Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File:                     Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier:          zDUXU+v5ztyBZxk8apA2CZhXQUdgeX4BoMwGSUKNJzA=
Subject key identifier:   C6:CD:F2:E4:44:60:4E:2E:7C:5A:B6:8E:D9:A8:6E:42:16:B8:B7:E7
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer:       /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number:          73
Signing time:             Sat 09 Aug 2025 07:18:16 +0000
Manifest this update:     Sat 09 Aug 2025 07:18:15 +0000
Manifest next update:     Sat 16 Aug 2025 07:18:15 +0000
Files and hashes:         1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: I/0zNkz/EKG0lLcul5rYUueA/15cslBtBzZ7e9GJZb0=)
                          2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
        Validity
            Not Before: Aug  9 07:18:15 2025 GMT
            Not After : Aug 16 07:18:15 2025 GMT
        Subject: CN=6896f638-d748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:68:b6:42:8f:15:63:bb:fc:c5:99:ba:d0:
                    24:49:6a:ab:60:9b:14:4c:7e:fe:4e:da:00:f7:86:
                    af:94:0f:bf:3e:18:8a:71:58:f9:ee:ca:30:16:0f:
                    01:36:1d:18:94:47:35:be:66:eb:13:27:c4:f1:01:
                    92:cd:64:35:90:a2:43:9a:f1:05:07:d7:ca:da:fc:
                    b7:13:5e:2a:ed:b9:aa:14:1b:dd:35:2a:df:db:72:
                    bf:d1:df:d7:01:5b:47:3e:96:c1:14:fd:cb:17:12:
                    9c:39:fe:20:a4:75:a5:72:17:7d:97:0d:f5:2d:cb:
                    ef:9c:96:3e:9e:8e:ec:e3:29:ff:b0:09:5a:63:e0:
                    8d:21:56:5c:60:a4:79:a0:9a:48:ca:8c:b8:dc:23:
                    08:15:99:32:0a:13:6f:bd:45:24:2a:21:27:a0:35:
                    dd:cf:40:c8:2b:26:f9:e4:aa:d2:ce:3d:3c:88:79:
                    66:99:f4:84:52:92:5e:d9:d8:57:ab:1b:76:aa:bc:
                    ba:d0:56:92:8b:16:e1:3b:3e:cf:b1:01:91:6a:69:
                    94:57:9f:f6:ef:fa:2b:0c:cf:6f:ee:65:11:48:1b:
                    15:d4:5f:2e:ab:d0:08:e0:23:fd:46:e1:e4:e6:91:
                    8f:53:52:4e:17:4f:48:9c:4f:a9:44:8f:eb:9e:de:
                    b5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CD:F2:E4:44:60:4E:2E:7C:5A:B6:8E:D9:A8:6E:42:16:B8:B7:E7
            X509v3 Authority Key Identifier:
                keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f4:6c:b8:a3:4e:96:97:fb:3f:a6:84:64:a9:5f:ca:d4:56:
         c1:0d:ce:33:9f:77:2c:c4:b3:61:57:b0:2c:98:5f:55:b5:8d:
         64:65:b3:d3:17:43:2f:dd:fd:4d:e6:01:27:6a:b2:3b:f0:59:
         01:ac:e0:02:93:4a:06:ba:7b:52:ab:08:0a:09:7d:20:c7:5e:
         ad:75:ae:eb:3a:d2:8a:c8:3f:6b:8b:70:12:0e:21:8d:c8:aa:
         a1:c6:40:cd:63:02:ac:73:f0:11:19:0c:b2:14:a3:cb:38:ee:
         0a:5a:70:91:1e:99:82:dc:ce:6e:80:93:fa:87:f3:c6:c3:dd:
         18:d6:05:68:8e:e7:95:a7:b1:1e:64:32:48:a2:9b:f3:58:af:
         3a:69:69:07:30:f6:d9:54:da:ec:b6:77:e6:a5:f2:aa:66:ba:
         14:11:18:84:e2:b2:d1:46:48:f3:f8:7a:78:b8:44:ca:e7:41:
         65:74:27:5e:8d:8a:27:44:24:73:c9:a2:01:ee:06:af:94:c5:
         75:b0:b9:d3:ec:87:b0:54:9c:52:89:60:b3:23:2b:17:42:8d:
         1b:c1:f7:a6:e3:23:13:2d:fb:2e:88:59:a7:1b:65:19:be:57:
         52:74:d7:32:66:fa:7a:4f:55:63:ea:9a:e6:11:f0:0d:b9:d1:
         e3:d6:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:54:21 2025 by rpki-client