10:8e:f5:b4:
                    ad:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A5:B5:40:3A:F3:92:8E:CC:6C:94:4B:13:EB:F5:84:0E:A3:9A:7E
            X509v3 Authority Key Identifier:
                keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:74:a9:c3:28:dc:b5:14:43:22:54:08:1c:b4:a2:51:ed:11:
         70:a5:3f:60:d5:cf:3a:cf:2e:86:ea:b0:0e:56:dc:c4:ad:15:
         a9:21:b2:5d:b7:a4:12:9e:75:94:75:65:29:c6:30:a1:32:2a:
         f0:00:89:64:5a:65:43:c4:db:b5:0f:5b:0a:9e:b6:2e:98:db:
         75:fd:e5:64:a0:cf:34:ed:ed:13:c0:d1:d1:59:ac:ac:82:03:
         f9:66:5a:65:56:55:72:61:37:2c:17:74:8e:ca:c1:8b:c3:02:
         72:87:4e:aa:75:95:87:97:45:7d:2c:5e:b2:fb:4e:01:9d:67:
         4d:d9:d0:58:97:87:45:cf:3d:ce:a0:62:76:ad:85:6d:12:c7:
         bf:7d:8e:c4:19:7b:18:6f:9c:11:f9:07:49:4d:ac:3f:11:ef:
         f3:4b:f6:e7:dc:8f:b2:16:38:f8:b0:f0:e0:ad:fc:c3:4d:f4:
         0c:4d:42:8d:46:11:3b:3a:02:e6:97:fb:64:6d:0d:55:c7:fd:
         fd:f0:b5:53:a0:f3:fa:c6:37:8c:0e:15:3c:cc:65:29:fc:63:
         8e:76:46:1a:3d:61:e9:dc:9b:cf:48:04:a2:bf:71:15:b3:36:
         82:88:85:19:12:cc:3d:a7:05:2d:aa:40:a9:0f:20:c5:c0:13:
         e3:a0:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:21:08 2025 by rpki-client