Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File:                     cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier:          j5dWGXjwmI/9zGBeqQht96gS4VRbNCVfZQTavq0PYq0=
Subject key identifier:   2F:26:EF:05:75:5E:14:17:F1:75:C5:17:32:D0:E4:68:EA:54:26:4B
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer:       /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial:       34A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number:          34A6
Signing time:             Fri 08 Aug 2025 15:17:13 +0000
Manifest this update:     Fri 08 Aug 2025 15:17:12 +0000
Manifest next update:     Fri 15 Aug 2025 15:17:12 +0000
Files and hashes:         1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: jf3qQFhS8Y3xtaAitEryg4YB2Ut5Vyr39uohvcN4mr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
                          rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13478 (0x34a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
        Validity
            Not Before: Aug  8 15:17:12 2025 GMT
            Not After : Aug 15 15:17:12 2025 GMT
        Subject: CN=689614f9-ce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:68:3c:89:da:b5:77:da:22:21:8d:98:65:
                    45:da:43:94:45:28:48:88:41:a3:5e:26:4b:31:f7:
                    02:c1:df:67:86:a5:ac:4f:69:ee:80:25:8a:ed:6c:
                    21:14:9b:4e:2f:ef:66:79:c2:90:80:ce:18:71:81:
                    13:2b:e0:c3:9c:5a:83:10:ee:c8:a7:4c:6f:43:7c:
                    85:6a:66:1b:97:95:dc:68:2b:ac:dc:25:ea:10:88:
                    84:8b:87:19:05:87:0d:6d:33:45:e5:50:da:94:d0:
                    1f:24:08:64:00:ce:90:d0:ea:5a:e2:25:e8:cd:89:
                    07:fb:b7:b7:8c:43:85:f4:a0:54:0b:d5:fe:c5:a0:
                    c9:aa:57:ac:48:a2:eb:83:b7:7b:21:05:16:ac:33:
                    0f:c6:7c:98:d0:d7:1c:12:a8:80:ce:b2:6e:9d:13:
                    e1:32:79:26:34:54:9b:c9:a8:5d:bf:21:56:24:00:
                    d2:37:49:86:06:d7:f1:cf:cc:a3:73:d9:6f:02:45:
                    22:d0:6f:a9:3a:84:e2:ce:24:28:03:26:68:10:3c:
                    76:c5:e8:65:43:f6:2d:cb:92:75:04:18:70:5e:b3:
                    c4:b4:74:09:98:a0:bc:9e:aa:39:c8:6d:b8:ee:98:
                    76:ad:c0:c3:f7:27:fe:1d:cc:17:ad:89:d3:db:df:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:26:EF:05:75:5E:14:17:F1:75:C5:17:32:D0:E4:68:EA:54:26:4B
            X509v3 Authority Key Identifier:
                keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e7:c3:fc:14:31:6e:ea:20:1c:06:cd:0b:7e:1b:58:24:77:
         c3:47:52:5c:94:7a:19:36:60:4e:dc:71:74:e8:34:b9:37:62:
         73:ea:81:2c:c6:ac:7c:b4:e6:0d:a5:3e:75:64:99:2c:c7:45:
         64:e3:d8:ad:e5:ce:95:12:4c:43:1a:e7:5c:92:a0:1e:da:7a:
         f1:81:49:33:99:3e:61:be:df:67:d7:2d:a1:d1:56:e7:8e:8e:
         df:ee:3d:85:89:3a:f0:67:a0:10:da:b4:df:e1:1c:05:05:5e:
         5b:fb:6d:8b:ca:1e:4a:e9:da:98:f7:22:dd:7b:8b:ba:38:fd:
         ed:25:09:c3:8e:2e:03:7f:24:f0:e6:83:87:8e:62:cc:9d:64:
         4c:45:09:47:95:02:35:d3:e0:5e:ee:a9:d2:9c:43:ba:62:4e:
         63:86:7d:a3:ea:a1:d8:15:51:31:82:a3:4a:b2:24:1e:90:ba:
         7d:56:0b:9d:08:ae:81:a0:50:4a:ed:cd:4d:34:0c:67:ac:ec:
         f9:92:06:25:2f:b0:ea:6d:c6:be:f0:0e:f1:80:51:41:3d:92:
         de:26:77:3c:8b:e5:42:bc:21:44:77:cf:94:7c:fc:fd:05:7d:
         fc:99:97:a2:9d:2e:58:3b:d0:35:93:9b:c0:a5:2e:fe:07:a7:
         21:da:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:19 2025 by rpki-client