Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
File:                     Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json)
Hash identifier:          PbwBbrUbI7QmyWvfW/XDDbfMllQmPvQ22AHWOQCEMPI=
Subject key identifier:   7F:BB:31:87:51:F0:E0:15:85:96:F3:38:DC:58:CB:6C:31:43:79:A1
Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C
Certificate issuer:       /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
Manifest number:          39
Signing time:             Thu 07 Aug 2025 08:11:39 +0000
Manifest this update:     Thu 07 Aug 2025 08:11:38 +0000
Manifest next update:     Thu 14 Aug 2025 08:11:38 +0000
Files and hashes:         1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: tPBpRMw63SEPDb1DNHn5U22/rVo6r8kLDGlbM0COwSs=)
                          2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: gqxaCaR+XnfSGCVk4MotcSInE621jLFW8PAuLJkFUyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl
                          rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
        Validity
            Not Before: Aug  7 08:11:38 2025 GMT
            Not After : Aug 14 08:11:38 2025 GMT
        Subject: CN=68945fbb-aae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:0f:d7:09:1f:89:8c:ab:31:49:c9:03:bc:
                    c7:9c:7c:98:1a:10:ba:c4:b2:d8:aa:5c:ab:25:7d:
                    cc:dd:2e:c7:ab:55:00:ae:8d:51:d2:8a:1d:d8:3f:
                    04:ab:9d:48:f7:3c:67:1f:af:11:bb:06:a1:d9:8a:
                    ee:ad:a7:2b:84:c4:6a:3e:39:85:33:92:04:71:de:
                    36:0a:e8:8a:6c:c1:4c:ac:f6:35:0f:b7:6e:95:4c:
                    e3:08:65:dc:e7:31:8f:95:59:0d:3c:3d:d4:32:cc:
                    c7:e4:a7:8a:a4:c5:b0:b0:8f:0c:ee:7f:8a:6a:a6:
                    63:dd:47:74:0a:e1:83:20:89:21:df:da:b1:fd:c7:
                    58:7c:27:c9:8b:71:01:3e:8e:a9:5c:85:fc:88:7e:
                    c1:5d:29:61:b7:86:08:5a:08:29:3b:d0:81:d3:45:
                    e9:54:5a:6c:b6:f1:c7:cf:fd:86:40:66:15:79:e1:
                    89:57:0d:1d:fe:73:9c:2f:5d:b0:82:b2:4d:8e:52:
                    7c:60:46:ab:b4:6d:a0:e3:fe:0d:f1:cb:aa:1c:b8:
                    3b:de:9c:4e:97:d1:06:8b:54:8b:4a:31:e5:3c:b0:
                    bb:6a:7e:a3:d8:8a:67:1e:3e:ef:9f:46:2a:c9:bc:
                    4b:dc:ed:8a:4c:41:d2:2e:82:1a:d4:1f:50:96:8e:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BB:31:87:51:F0:E0:15:85:96:F3:38:DC:58:CB:6C:31:43:79:A1
            X509v3 Authority Key Identifier:
                keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b1:f3:35:0f:7c:9e:8b:91:36:e4:f5:09:cb:3b:a0:43:49:
         92:09:c9:a3:2f:51:43:51:8f:82:6a:ce:a6:35:7f:77:bf:27:
         4e:30:33:4d:c4:76:7f:1d:1b:ee:a1:0a:07:0c:29:b8:20:d3:
         19:ca:1a:46:27:35:fa:63:43:6e:df:85:45:26:55:5b:c5:4b:
         0c:72:ab:64:b6:14:4b:ae:28:53:25:8e:a8:d8:dc:dc:17:8a:
         25:a7:9e:71:c0:25:47:17:2d:41:bd:67:9e:93:a1:75:69:ec:
         e6:08:a6:63:61:59:e3:e9:2a:1d:69:bf:83:52:62:7f:00:40:
         fb:ef:94:72:6e:ae:c7:81:f0:26:e3:f7:df:64:44:8f:8a:f4:
         9d:ac:f7:65:c7:59:e1:b6:5d:1c:9f:52:9d:0b:d0:9e:e5:10:
         64:48:55:ba:54:9d:17:70:2b:9d:91:0d:6f:ef:1f:2e:1d:40:
         7d:b1:2d:60:b6:42:94:01:90:0e:8d:1f:f2:09:bb:1d:43:4b:
         9b:f2:7e:27:9f:d1:14:74:c4:d5:a4:05:f4:ee:72:e7:1d:ed:
         03:43:13:1d:a5:28:26:e9:54:bb:d3:0f:83:4e:10:f9:b7:a9:
         a1:3d:60:f2:a1:ae:49:e2:f4:20:30:78:52:69:8f:7d:7f:fb:
         51:df:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:47:08 2025 by rpki-client