Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File:                     qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier:          9l4o75DG/nwcQ4x9MuOng0RRKGfpo0OxJvPoflS8HQ0=
Subject key identifier:   5F:41:B8:79:46:91:17:8E:48:0D:FB:7D:13:0E:F8:16:27:F9:4B:A5
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1AC6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number:          1AB1
Signing time:             Sat 02 Aug 2025 15:44:12 +0000
Manifest this update:     Sat 02 Aug 2025 15:44:11 +0000
Manifest next update:     Sat 09 Aug 2025 15:44:11 +0000
Files and hashes:         1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: /zjXc0O8aULBgA7EUKu+aWvTtgjfBFLR/i3DXWh90DM=)
                          2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=)
                          3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 15:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6854 (0x1ac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: Aug  2 15:44:11 2025 GMT
            Not After : Aug  9 15:44:11 2025 GMT
        Subject: CN=688e324c-11f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:f1:6f:8d:0c:8f:8b:80:04:1d:5a:71:d0:
                    1c:84:c6:d9:3d:e7:bb:e6:d4:f1:ac:01:a5:4a:52:
                    4b:eb:9a:d5:fd:9f:ba:da:31:15:e4:52:9a:f7:5c:
                    c8:c2:9d:be:c2:07:7e:04:33:e4:c8:8e:7e:d9:44:
                    95:16:a7:fc:21:8f:95:4c:bf:2f:c8:dc:e0:bf:cc:
                    7b:d7:a4:e0:97:4c:b3:09:03:95:7d:4c:4b:9a:97:
                    cb:74:3a:15:66:88:48:0a:92:ce:6f:3f:d4:26:ae:
                    aa:74:e4:3e:ac:80:5a:07:b7:9c:33:35:f1:e7:74:
                    02:b5:cc:52:d9:a1:07:5b:37:68:f2:c3:59:81:f1:
                    1c:15:b9:14:57:05:f4:ee:56:39:e4:3f:d9:a1:12:
                    f2:9a:5f:15:f3:58:91:8e:44:62:a0:c0:b5:e9:47:
                    a9:bd:00:36:19:82:c2:9a:e6:8b:0b:80:10:d1:9a:
                    12:1d:5b:dc:e3:e7:fe:86:1e:48:f6:2f:28:70:d5:
                    e2:4f:85:9a:96:ab:68:bf:68:1e:4b:14:94:dd:fd:
                    7c:95:43:fd:f1:d0:84:94:c5:cc:38:b4:82:df:6c:
                    82:43:03:d6:97:48:de:d3:82:d0:65:08:c3:88:06:
                    c7:39:6b:6a:a6:08:57:ad:f2:e8:71:29:c4:f6:cd:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:41:B8:79:46:91:17:8E:48:0D:FB:7D:13:0E:F8:16:27:F9:4B:A5
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:31:6f:87:25:7e:7b:b6:cf:3e:5e:d9:45:19:43:1f:6d:bb:
         d6:dd:38:00:cf:66:c0:5c:6b:1b:78:7d:aa:91:e6:d4:9e:1b:
         2f:2f:a5:dc:74:68:d0:77:e5:b0:0e:f7:df:05:97:5b:d0:ad:
         54:30:6d:e2:7b:ec:61:a3:70:09:0a:44:cc:54:ae:21:8f:4c:
         14:70:f3:99:6e:08:be:57:4b:44:98:b0:bb:96:87:7d:bf:af:
         21:d7:3b:04:1e:e3:ff:ff:e4:c9:b3:b5:29:18:c3:ba:87:61:
         a4:75:28:79:db:11:a2:7e:ee:84:84:91:78:ca:11:59:75:ce:
         d4:7a:f3:d5:aa:2a:77:99:9e:db:37:af:5b:7f:79:6a:0f:4d:
         70:5d:80:be:06:c6:b8:2c:ed:80:81:eb:05:d5:91:cb:49:b7:
         60:23:6d:6c:a7:cd:9a:be:13:58:14:a1:27:dd:78:61:72:b2:
         34:04:41:c9:78:cc:cf:7d:d8:0a:a0:8f:50:b0:a3:18:70:0c:
         d7:84:7b:3f:c5:a3:da:bb:0a:6c:a8:b1:a5:dd:5e:c4:81:df:
         e6:fb:72:2a:6c:14:5a:db:09:c9:42:a4:c0:a0:f4:68:7c:c0:
         39:90:09:71:c6:49:58:11:63:8d:11:3c:69:14:4b:c3:d9:c7:
         c4:6d:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:10 2025 by rpki-client