Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
File:                     QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json)
Hash identifier:          LneyJquIGrF16wszb4FrEm4F67c+UEdxxJTH/A3Z4Fs=
Subject key identifier:   66:05:CB:C5:64:71:00:C4:50:B1:7F:96:E2:1F:33:2C:52:0E:C6:A8
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Certificate issuer:       /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial:       087E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
Manifest number:          086D
Signing time:             Sun 10 Aug 2025 20:40:54 +0000
Manifest this update:     Sun 10 Aug 2025 20:40:53 +0000
Manifest next update:     Sun 17 Aug 2025 20:40:53 +0000
Files and hashes:         1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: x4cvRHf+woeDwk13LQaef2KxYJx/eHWpkPia3/mhFjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
                          rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
        Validity
            Not Before: Aug 10 20:40:53 2025 GMT
            Not After : Aug 17 20:40:53 2025 GMT
        Subject: CN=689903d5-679b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:df:3e:b9:54:42:ce:84:d5:a1:e2:b8:31:
                    7e:d1:61:d1:39:3f:c6:7a:cb:19:8e:b8:09:b0:c0:
                    a1:dd:ff:a5:b8:6a:5c:d1:d3:d9:78:27:fa:e6:97:
                    7a:02:a1:69:19:02:e1:a5:03:1e:36:e2:12:6a:86:
                    f5:ec:8b:a3:e5:de:4b:5f:d5:4d:86:cb:fd:4f:90:
                    91:1c:63:ef:fe:4b:6d:9b:83:9f:3e:06:eb:66:a1:
                    c4:7f:3d:9b:d6:86:54:bb:b0:21:45:b3:f3:f0:2d:
                    84:0b:b8:5a:36:98:23:06:9c:f2:98:8b:87:88:70:
                    c7:84:5b:8a:44:40:49:ed:bb:2d:52:fd:25:58:31:
                    e4:22:56:f2:ac:ba:ca:8c:4e:9c:f7:f0:cf:b1:89:
                    1b:bc:1a:b0:36:11:97:7c:00:a8:38:3e:fb:6f:0b:
                    d0:7d:84:0b:6d:e8:eb:df:de:3f:c1:10:ce:30:30:
                    0a:a4:90:24:fe:6a:45:02:cc:9d:1f:c0:27:23:a8:
                    56:d7:3e:38:3f:22:f6:7c:e8:f1:53:7a:43:11:62:
                    fb:77:b1:c2:c8:66:58:53:58:fb:51:1d:a3:03:c5:
                    06:95:54:3a:b5:62:b9:25:e7:ed:4f:4c:53:5b:5f:
                    23:7e:d8:2c:ad:9c:a7:aa:3f:f0:0a:20:aa:04:3f:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:05:CB:C5:64:71:00:C4:50:B1:7F:96:E2:1F:33:2C:52:0E:C6:A8
            X509v3 Authority Key Identifier:
                keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:da:01:93:51:dd:4f:10:81:86:80:06:ca:47:11:33:f0:
         a2:38:de:48:47:97:05:70:e3:39:ec:31:3d:79:5e:0e:8c:cd:
         08:01:b8:65:e9:86:b9:82:b3:74:52:52:6d:86:90:3a:77:f7:
         f6:41:ab:77:70:d7:0b:1a:94:b2:86:59:03:aa:b0:78:fa:77:
         ad:f2:ca:32:d9:04:bf:2b:ee:b6:a6:c6:ac:76:ce:f9:01:c7:
         10:77:45:e1:ca:f6:0e:49:d6:3a:10:32:26:44:39:a6:94:8b:
         10:0e:bd:f3:cb:7c:b6:9a:b6:3d:a7:4b:68:0e:45:60:01:c0:
         ee:53:6b:29:f3:0b:bb:eb:a1:c7:fb:2b:83:c6:d7:7f:ff:6c:
         9f:b6:fb:6a:f9:26:17:60:78:a2:d5:b0:81:5b:ed:55:fc:a2:
         ce:6c:f1:4d:f8:d9:90:5a:2a:03:70:7a:9f:58:4c:5e:c5:7e:
         59:ea:a2:ad:5c:6b:35:c2:f7:4d:1c:15:73:49:b1:d8:d5:52:
         d3:77:7d:5c:ee:ba:61:e5:94:6e:e9:b4:13:50:15:ef:ae:99:
         17:b1:42:72:8f:12:82:31:78:6f:82:55:de:bb:1e:2d:aa:9f:
         eb:1e:72:a5:da:05:6c:4a:40:51:0d:df:c4:ff:9f:1a:ea:05:
         e1:fb:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:35 2025 by rpki-client