Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File:                     QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier:          QrpEzJBaXe4tzQ7EyCgsRLIBm5tHL1KA79CqPb0aTpE=
Subject key identifier:   46:F8:91:51:78:71:3C:43:2C:2B:BD:FD:5F:59:06:A7:36:78:16:AF
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer:       /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number:          0110
Signing time:             Thu 03 Jul 2025 05:30:32 +0000
Manifest this update:     Thu 03 Jul 2025 05:30:31 +0000
Manifest next update:     Thu 10 Jul 2025 05:30:31 +0000
Files and hashes:         1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: 5F1UH0BWFWPC/rzUpbb9NFYmlwM1Qh1oFGTV3nCRFhM=)
                          2: FCF99042301011EFBC350682C4F9AE02.roa (hash: vPFMqrSUjzYIWWD5OrrbcLDLskBcQKIeZfMaAZKS9a8=)
                          3: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: +Z/kBpjd094bd4RPdB+3s1pTzlQka6jZPNCpN7x0eWA=)
                          4: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: JSKm415YB8eOJLzvxbfdTcDB2ReV3b5+7ihxYSCGy2A=)
                          5: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: VzDNl+e9c187NG+xNBhGjgSyuKcXiIbT9dvqTK6Jcdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
        Validity
            Not Before: Jul  3 05:30:31 2025 GMT
            Not After : Jul 10 05:30:31 2025 GMT
        Subject: CN=68661577-c830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:f8:58:17:ad:86:9e:00:90:fd:64:97:08:
                    47:91:81:19:be:17:72:ca:ac:95:80:f8:90:4a:63:
                    3c:6f:b6:62:8f:e3:6b:49:33:d5:b3:07:d8:38:18:
                    32:75:21:f6:e7:09:01:93:55:cf:e2:b2:ad:8b:59:
                    1e:46:80:8c:6e:3b:51:11:43:98:d9:74:3c:85:c8:
                    72:15:87:6c:9f:05:82:af:0f:34:e1:55:be:d6:93:
                    5e:a5:82:35:cd:47:34:ab:be:43:dc:e2:c0:82:1f:
                    a2:22:3f:f8:22:e0:a2:99:b0:7d:54:f3:94:7e:5c:
                    37:58:88:49:bd:95:61:4b:dd:7e:c6:32:26:49:f1:
                    9d:b3:de:12:7b:16:8d:45:26:54:6d:fa:d2:8e:31:
                    4c:85:82:65:35:41:a4:7f:76:de:90:92:0c:d3:92:
                    92:57:64:b8:f2:83:2f:26:34:b9:4f:6b:a0:ee:69:
                    47:68:04:ef:cb:32:3a:53:86:c2:8d:c4:1f:33:b6:
                    74:e5:28:d2:8d:21:78:e8:10:47:12:b8:a2:99:48:
                    af:8c:91:f2:0b:c8:48:15:1d:da:77:27:d6:fa:33:
                    51:c2:68:ae:8c:e1:97:72:ac:03:c7:27:22:fa:be:
                    d0:79:2b:ef:38:9e:db:b2:24:b2:d2:9b:e8:fa:5e:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F8:91:51:78:71:3C:43:2C:2B:BD:FD:5F:59:06:A7:36:78:16:AF
            X509v3 Authority Key Identifier:
                keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c9:a1:6f:d6:35:af:b9:fb:6e:64:b3:7c:f8:bf:62:53:e1:
         28:a0:50:45:10:c0:aa:26:34:b9:ae:d8:85:cf:91:01:4e:72:
         ed:e6:30:fc:17:96:e4:0b:f4:5e:0f:20:6c:53:5c:5c:c6:d4:
         1d:f5:5b:50:82:b5:92:78:bf:86:18:58:bd:31:85:3f:02:da:
         5c:e8:26:10:a7:01:aa:48:ed:6b:d2:51:d7:13:43:d3:57:b0:
         56:1e:d8:c2:f4:28:07:01:6a:a4:a2:57:fc:e2:69:c3:79:41:
         1b:fd:d8:1b:b8:e7:8e:24:62:85:99:5f:3f:c3:a6:b9:c8:00:
         7b:5b:da:45:a4:3c:fb:95:d1:50:18:b1:fc:41:f9:b5:dd:8f:
         c2:f0:0e:bc:97:4f:7e:76:e7:e8:6d:2a:d2:de:dc:6a:bf:c4:
         9e:84:ad:78:99:94:65:9e:2b:c3:e0:13:ca:68:18:43:ce:90:
         d0:97:47:df:67:0a:f6:de:49:c9:f1:a5:50:b0:02:02:96:e2:
         16:72:0c:7e:4f:a4:81:ee:3e:99:da:25:44:bf:0a:04:8e:9e:
         e9:dc:40:7f:99:62:d6:55:6f:d0:73:bc:70:01:0e:17:4e:07:
         31:ef:c0:6a:9a:81:1e:7c:8c:9b:d5:56:2c:e1:69:88:b0:f4:
         a7:5d:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:50:45 2025 by rpki-client