Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.mft (raw, json)
Hash identifier:          KvrrGvpaAnXLa4u+7jc55262a4Tc+HI/rOPY4T/7PZs=
Subject key identifier:   0A:FB:F4:6C:DD:66:2F:6B:3B:09:8E:05:05:7D:1C:46:A9:53:65:C4
Authority key identifier: 40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Certificate issuer:       /CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
Certificate serial:       062D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
Manifest number:          0738
Signing time:             Sun 04 May 2025 22:25:02 +0000
Manifest this update:     Sun 04 May 2025 22:25:01 +0000
Manifest next update:     Sun 11 May 2025 22:25:01 +0000
Files and hashes:         1: QMW9PelSuS6VkhpP1t99sHtKKSE.crl (hash: UVJHGzo0y9o8hR4EssI8cNAWtHrU3xevafvOiHDR/7A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 22:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Validity
            Not Before: May  4 22:25:01 2025 GMT
            Not After : May 11 22:25:01 2025 GMT
        Subject: CN=6817e93e-8589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:d6:9b:25:80:cf:33:5d:c7:ee:d1:93:7a:
                    51:f3:7c:c2:8a:da:b1:0a:7b:c0:11:a4:1f:ad:5f:
                    71:29:71:ec:94:1a:78:a0:21:f8:87:26:f0:0a:7c:
                    26:ad:f8:96:c3:5a:95:c2:e0:34:27:fc:08:22:c7:
                    35:b1:71:3c:a2:f3:77:4a:61:83:9d:98:72:c5:a2:
                    a0:20:01:89:0e:0f:b0:de:fe:d4:cd:6f:9b:f3:a8:
                    eb:b3:14:59:9d:cf:d3:ab:81:dc:fa:f8:e0:7a:58:
                    7e:82:16:22:ac:8b:53:37:70:ae:cf:f3:54:36:a5:
                    ac:fb:eb:25:3b:3b:cb:55:6c:03:aa:50:61:d0:15:
                    45:39:d6:dc:ee:41:29:72:c2:a2:4f:6b:76:ad:01:
                    b0:f1:1e:f4:77:f4:2d:e5:2b:85:69:0b:e2:c9:ed:
                    70:19:fc:85:43:f7:d3:95:e7:17:71:58:6a:5e:c2:
                    21:bf:9f:73:b8:32:d9:1a:9e:95:e5:6f:53:06:47:
                    c9:e8:be:cb:2b:a6:df:03:8d:b9:07:aa:68:89:b8:
                    83:dd:f2:d1:c4:75:62:00:84:3e:5a:f2:aa:bd:15:
                    67:93:af:f5:c3:3a:89:b8:30:f1:78:35:cb:c8:d4:
                    32:db:a2:38:13:2f:d7:65:93:11:b8:55:db:23:d9:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FB:F4:6C:DD:66:2F:6B:3B:09:8E:05:05:7D:1C:46:A9:53:65:C4
            X509v3 Authority Key Identifier:
                keyid:40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:87:a7:a5:e4:a7:8a:33:c0:1e:a8:93:65:fa:e9:7e:05:
         fd:b0:1e:61:e8:85:94:33:f8:d0:a6:b3:64:98:5e:c9:0d:fb:
         68:34:9e:1d:11:de:2b:2f:05:9e:d4:21:17:22:cb:7e:fe:3d:
         1d:75:6a:57:83:c5:6d:71:7f:3c:0e:28:75:18:85:e5:43:94:
         f0:17:2b:cd:33:c0:d0:a5:b9:f7:bb:4a:7b:ab:3e:9d:36:b5:
         2a:09:1d:de:2d:56:b5:2f:3a:9f:e4:7a:88:8c:85:5d:4a:fb:
         82:7b:20:c5:ab:1c:56:28:99:41:df:07:51:9e:24:09:27:16:
         8e:c6:42:86:e9:19:f3:a7:9d:a0:67:2e:4a:c3:30:25:bd:a3:
         78:3f:82:c3:8d:20:1e:0e:9d:d5:16:5e:6c:57:7d:ad:48:a3:
         05:f9:65:65:15:1c:d9:c0:5a:85:ef:1e:ec:4e:71:0a:95:e7:
         fd:f0:01:d7:5b:6e:86:c9:7a:c4:38:d2:33:fa:15:b9:a2:17:
         55:dc:5d:f0:6a:fe:e8:41:d3:fe:0a:bf:e7:89:82:99:2c:f7:
         d5:4f:5f:95:7e:b8:61:4d:40:b5:31:f9:9c:03:1a:fd:e7:61:
         af:3b:a9:75:39:49:4b:9e:1f:4f:83:78:b0:12:a2:14:4f:d3:
         47:7b:1b:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ5NjMxMTAvBgNVBAUTKDQwQzVCRDNERTk1MkI5MkU5NTkyMUE0RkQ2REY3REIw
N0I0QTI5MjEwHhcNMjUwNTA0MjIyNTAxWhcNMjUwNTExMjIyNTAxWjAYMRYwFAYD
VQQDEw02ODE3ZTkzZS04NTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAvWmyWAzzNdx+7Rk3pR83zCitqxCnvAEaQfrV9xKXHslBp4oCH4hybwCnwm
rfiWw1qVwuA0J/wIIsc1sXE8ovN3SmGDnZhyxaKgIAGJDg+w3v7UzW+b86jrsxRZ
nc/Tq4Hc+vjgelh+ghYirItTN3Cuz/NUNqWs++slOzvLVWwDqlBh0BVFOdbc7kEp
csKiT2t2rQGw8R70d/Qt5SuFaQviye1wGfyFQ/fTlecXcVhqXsIhv59zuDLZGp6V
5W9TBkfJ6L7LK6bfA425B6poibiD3fLRxHViAIQ+WvKqvRVnk6/1wzqJuDDxeDXL
yNQy26I4Ey/XZZMRuFXbI9km+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr79Gzd
Zi9rOwmOBQV9HEapU2XEMB8GA1UdIwQYMBaAFEDFvT3pUrkulZIaT9bffbB7Sikh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk2My85MEU4MEJDODk3
RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVsU3VTNlZraHBQMXQ5OXNIdEtL
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FNVzlQZWxTdVM2VmtocFAxdDk5c0h0S0tTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVsU3VT
NlZraHBQMXQ5OXNIdEtLU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeFIenpeSnijPAHqiTZfrpfgX9sB5h6IWUM/jQprNkmF7JDftoNJ4d
Ed4rLwWe1CEXIst+/j0ddWpXg8VtcX88Dih1GIXlQ5TwFyvNM8DQpbn3u0p7qz6d
NrUqCR3eLVa1Lzqf5HqIjIVdSvuCeyDFqxxWKJlB3wdRniQJJxaOxkKG6Rnzp52g
Zy5KwzAlvaN4P4LDjSAeDp3VFl5sV32tSKMF+WVlFRzZwFqF7x7sTnEKlef98AHX
W26GyXrEONIz+hW5ohdV3F3wav7oQdP+Cr/niYKZLPfVT1+VfrhhTUC1MfmcAxr9
52GvO6l1OUlLnh9Pg3iwEqIUT9NHexsg
-----END CERTIFICATE-----
Generated at Mon May 5 09:46:22 2025 by rpki-client on console.sobornost.net