Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
File:                     QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json)
Hash identifier:          lZ/iqJFGRPXxVF5f2Y2jXu/Z1EbyiGxrT5AWpuJctzU=
Subject key identifier:   71:48:DC:6A:0D:CD:D3:26:A2:84:48:F8:F1:94:E7:69:CA:35:94:43
Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90
Certificate issuer:       /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
Manifest number:          3E
Signing time:             Sun 27 Apr 2025 06:17:25 +0000
Manifest this update:     Sun 27 Apr 2025 06:17:24 +0000
Manifest next update:     Sun 04 May 2025 06:17:24 +0000
Files and hashes:         1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: xJIhRxCVQ//7SgDBOsOYN1Unk8IwmA/t77IbuX55fZc=)
                          2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: WSip5oZr/nzKqOFRarIzVKDUM0vv09DRdF9A4kj+F5w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590
        Validity
            Not Before: Apr 27 06:17:24 2025 GMT
            Not After : May  4 06:17:24 2025 GMT
        Subject: CN=680dcbf5-8bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:b9:17:47:91:ad:37:ae:8d:06:d0:d7:34:
                    bb:23:60:91:ae:ee:93:14:1b:81:f0:f6:3c:46:8a:
                    a3:44:fb:87:3c:99:4c:ad:1c:00:fe:d7:e5:1e:b5:
                    63:89:f9:f5:1a:64:bb:d4:98:d4:4f:e2:38:74:1c:
                    1e:90:aa:f8:30:41:69:5b:b4:90:85:50:d5:e1:91:
                    96:f6:5b:32:7d:1b:3c:4d:06:d3:ea:b7:3f:61:d4:
                    25:72:4d:ac:b8:ce:d3:5b:81:2f:59:5d:09:32:60:
                    a0:f4:50:e9:70:f3:91:49:7c:58:3e:5e:86:8e:ad:
                    8f:ed:83:ce:71:51:92:35:26:da:ce:70:96:14:8f:
                    5b:b8:2a:b1:a9:ab:47:41:4d:0d:92:c0:bc:92:0d:
                    0f:b0:cf:41:cb:33:2e:35:cb:03:da:34:50:f5:30:
                    33:e2:b3:1b:07:7d:c2:c2:0b:da:5c:81:94:88:5e:
                    f8:25:02:23:03:e4:9f:50:2c:0b:98:9e:4e:1b:20:
                    0a:d5:7c:f1:2e:4a:ab:2c:c8:25:e2:5e:9e:31:33:
                    1d:34:d1:45:07:2a:96:b8:9a:a5:20:5e:c8:5d:a8:
                    ac:97:9e:76:fb:89:30:42:48:23:15:66:ea:46:17:
                    e0:33:bf:11:c8:c7:58:36:bc:e9:a2:1e:72:70:0e:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:48:DC:6A:0D:CD:D3:26:A2:84:48:F8:F1:94:E7:69:CA:35:94:43
            X509v3 Authority Key Identifier:
                keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:91:58:55:86:7e:48:05:b3:b2:e5:c9:11:30:6c:a3:2c:
         8e:2b:a0:91:0e:76:7e:f6:8a:5e:fe:83:4e:53:20:31:70:fe:
         18:10:b7:59:5f:79:cb:40:27:01:23:32:af:f2:28:f5:2d:87:
         14:d3:6a:6b:92:ff:9d:c5:e8:45:32:89:92:9a:47:8a:b1:fa:
         7e:dc:d7:b0:9f:22:96:6e:94:71:ec:db:84:df:1c:06:39:24:
         30:89:da:cd:85:be:54:e0:63:b3:e7:ef:50:e7:92:c4:b5:b6:
         20:52:a0:58:58:82:5d:74:28:3c:f0:cc:c4:a6:d0:7a:22:91:
         42:be:73:ae:f6:ab:68:43:55:42:d1:81:00:5e:6f:b6:8f:1c:
         ff:31:fb:49:cc:c7:72:ff:04:08:86:fc:e7:fd:b4:bb:da:0f:
         37:80:8e:58:57:3c:77:2a:cd:93:5f:1a:61:db:11:bb:c1:7a:
         a8:c6:a3:75:2a:8c:b5:35:c2:9e:0c:64:fa:6e:b1:10:56:0c:
         78:e1:18:fe:de:57:45:66:88:3c:c0:74:82:23:79:67:8c:05:
         cf:4f:00:4a:98:a8:31:c0:cb:cd:0b:bf:92:d8:13:2f:fd:47:
         9e:e8:f8:88:ca:72:f7:32:96:76:5c:f1:1d:3b:d2:a1:fa:95:
         94:a4:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net