Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File:                     _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier:          Hwo+RcE7zT2pJ2WPg1Noq/2b2hBBna74Qt4udEiekRg=
Subject key identifier:   1B:61:0D:E1:84:7A:E1:2B:85:9C:D7:92:4C:4C:64:3F:95:AC:56:B2
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number:          D8
Signing time:             Tue 05 Aug 2025 06:06:12 +0000
Manifest this update:     Tue 05 Aug 2025 06:06:11 +0000
Manifest next update:     Tue 12 Aug 2025 06:06:11 +0000
Files and hashes:         1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: gTy9aQFNmpcvX/k8hAItYSNoeVtXfDUM30TTh7oqGWI=)
                          2: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: LbYezAC7HKWWVmK2xlsMHinqwJv1mR2uQHqkC2s/mFI=)
                          3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: cnxNZMj+QIRmXguv60UDDfKFR7YxS7hEgIs9b4OWAQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
                          rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 06:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
        Validity
            Not Before: Aug  5 06:06:11 2025 GMT
            Not After : Aug 12 06:06:11 2025 GMT
        Subject: CN=68919f54-0a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:af:35:f5:7d:0a:a6:10:95:97:72:e0:44:
                    09:4c:87:02:af:65:55:a5:03:12:a4:83:37:d1:bd:
                    a7:b1:10:d7:82:b0:d9:63:c7:ef:41:76:1e:2c:37:
                    e8:cf:62:dc:c1:4f:03:d9:e4:af:2d:2e:f9:23:ac:
                    7e:d1:d4:79:52:14:8c:e4:89:02:cf:db:50:96:9c:
                    cb:5e:23:d0:99:69:09:45:19:c5:41:ba:f0:bf:dd:
                    3b:ef:8a:12:ba:20:d1:c0:62:1b:ed:90:69:cc:30:
                    47:c4:8d:17:a4:48:03:39:c1:9c:b9:1d:22:a8:9f:
                    c5:18:6f:92:b8:2f:20:87:82:d4:60:9a:44:70:da:
                    07:f6:97:0d:cb:c2:57:4e:af:25:dc:47:dd:45:bd:
                    e5:ee:34:06:ec:63:e6:e6:ef:96:44:63:67:23:64:
                    c2:38:65:3b:28:43:56:8f:ba:f1:5a:07:a2:d7:2a:
                    d4:59:f7:d3:6b:1b:d7:e0:f2:96:3a:0b:d3:c2:93:
                    ac:5e:4a:ee:33:36:e5:00:22:cd:94:e7:16:62:61:
                    9f:03:8d:f6:36:7d:03:5b:e4:b9:e0:4c:2c:08:42:
                    4a:ac:b9:18:5b:e3:31:a0:92:7d:d8:9f:22:05:21:
                    93:1a:e8:9a:2d:8a:65:5c:a8:64:65:71:b8:a3:e1:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:0D:E1:84:7A:E1:2B:85:9C:D7:92:4C:4C:64:3F:95:AC:56:B2
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:7e:f7:19:05:dc:af:19:3d:2a:72:8c:41:94:ce:8b:43:
         db:8a:65:9a:90:15:4c:11:cb:90:8b:69:79:d8:b6:83:ad:5c:
         cf:c4:a9:8c:1f:06:19:11:19:37:91:03:a7:9c:b8:d7:20:7c:
         96:ed:32:7e:83:50:e5:5d:43:13:7b:c7:66:51:9a:b5:7c:ea:
         0f:5b:9f:59:01:e3:d3:6e:c2:47:ce:62:dc:b3:72:34:33:0e:
         52:b3:44:5f:61:2f:a5:cd:f7:22:7a:9d:3a:b4:97:28:43:ea:
         91:09:90:cd:e8:f3:16:ad:ed:df:5b:3f:11:24:fa:72:d1:40:
         73:3d:e0:e1:e2:e8:b6:e1:2d:0c:1b:3c:2f:ed:e7:f1:98:71:
         ed:d1:4f:1a:57:16:10:e5:97:06:b6:51:4e:fc:24:14:5b:39:
         3a:b9:cf:a2:87:99:ff:09:a3:5a:01:91:36:c8:bc:dd:57:5d:
         a2:52:2e:3a:74:ba:ac:a2:64:b0:81:17:8d:4c:91:9d:6f:c9:
         5c:cc:73:fe:ad:c7:c0:e3:61:48:3f:1a:08:dc:b6:66:a3:d6:
         84:85:e4:ab:a9:5f:c4:f3:21:94:fd:3b:a8:47:a2:bc:45:65:
         9b:ab:71:9c:6f:e8:83:b2:07:70:c6:8a:88:b1:92:ab:e9:5f:
         df:af:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:48 2025 by rpki-client