Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
File:                     QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json)
Hash identifier:          xeJfJZu/mQLbY59qnL4SjnEXk3q8qPMJvvIRcAb6mHo=
Subject key identifier:   A0:91:12:41:1F:E4:62:4E:63:1F:62:A1:9F:44:AC:BA:8F:53:DC:68
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Certificate issuer:       /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
Manifest number:          52
Signing time:             Sun 27 Apr 2025 03:12:01 +0000
Manifest this update:     Sun 27 Apr 2025 03:12:01 +0000
Manifest next update:     Sun 04 May 2025 03:12:01 +0000
Files and hashes:         1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: /JGTIRySyxfNSjSH2k4Lu17ZhfaSr1DNO9rY/tuYLFI=)
                          2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
        Validity
            Not Before: Apr 27 03:12:01 2025 GMT
            Not After : May  4 03:12:01 2025 GMT
        Subject: CN=680da081-3631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:94:01:06:df:70:da:3e:9a:1d:05:75:62:
                    e0:55:3e:3d:dd:af:52:97:e1:5a:51:df:c6:51:91:
                    ef:5b:fc:30:ab:0b:9d:0b:f8:53:91:81:4e:9d:e5:
                    aa:d4:9a:e4:87:50:ba:f2:8a:4b:4a:fa:68:9c:14:
                    b3:50:7d:d4:ab:44:06:21:06:26:9f:e0:51:ae:b9:
                    bb:b8:45:8f:39:5f:7e:15:6c:cc:1a:96:a5:6e:c3:
                    7d:c4:b6:ad:af:a6:7f:1c:69:54:95:75:f6:26:5c:
                    4d:f0:a3:3f:d9:08:d1:93:03:2b:2c:4e:59:36:54:
                    ad:31:82:40:c0:77:e1:92:73:59:34:2d:50:42:57:
                    3d:bc:74:77:b7:53:c3:f0:ed:f0:73:bb:f1:b9:e4:
                    cd:12:88:ac:e4:41:c0:e5:6d:1a:6a:17:6b:d8:39:
                    d7:c3:bd:bb:df:5c:1d:04:a7:df:fd:91:9e:9f:ef:
                    8b:d6:e4:06:74:75:e2:73:81:b8:9b:36:0d:76:30:
                    1e:80:37:73:9f:b1:61:8a:66:4b:d3:6f:ea:6c:6d:
                    38:32:2a:4c:b8:ee:3f:0a:ab:3b:b2:94:cd:7b:75:
                    a2:bb:6c:c4:18:36:2d:ec:2e:b3:cf:40:83:15:42:
                    97:10:aa:ad:7b:38:98:c9:12:8f:cd:e0:ba:1f:27:
                    a0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:91:12:41:1F:E4:62:4E:63:1F:62:A1:9F:44:AC:BA:8F:53:DC:68
            X509v3 Authority Key Identifier:
                keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:19:de:c7:bd:b2:e8:00:6c:3a:41:a1:01:38:16:e5:d6:
         36:4a:c8:a9:0d:95:48:7c:f9:43:e8:68:6f:a2:60:85:af:b8:
         04:cb:62:4d:96:17:ff:9d:ce:af:ce:23:1e:da:78:9f:7f:d1:
         f0:e1:84:4a:46:f5:54:10:80:13:ae:c7:54:9a:2b:aa:e8:a2:
         8e:ee:39:12:ed:cd:3a:77:f1:5a:96:12:4e:83:2b:67:3e:f1:
         66:2c:e8:6b:3b:7c:8e:b9:d1:da:4a:60:67:c5:b7:2a:6a:1c:
         75:bc:90:35:50:d3:a6:66:9b:3d:92:a3:d2:56:67:d2:b9:00:
         0d:89:77:78:f1:18:ac:61:ae:24:84:11:05:2c:40:50:29:a3:
         1d:53:20:75:78:af:95:15:89:4e:f7:eb:32:da:72:5c:f3:ca:
         6f:ff:d7:ad:de:2b:af:b4:6d:48:88:64:02:75:ce:82:57:45:
         5c:d7:46:b1:8d:ed:14:69:56:44:c3:3c:a6:ad:8b:00:59:3f:
         6b:47:06:0f:e6:0d:75:f8:67:a5:4a:68:d1:c8:6d:70:6e:90:
         88:fb:c3:6d:08:f4:c2:a1:92:37:3a:14:d5:bb:93:e1:95:a0:
         80:92:af:6f:13:c4:48:c7:5c:9f:35:b3:63:02:90:c5:fb:0c:
         ef:c6:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:41 2025 by rpki-client on console.sobornost.net