Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File:                     qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier:          8fCIlnmm5sKIe0BE+FdeBwUZv1kFXAe2hGrivMvpVr0=
Subject key identifier:   65:8B:B0:29:B1:26:1E:CD:04:99:72:E8:37:FD:BB:40:7A:B1:3F:86
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer:       /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number:          0197
Signing time:             Mon 11 Aug 2025 03:31:14 +0000
Manifest this update:     Mon 11 Aug 2025 03:31:13 +0000
Manifest next update:     Mon 18 Aug 2025 03:31:13 +0000
Files and hashes:         1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: A7pi9YzMEhTWpQdE9HeyLU1yjo9prCCIAUP9G4ZE16E=)
                          2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: +VI30a7iGnBTntTbzqOGgbI6ufcRR7N7PHwBl75oMqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
        Validity
            Not Before: Aug 11 03:31:13 2025 GMT
            Not After : Aug 18 03:31:13 2025 GMT
        Subject: CN=68996402-c7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:2d:d7:35:af:e3:aa:3d:8e:9d:8b:40:99:
                    08:d2:3e:d4:ca:58:4a:cb:87:f6:53:9e:21:02:1f:
                    90:42:33:88:f4:5a:b6:4f:21:af:97:3b:b8:6b:09:
                    0e:5c:18:15:16:0b:91:ce:60:eb:85:a9:d5:c5:02:
                    a4:c0:6a:c7:34:15:aa:e3:22:73:9c:34:58:9a:94:
                    c2:ba:1d:d5:a5:0f:68:3a:59:02:e5:b0:14:ea:b5:
                    33:11:36:ba:64:f9:47:04:8d:06:a1:0f:10:4c:1a:
                    4a:61:27:68:e6:e1:fd:9d:4a:99:79:a7:7d:eb:42:
                    fc:62:8d:a6:81:ad:91:82:ea:ae:48:e8:19:2d:35:
                    f0:76:1b:0e:39:b7:70:a9:50:e9:00:ad:46:40:4c:
                    1f:4d:0c:ad:2e:10:69:46:ad:05:b2:8c:e9:60:fa:
                    42:82:84:35:11:0b:24:b8:f8:07:66:ee:fd:df:8b:
                    be:0d:a2:4d:85:8c:2e:92:37:b6:f5:89:85:b4:1e:
                    4d:a8:dd:8f:dc:e4:80:4f:3d:8e:6d:48:8f:0d:5b:
                    eb:fc:88:2a:23:62:49:16:df:29:ef:e4:02:ca:7a:
                    27:b9:c5:0f:f0:27:20:06:7d:15:7e:52:f1:4c:17:
                    19:11:50:5c:cc:ae:9f:50:38:6e:c9:8d:0b:65:42:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8B:B0:29:B1:26:1E:CD:04:99:72:E8:37:FD:BB:40:7A:B1:3F:86
            X509v3 Authority Key Identifier:
                keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d9:c6:95:72:b1:93:50:19:81:ad:73:fc:c6:24:c3:40:e2:
         83:d5:47:7a:8a:6e:c0:bb:d7:f5:40:8d:ea:7e:ed:17:2d:9f:
         97:25:4d:25:c2:a4:32:cb:9b:3a:03:a6:6c:51:94:63:2d:23:
         21:83:3f:28:64:4b:1a:8f:d3:78:b4:dd:21:ff:16:8e:02:f6:
         f1:99:53:20:31:07:37:ff:eb:27:e3:f5:4f:cc:a2:99:16:39:
         4f:08:a1:3e:02:3a:fe:05:55:3d:2f:ec:26:65:ef:fe:59:96:
         7a:33:20:c5:15:67:28:bb:0e:61:bd:38:5d:c2:90:e7:30:54:
         72:7c:3d:78:4c:7b:93:ec:9a:cf:11:38:fe:6c:0f:46:69:23:
         e4:63:d5:5a:86:0a:a0:6c:f1:96:9a:9a:e8:dc:03:e9:9b:32:
         8d:c0:ee:42:9e:b1:b2:7d:ac:8f:22:4f:7f:f7:06:de:4f:b2:
         58:1f:32:5e:7a:22:71:ed:49:a6:70:66:c7:99:fb:18:be:2b:
         b1:1c:0c:a8:fc:27:be:e4:11:79:5b:f9:e8:9b:34:cc:72:0d:
         91:1f:50:92:2c:9f:a8:8f:36:52:42:0b:62:90:d4:02:42:f8:
         60:69:c6:ce:80:78:9c:0d:02:db:ea:ae:0b:74:af:68:c2:96:
         83:15:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:36:10 2025 by rpki-client