Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
File:                     qTjv-5Y64q628LJmWWuKQSN3ydk.mft (raw, json)
Hash identifier:          8zv1a5YrKjKM9Z/BIxOr2TsJ1vjrUN90FjaVbbhvlok=
Subject key identifier:   CF:1D:5F:52:D9:D7:67:1A:BB:EB:22:72:9C:83:FD:FC:FA:1A:99:34
Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9
Certificate issuer:       /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
Manifest number:          29
Signing time:             Sat 09 Aug 2025 08:15:00 +0000
Manifest this update:     Sat 09 Aug 2025 08:14:59 +0000
Manifest next update:     Sat 16 Aug 2025 08:14:59 +0000
Files and hashes:         1: qTjv-5Y64q628LJmWWuKQSN3ydk.crl (hash: gNorT+ztTcWU3P+ISQ9X0J+2HiwLXl/3YAJl5kpTSFY=)
                          2: 605C88EC362811F08A82E10DC4F9AE02.roa (hash: ICDTjfptMFLAWgu+lY50xT8rCv9IQat8S3hCjv+v8vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl
                          rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
        Validity
            Not Before: Aug  9 08:14:59 2025 GMT
            Not After : Aug 16 08:14:59 2025 GMT
        Subject: CN=68970383-7297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:c0:28:f5:06:ae:cf:2f:ee:3f:63:46:35:
                    b0:15:af:64:97:ce:b9:21:45:e9:31:8a:b0:45:c6:
                    7d:b7:d8:73:c8:15:bf:56:e1:8a:d8:b1:c0:5f:e6:
                    9d:46:c3:30:e4:2f:d9:ca:f1:99:fa:cc:49:eb:27:
                    25:3a:52:cd:be:b7:b0:26:e5:36:95:18:b3:df:ab:
                    0c:ac:01:fb:7a:e6:2d:f5:92:88:bb:df:ba:a4:9b:
                    a1:83:da:fe:09:9d:15:79:b2:35:a9:6e:3c:ba:8a:
                    7b:40:57:5e:b5:53:d4:57:27:d5:f6:4b:43:5d:82:
                    af:96:f1:50:59:50:5f:e3:37:3b:30:19:ee:81:f0:
                    2f:52:de:5d:55:18:47:be:82:ec:6a:12:83:23:ef:
                    4e:3d:23:41:78:66:4b:b8:ec:fc:4a:b5:7a:24:99:
                    7b:4d:14:af:0f:44:c3:28:d5:84:02:26:09:e5:d7:
                    a6:b5:65:1b:95:89:c4:77:b9:4e:2c:88:64:67:33:
                    e5:47:69:e3:8d:86:b7:d2:48:18:60:86:3d:b9:85:
                    41:6d:a3:91:b9:60:73:09:1e:63:f1:87:1b:9b:71:
                    86:f3:e7:a2:67:69:c2:0d:94:83:a6:ff:54:93:62:
                    38:b1:61:9f:ac:7d:b9:dd:9d:51:5e:34:9b:6b:1a:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1D:5F:52:D9:D7:67:1A:BB:EB:22:72:9C:83:FD:FC:FA:1A:99:34
            X509v3 Authority Key Identifier:
                keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:44:ce:59:8f:ab:61:a6:99:f1:a2:5c:73:cf:f2:99:7e:a1:
         5a:3b:15:c5:d3:73:04:49:a5:3e:c6:eb:dd:39:45:65:37:52:
         9c:0a:ef:a2:fb:36:70:bd:9e:8a:7b:2a:20:c5:e7:ce:2e:b2:
         8b:44:4d:81:a0:90:88:98:97:68:8c:0e:10:5f:ae:46:c4:73:
         97:24:60:32:9d:b8:59:45:7f:19:18:3b:e6:3a:8e:0f:22:1c:
         38:41:ec:79:09:31:22:92:ca:b4:00:bf:75:e5:68:f9:3d:07:
         cb:98:59:ab:88:12:7c:d9:a2:c0:04:51:fa:fc:75:91:51:ef:
         78:45:c8:89:aa:bd:ee:e7:e5:9b:32:06:c1:33:a6:2e:50:7b:
         51:72:69:97:99:5e:35:3a:ec:60:96:56:c5:8a:ce:88:a6:fd:
         74:5a:36:ca:6f:81:de:c0:3c:9f:2d:f6:70:5a:b7:40:98:ba:
         b1:bb:a6:c7:fd:a9:85:08:d7:c6:19:c6:2b:2d:f0:62:2e:00:
         06:c6:ae:12:dd:32:eb:11:94:4e:87:b3:45:05:5f:fa:cf:7b:
         c5:87:a7:18:66:92:ab:8d:5d:6e:7d:43:d4:f9:11:bf:7e:47:
         0c:2a:a1:a4:6d:51:ba:d1:5a:47:4c:19:ad:00:8f:89:70:40:
         4e:47:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:21 2025 by rpki-client