Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File:                     QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier:          WJgI+KBrR65gp7zdp+/xchNxbHdddAYBL3QvKUtWawQ=
Subject key identifier:   2E:51:A9:51:46:DF:5B:39:5F:1E:70:CB:04:24:84:5E:B0:3B:76:FA
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer:       /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial:       07A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number:          0717
Signing time:             Fri 08 Aug 2025 23:03:12 +0000
Manifest this update:     Fri 08 Aug 2025 23:03:12 +0000
Manifest next update:     Fri 15 Aug 2025 23:03:12 +0000
Files and hashes:         1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: eAqNp/muiyanZIBUzCuq11fDzjz0LC/wHI5IAh665LA=)
                          2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: UWNHUtR2tpu3wwcSUr5hiqVkZ+ymUeDHv4HEKQzHk7w=)
                          3: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: zZjP0B8l+TLImIu+0/08vqSXgQ0sTSWao/0VpFAxOXM=)
                          4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 4LAsvPxFJVP/38iRypn40TaMOPz9lx58IyU7j8BYYnw=)
                          5: 03BA8B36824411EF94479387C4F9AE02.roa (hash: J+iY4JEtmySFwOCqaP72SvJVDZLPvNEiLKvI7NyNzmE=)
                          6: 5FD09C68393C11EFB8A9065BC4F9AE02.roa (hash: vMbIDct9MA/MTRo5g6rG9rCZ9V47y1ZmNSqrr1liLbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
                          rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
        Validity
            Not Before: Aug  8 23:03:12 2025 GMT
            Not After : Aug 15 23:03:12 2025 GMT
        Subject: CN=68968230-688c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:5c:2a:7f:8a:d7:0e:95:32:0a:28:53:cc:
                    be:6f:58:b4:dc:97:4e:f5:b1:79:80:8b:fa:0c:28:
                    db:18:02:36:0e:0a:3f:46:04:91:e3:08:d2:7f:82:
                    0d:e1:fb:99:90:32:a1:1f:4b:cc:c7:81:47:23:43:
                    07:32:8f:84:43:ae:13:56:92:40:ee:be:66:c6:cb:
                    a9:1c:48:12:8d:f3:f1:34:55:a0:eb:b5:5c:71:04:
                    18:c4:5e:70:f0:0d:98:7b:1c:38:45:ff:58:4d:f2:
                    eb:49:40:70:88:cb:9f:11:93:68:1c:dd:12:0a:b1:
                    18:87:4d:47:2b:11:ef:47:72:6b:0f:77:da:39:b7:
                    4d:6c:85:48:f7:7d:7d:9f:34:70:dd:da:c8:a5:d4:
                    9d:ca:d7:85:16:18:5f:7c:3b:67:27:91:49:5e:2f:
                    7c:5c:2d:6d:e7:22:9a:72:9e:33:d7:9d:c8:2f:82:
                    ee:77:39:95:9f:24:22:c8:e7:e5:be:29:36:76:0e:
                    ae:ad:3e:09:36:e7:5a:e9:e0:39:f1:05:e4:2a:22:
                    73:36:b8:e9:93:e5:51:df:8e:66:2e:26:2d:4f:04:
                    ab:93:ba:c5:c2:46:9c:0c:03:6f:6d:ba:4b:6a:d7:
                    20:be:71:7b:b3:af:49:c3:94:5a:79:36:cc:c0:82:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:51:A9:51:46:DF:5B:39:5F:1E:70:CB:04:24:84:5E:B0:3B:76:FA
            X509v3 Authority Key Identifier:
                keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ec:e5:39:3c:1d:9e:c3:9a:ce:5d:3b:9f:1b:e7:2d:f6:c8:
         55:15:f9:8f:f8:e1:c7:20:0b:7b:88:67:fb:8c:1e:4e:ff:04:
         a0:c6:15:d6:be:7e:29:e8:1e:4b:b8:52:3e:cf:bf:d9:7f:96:
         8d:27:25:9e:79:a9:02:fc:5f:ee:48:af:7e:1b:9b:54:a4:47:
         4d:1a:cc:91:a7:e2:9a:43:3e:8f:ce:62:ed:93:98:01:7f:52:
         0f:c4:8b:fa:d9:22:d8:0d:3a:f3:9b:92:0c:c5:21:f5:a2:3a:
         42:52:52:07:02:6f:3e:5d:05:ca:fe:13:b0:c9:1a:7b:9a:07:
         5f:5d:5f:c1:29:85:8f:3a:c9:ed:de:75:5e:1b:1c:f2:56:55:
         0d:4f:b5:cd:af:d1:04:ca:19:be:a2:0e:0e:fd:9b:6f:29:bf:
         1a:5b:01:b4:4f:75:71:94:e8:93:fd:aa:c5:c5:53:e8:4c:50:
         2f:91:5e:50:42:09:8b:2d:e7:25:cb:2e:e2:a6:b9:17:a9:2e:
         8b:30:48:80:31:31:28:df:67:25:77:f1:8c:61:d6:6d:12:fc:
         bc:92:17:c8:a8:0c:3c:b0:e1:4f:61:e2:93:da:7d:1a:fc:af:
         c8:eb:cc:b4:a8:c1:87:14:d4:d4:19:23:1d:fc:d9:9a:b1:89:
         29:f2:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:32 2025 by rpki-client