Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.mft (raw, json)
Hash identifier:          r00UPO9KQUVf5W6KfNcKdGA7TMh5GznmAuLobL9mFzw=
Subject key identifier:   38:64:D6:34:8F:13:23:57:34:7F:D2:73:E3:EF:78:6C:DD:1C:44:03
Authority key identifier: 40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Certificate issuer:       /CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
Certificate serial:       0633
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
Manifest number:          0744
Signing time:             Wed 14 May 2025 22:47:46 +0000
Manifest this update:     Wed 14 May 2025 22:47:45 +0000
Manifest next update:     Wed 21 May 2025 22:47:45 +0000
Files and hashes:         1: QMW9PelSuS6VkhpP1t99sHtKKSE.crl (hash: aGhD4S4O8Z9kZu1Sp0LHAPOgAK4I2aJYgGjyBGc/CoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Validity
            Not Before: May 14 22:47:45 2025 GMT
            Not After : May 21 22:47:45 2025 GMT
        Subject: CN=68251d91-cc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:71:59:00:be:d5:21:4f:4f:c2:94:fe:f2:
                    15:76:8a:e7:24:ad:41:06:a2:20:0d:c6:3b:fc:0b:
                    6b:ef:c3:58:46:48:b8:1b:1c:d0:7a:70:e6:26:ee:
                    39:52:55:2c:b6:27:72:d1:bc:d3:77:82:6e:8f:26:
                    4f:87:5f:6e:f0:74:f7:68:ce:2c:4c:2a:0c:c3:55:
                    26:dc:92:a2:17:33:a4:54:05:88:9e:70:17:4a:a4:
                    76:28:9a:8c:8f:d8:b8:fa:b3:85:34:93:7e:c8:ea:
                    b0:c1:c9:5e:0c:01:36:c4:bd:cf:42:59:75:8a:ac:
                    f2:fb:b9:fb:3d:82:21:89:2f:0a:44:b9:9a:8e:d0:
                    d8:38:84:64:f3:aa:4d:27:be:a6:14:08:77:a3:50:
                    05:b7:0f:97:08:79:88:8d:7c:27:dc:d0:f8:72:aa:
                    00:e1:7b:e3:fb:a0:60:d0:cb:db:5e:11:37:85:96:
                    7c:b5:31:28:a8:d7:d8:c6:68:db:c2:b9:75:68:25:
                    5d:29:f0:9c:2c:74:7c:48:6f:4b:b3:44:02:62:9e:
                    d8:05:3c:25:00:ee:05:10:65:35:42:b4:89:6f:15:
                    39:43:a3:1a:ef:0e:d6:06:2f:a1:45:04:9a:60:4f:
                    ad:60:7f:f9:07:fd:fa:43:0d:ad:e6:fb:b9:89:53:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:64:D6:34:8F:13:23:57:34:7F:D2:73:E3:EF:78:6C:DD:1C:44:03
            X509v3 Authority Key Identifier:
                keyid:40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:bf:1c:30:e6:22:25:66:23:a6:ac:ea:49:49:fe:e9:68:db:
         5c:d2:d9:d8:be:58:a8:18:69:f6:8e:4f:45:94:51:20:3f:dc:
         91:af:5e:d6:62:89:4a:19:9b:e3:07:6f:01:40:fc:de:80:d7:
         de:84:31:d7:3b:83:b4:46:19:d0:e3:81:7a:77:92:92:d3:41:
         86:4d:2b:c3:01:c2:48:13:4a:70:13:3c:54:d0:7f:17:6f:ec:
         00:7b:cc:0a:dc:94:2f:0f:ae:7c:b4:75:c5:6c:b6:c2:cd:6a:
         17:7f:9a:ce:46:11:73:8f:e7:f2:cc:70:8b:d6:ae:be:58:82:
         57:1f:94:ef:89:2d:6e:93:3d:5d:52:ef:fa:ea:cb:5e:18:75:
         b7:cd:0e:be:ad:1f:14:e8:dd:c1:6d:0e:a9:a9:bc:46:1e:36:
         1c:cd:7e:bd:63:07:2d:83:d3:27:85:59:e5:bd:e0:f4:06:50:
         a8:22:83:78:5c:d4:f9:22:fc:e3:43:98:80:62:7c:d2:2f:4e:
         1a:ec:38:cf:b0:c6:43:e7:4e:61:08:58:0d:71:2c:fe:40:59:
         f2:81:09:a6:85:00:b0:da:de:92:2b:4a:19:80:d4:ff:82:c2:
         cf:80:30:5d:ce:1c:33:ab:1a:26:b4:b6:d0:b5:a7:af:98:55:
         51:75:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:22:11 2025 by rpki-client