Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File:                     qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier:          DcUjOTNCF3OqKYovSQ3Ao/PiSS0sE+Y5e8zzX6CK3L0=
Subject key identifier:   19:42:A6:6C:F6:C0:68:84:CA:CB:0B:16:57:95:A1:A7:9A:31:48:D7
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer:       /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number:          01C5
Signing time:             Tue 05 Aug 2025 03:36:26 +0000
Manifest this update:     Tue 05 Aug 2025 03:36:26 +0000
Manifest next update:     Tue 12 Aug 2025 03:36:26 +0000
Files and hashes:         1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: Tb+Hf1QZqzZjeAKrY8xCdSXdbSB78Bk9tUr412f+QYk=)
                          2: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: KtpeeMkouh4BeqprRpHiO5N0mOWLBqSII+5IcI34asQ=)
                          3: D2655E906B7B11F093DB7B2AC4F9AE02.roa (hash: 1Zac9ru2We4e9Z386uS/+8wiOQvzeRIV1WhcsjlxkJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
                          rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 03:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
        Validity
            Not Before: Aug  5 03:36:26 2025 GMT
            Not After : Aug 12 03:36:26 2025 GMT
        Subject: CN=68917c3a-531c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:59:a1:be:29:75:47:24:ff:16:5c:71:af:
                    94:c9:4d:3d:4d:5d:8e:6a:5f:aa:b7:f0:5c:2b:a2:
                    b1:60:ef:a0:6b:37:fe:0a:df:eb:38:c7:21:30:c1:
                    77:be:91:14:64:ba:9a:bd:e5:6d:7c:1f:ff:74:96:
                    e0:fc:31:28:28:d5:dc:87:e4:87:95:d1:28:41:28:
                    79:1a:df:fd:c0:b4:c0:fe:e5:e1:dd:ce:41:ec:7f:
                    d6:66:c8:5f:1c:a6:26:37:6c:27:f1:c9:45:dd:e8:
                    6b:fd:10:f4:c8:4e:75:17:8a:40:6a:62:f2:a8:98:
                    46:8c:c6:d5:7f:57:77:f4:b9:ab:4e:91:c4:7c:ed:
                    92:89:74:d0:7c:45:77:6c:17:bd:6b:86:09:65:56:
                    7b:d6:aa:92:88:f7:dc:62:67:b1:01:41:bc:b8:33:
                    9f:d3:42:30:7a:d1:d9:b1:8c:54:44:49:d4:15:1a:
                    7e:3f:d1:1f:47:e0:72:5d:ca:5a:30:fd:56:2a:3e:
                    ae:48:c7:bf:4b:75:54:90:c2:75:02:f1:5d:d8:24:
                    fc:e8:24:e6:ac:e2:14:c3:cc:e5:6d:0d:af:21:13:
                    b8:6b:52:b7:07:c2:8c:e6:f5:39:4d:2c:ba:7b:1b:
                    f2:71:84:e9:61:f6:55:cc:02:75:03:a4:a9:6c:a0:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:42:A6:6C:F6:C0:68:84:CA:CB:0B:16:57:95:A1:A7:9A:31:48:D7
            X509v3 Authority Key Identifier:
                keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ae:b7:25:00:1e:79:37:30:d4:36:ce:4f:32:78:d8:d4:12:
         d7:9f:f6:78:c1:97:f7:1b:a8:e6:39:81:f2:eb:cd:85:1d:c3:
         54:32:9c:39:d8:5c:64:3d:89:f1:e1:5a:59:fd:f6:21:d0:2f:
         1b:30:7d:8e:90:fb:e0:cd:09:65:cf:25:6e:f4:f0:7c:8e:d7:
         b1:24:8b:73:e8:dd:d3:85:c8:68:30:d4:a3:12:d8:1c:84:a7:
         64:e4:e2:28:f4:07:e5:a5:fe:6a:0e:31:94:a7:9c:76:6c:a5:
         43:26:27:f8:45:dd:89:1f:b9:43:20:9f:c8:df:cc:c9:a3:dc:
         30:57:ca:e1:2b:09:e5:d1:8f:a4:95:f7:62:02:b6:6a:d0:0e:
         01:56:da:7f:ee:62:4d:4a:a4:c7:6b:b7:61:6d:c3:34:8a:eb:
         45:b3:2d:3e:66:f2:e1:ac:50:69:cb:76:0f:85:aa:3d:f6:ec:
         b7:0f:8f:45:49:d7:b3:fe:81:c8:e3:91:0f:fe:23:41:d8:77:
         c8:c7:d3:03:4f:4e:7e:bc:2c:ad:40:0e:f4:ac:fd:18:6b:39:
         29:89:81:70:86:4e:c2:88:6c:71:4b:7b:49:65:ed:8e:78:b0:
         4e:84:5b:a1:7a:59:c7:0d:3d:a4:33:f4:b3:72:47:2f:f9:c4:
         b6:85:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:14 2025 by rpki-client