Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
File:                     qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json)
Hash identifier:          3QpSgHLPOc4EeJkGyWTSDbY297Q4K+RbIGsJk3A67gU=
Subject key identifier:   30:E8:BC:BA:C7:EC:99:DE:D2:56:8A:66:30:A4:77:0F:99:70:CA:45
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Certificate issuer:       /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial:       3236
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
Manifest number:          322D
Signing time:             Sun 10 Aug 2025 15:22:30 +0000
Manifest this update:     Sun 10 Aug 2025 15:22:29 +0000
Manifest next update:     Sun 17 Aug 2025 15:22:29 +0000
Files and hashes:         1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: N5uIg5h/MtW4cXkmQJqcybVOtU7mKccBi6q5X1HKg24=)
                          2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
                          rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12854 (0x3236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
        Validity
            Not Before: Aug 10 15:22:29 2025 GMT
            Not After : Aug 17 15:22:29 2025 GMT
        Subject: CN=6898b936-c806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:ff:3c:e3:9c:81:3c:4e:8d:17:14:55:53:
                    58:ec:07:b8:37:7b:c7:bf:9f:13:e0:6a:3a:e6:3b:
                    eb:e0:20:0f:32:6e:56:e2:d2:7a:52:13:d8:07:35:
                    d9:ee:99:5a:e4:28:de:9c:8c:56:8e:0c:0a:88:1f:
                    55:b0:31:e4:cd:45:e7:80:e1:d6:40:2e:de:c6:40:
                    a2:a3:26:3c:c5:9a:45:ef:17:62:73:b8:eb:43:b6:
                    fc:bc:14:b4:95:bd:b4:61:2e:67:30:1c:ba:e4:69:
                    5b:7c:b9:5a:b4:68:52:28:80:e2:d0:64:78:b9:f4:
                    eb:00:a6:78:25:f2:11:e7:a2:80:ba:cc:c9:e6:2e:
                    68:fc:fb:44:5c:74:0e:72:f9:2c:28:59:0c:77:9f:
                    7d:2c:23:88:1a:39:45:60:dd:d1:91:c9:2d:2a:10:
                    07:5d:be:a4:f0:66:e1:ae:13:d1:68:39:46:f7:9d:
                    d1:ea:6b:13:7d:21:f1:fe:ce:00:03:ae:cb:ab:a3:
                    8d:26:66:3a:54:50:90:c0:05:8c:bc:6b:e7:07:9b:
                    87:32:54:ca:54:82:fd:83:14:08:ca:8c:a4:0d:7c:
                    9c:7e:01:19:c0:db:14:18:19:db:51:9b:55:56:fb:
                    3a:87:7c:92:7e:74:a2:48:cb:83:e7:1e:0f:09:7f:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E8:BC:BA:C7:EC:99:DE:D2:56:8A:66:30:A4:77:0F:99:70:CA:45
            X509v3 Authority Key Identifier:
                keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:93:5c:4d:1c:8e:64:3a:2c:fb:1e:93:64:94:e4:78:d8:
         94:c5:d0:af:d2:d7:a1:93:b9:74:a5:30:b0:67:c5:98:db:9b:
         98:b6:39:75:f4:16:16:d6:56:0d:71:17:47:65:7a:5d:9d:4f:
         e4:51:42:71:da:8c:db:9d:71:21:85:86:b3:00:57:9a:30:f8:
         ea:88:12:6c:ff:36:b4:17:a6:39:ff:bf:5f:1b:4c:75:61:4a:
         53:dc:cc:55:97:4a:37:b3:e7:5a:cd:27:0f:b0:1d:a2:17:8c:
         18:cd:c6:44:f3:79:95:95:30:80:db:f4:d0:a1:10:3b:9e:e1:
         fd:ad:95:f3:56:a0:bd:9c:4d:84:fb:de:68:90:dc:97:cb:74:
         31:92:0e:ab:4e:75:57:58:88:6e:ac:b4:04:35:43:e1:b4:b2:
         4b:1a:f5:53:7f:1a:8a:39:11:85:e7:db:f4:b5:d4:50:d2:01:
         01:8a:5d:06:c4:e7:d9:55:42:bf:40:01:4a:db:d7:27:d0:8f:
         cf:5b:2a:33:62:42:9a:a7:fc:ca:2c:1e:7a:01:ac:25:2f:01:
         fa:3c:8d:e9:82:97:3e:e2:bc:73:c3:0d:1b:74:c5:e2:a0:76:
         3a:10:f7:8c:ff:6e:b1:66:3a:af:69:50:e3:57:42:2a:d0:26:
         41:6d:ed:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU0NDcxMTAvBgNVBAUTKEE4M0M2RUNFMjIzM0I2Q0I4Q0MwRUI2MTNGMEE5NTJD
ODMzQzAzQTEwHhcNMjUwODEwMTUyMjI5WhcNMjUwODE3MTUyMjI5WjAYMRYwFAYD
VQQDEw02ODk4YjkzNi1jODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEj/POOcgTxOjRcUVVNY7Ae4N3vHv58T4Go65jvr4CAPMm5W4tJ6UhPYBzXZ
7pla5CjenIxWjgwKiB9VsDHkzUXngOHWQC7exkCioyY8xZpF7xdic7jrQ7b8vBS0
lb20YS5nMBy65GlbfLlatGhSKIDi0GR4ufTrAKZ4JfIR56KAuszJ5i5o/PtEXHQO
cvksKFkMd599LCOIGjlFYN3RkcktKhAHXb6k8GbhrhPRaDlG953R6msTfSHx/s4A
A67Lq6ONJmY6VFCQwAWMvGvnB5uHMlTKVIL9gxQIyoykDXycfgEZwNsUGBnbUZtV
Vvs6h3ySfnSiSMuD5x4PCX8iQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDovLrH
7Jne0laKZjCkdw+ZcMpFMB8GA1UdIwQYMBaAFKg8bs4iM7bLjMDrYT8KlSyDPAOh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ0Ny84MUIwRjE1QzlD
NzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRzdU13T3RoUHdxVkxJTThB
NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FEeHV6aUl6dHN1TXdPdGhQd3FWTElNOEE2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTQ0Ny84MUIwRjE1QzlDNzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRz
dU13T3RoUHdxVkxJTThBNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9QpNcTRyOZDos+x6TZJTkeNiUxdCv0tehk7l0pTCwZ8WY25uYtjl1
9BYW1lYNcRdHZXpdnU/kUUJx2ozbnXEhhYazAFeaMPjqiBJs/za0F6Y5/79fG0x1
YUpT3MxVl0o3s+dazScPsB2iF4wYzcZE83mVlTCA2/TQoRA7nuH9rZXzVqC9nE2E
+95okNyXy3Qxkg6rTnVXWIhurLQENUPhtLJLGvVTfxqKORGF59v0tdRQ0gEBil0G
xOfZVUK/QAFK29cn0I/PWyozYkKap/zKLB56AawlLwH6PI3pgpc+4rxzww0bdMXi
oHY6EPeM/26xZjqvaVDjV0Iq0CZBbe17
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:44 2025 by rpki-client