Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File:                     Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier:          fMK1aKkJPXvS5JkelqOPsDSlvo+v7pElloQCtBH8DJo=
Subject key identifier:   91:74:D8:7B:FF:6D:C1:68:23:A5:5B:E9:2F:21:66:C4:C7:85:66:F9
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer:       /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number:          69
Signing time:             Thu 03 Jul 2025 07:13:42 +0000
Manifest this update:     Thu 03 Jul 2025 07:13:41 +0000
Manifest next update:     Thu 10 Jul 2025 07:13:41 +0000
Files and hashes:         1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: hqbLL/HqFbnzLsYw5e5Ga+Ou/FtKHgyvRMjL2RX1Y7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
        Validity
            Not Before: Jul  3 07:13:41 2025 GMT
            Not After : Jul 10 07:13:41 2025 GMT
        Subject: CN=68662da5-f204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:ce:3d:8c:77:24:bf:f4:71:c4:1d:10:91:
                    b8:8d:96:49:61:4a:9d:dc:e6:c3:e9:9b:20:13:ef:
                    15:8b:41:de:a0:8c:c7:e9:3b:44:5a:45:89:f6:c3:
                    af:7f:ab:6f:79:a0:70:12:c0:21:13:c3:ee:ec:b7:
                    e2:29:b3:af:98:f4:44:c4:8b:b5:b6:35:2a:d9:49:
                    c3:2c:16:bc:bd:b8:45:36:e8:11:59:a8:2f:a3:59:
                    41:52:13:c2:62:62:f3:94:7a:2a:96:c5:b3:be:f6:
                    3b:fa:30:42:28:89:7e:42:48:75:df:82:62:db:75:
                    9d:1c:0a:7d:4e:34:82:f3:27:9c:c5:39:5f:fa:1f:
                    b5:b3:2a:fd:f3:03:2c:57:29:dd:a8:26:4a:98:2a:
                    a6:98:90:73:bb:1d:dc:6f:29:27:e7:96:8c:47:1f:
                    ba:4b:de:ae:14:d7:ee:44:89:42:c0:87:36:23:db:
                    be:90:b9:23:11:f3:9a:e4:c2:3c:cc:14:21:41:9b:
                    5f:7b:e6:2a:fe:27:45:e6:f4:fb:ba:7d:d2:54:75:
                    b6:c4:48:6a:2a:48:8c:17:5a:33:e1:24:93:e6:4c:
                    28:d6:ed:8a:7a:bf:10:46:f3:ba:43:61:f2:92:b5:
                    6d:b3:16:77:17:6c:21:cb:5a:0c:72:01:c7:84:21:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:74:D8:7B:FF:6D:C1:68:23:A5:5B:E9:2F:21:66:C4:C7:85:66:F9
            X509v3 Authority Key Identifier:
                keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:03:b6:f5:1f:dd:34:99:dc:24:21:65:1b:2f:a1:7f:2a:
         2e:08:27:35:66:9f:c3:da:cf:2c:03:98:a2:fd:f0:e2:af:51:
         b1:1d:57:91:bb:56:9d:e9:03:b4:67:20:e1:07:41:43:13:fe:
         23:59:66:74:fe:9a:27:21:b0:a7:3f:ba:54:e1:dd:da:79:4a:
         51:62:0f:54:6d:0b:f7:94:97:ac:0c:f7:b3:69:a9:7d:50:91:
         c0:ba:90:61:14:4f:d3:f8:f7:d4:25:a1:b3:92:c2:ca:82:66:
         45:c0:9a:42:97:76:a0:c7:fb:c5:22:52:14:b5:28:13:bb:62:
         e2:39:05:b2:75:32:c9:55:57:83:b0:b5:1b:2e:2f:d2:12:d5:
         cd:8c:60:a0:51:f7:4a:ea:cb:99:ac:77:0a:d9:83:9b:32:b5:
         45:bd:38:64:03:0c:44:f9:2e:6e:bc:bc:0b:4b:c9:c9:7a:8d:
         54:f5:80:04:52:cf:8a:ec:99:01:fd:53:d1:7a:29:e3:09:6e:
         a1:5a:e7:8b:c0:24:1d:5b:f1:87:ee:09:44:c0:9d:eb:1b:9f:
         49:4a:4d:3f:46:41:ae:3b:a5:b1:4f:17:a5:21:f7:a8:93:d0:
         50:77:e0:10:1d:5e:36:14:e3:63:85:76:68:b2:16:5e:7f:98:
         10:0e:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:57:22 2025 by rpki-client