Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
File:                     qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json)
Hash identifier:          wvsRFSzLB4TIqIIhvi//Ze6MDQ42CCs5CrSIn0UMDW0=
Subject key identifier:   26:3F:38:15:B9:F7:AF:2F:FD:65:52:0E:4F:34:59:0B:5A:F1:46:75
Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14
Certificate issuer:       /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
Manifest number:          37
Signing time:             Sat 09 Aug 2025 08:05:30 +0000
Manifest this update:     Sat 09 Aug 2025 08:05:29 +0000
Manifest next update:     Sat 16 Aug 2025 08:05:29 +0000
Files and hashes:         1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: I4ppi4X1I3lcBRbrpQjp89KKA5egV4p3VJMStiN06J4=)
                          2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl
                          rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
        Validity
            Not Before: Aug  9 08:05:29 2025 GMT
            Not After : Aug 16 08:05:29 2025 GMT
        Subject: CN=6897014a-ab5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:c3:75:f1:30:65:c8:03:17:0d:62:1f:4a:
                    c3:cd:af:22:c5:ed:71:60:36:53:75:3d:6e:d2:34:
                    f1:bf:07:f4:7e:50:63:53:42:9b:f0:6d:08:26:41:
                    9b:4d:5e:24:37:bf:c6:4f:67:26:ed:e9:d6:0b:7b:
                    8b:f7:38:cd:a3:48:60:97:d3:01:d7:16:5b:b2:0b:
                    d0:d2:00:6f:fc:59:ba:23:4e:39:9e:cc:82:42:57:
                    37:38:26:04:60:c8:e2:c6:fd:2b:16:cb:be:32:76:
                    b9:9a:33:34:5b:40:ad:c2:0c:63:01:05:bc:ec:77:
                    a3:17:d5:0b:37:61:a8:00:5c:bc:4d:1e:3e:29:a5:
                    e2:71:23:09:a0:46:04:33:67:25:e0:c1:9d:29:71:
                    0a:4d:fe:3c:27:2b:63:06:2f:e1:b2:3e:39:e6:45:
                    d4:6a:fe:05:78:e3:04:10:41:15:fd:e0:bd:f9:85:
                    33:ab:3c:25:9f:3e:5e:ec:00:86:24:7a:3a:18:9b:
                    b2:2d:68:f5:0e:33:c0:ad:f2:38:04:ac:8d:0b:32:
                    8f:dc:74:6b:de:64:f0:46:cb:ec:05:f7:12:67:98:
                    1b:bc:87:8e:be:be:4b:cf:0f:54:44:11:a1:77:d2:
                    5c:56:e5:73:16:f9:e1:17:22:07:e4:9f:b3:3c:f5:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3F:38:15:B9:F7:AF:2F:FD:65:52:0E:4F:34:59:0B:5A:F1:46:75
            X509v3 Authority Key Identifier:
                keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c1:db:d7:0e:b2:ba:3a:60:bf:e8:68:be:bf:84:5c:ae:be:
         d7:7f:02:93:61:a5:ce:96:5c:31:6c:b3:39:e6:f3:9f:d2:df:
         5b:6f:54:76:8e:b4:52:de:c6:ef:33:cb:62:9d:ff:2e:8c:ce:
         c7:b8:bd:ac:c9:30:74:62:19:9f:be:a1:f9:9c:52:7e:1c:7e:
         91:8d:fd:f6:8f:7b:e5:30:f3:89:80:fd:06:90:13:27:75:52:
         df:c2:29:6f:04:97:ab:74:1e:65:70:eb:32:75:98:94:42:13:
         1d:f4:3a:cc:2f:e6:26:da:f6:19:a3:88:3d:09:f7:b0:19:2f:
         cb:9a:4e:7c:20:1b:c6:33:3f:46:dc:d9:11:68:15:2f:86:2b:
         c6:18:d2:6c:1f:e7:b6:fb:42:da:b1:0c:f3:91:57:36:b1:c8:
         bb:59:a0:ff:d7:34:5b:2c:d2:07:95:da:34:79:5e:a0:da:d1:
         46:d2:f5:df:ad:85:a4:e6:04:90:57:40:7d:c5:35:69:a3:66:
         cc:40:db:03:fd:84:da:45:55:c7:6d:bf:ec:0f:61:49:f1:a8:
         1b:08:f5:84:62:74:bb:18:75:f0:6b:8b:09:11:a5:4f:2e:41:
         b8:bb:65:79:26:d7:c9:2a:29:9f:3e:13:2e:05:63:2f:0a:76:
         ed:16:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:42 2025 by rpki-client