Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
File:                     qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json)
Hash identifier:          EC7XtxZj/EhPJdeWnhoUubntpT6xWuJKjWmp2ZxSbfk=
Subject key identifier:   A0:9C:AB:79:F2:FB:3C:F5:0E:D2:B2:EA:6F:FE:1A:5E:D3:F1:1C:82
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Certificate issuer:       /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial:       1C8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
Manifest number:          1C67
Signing time:             Sun 10 Aug 2025 16:10:12 +0000
Manifest this update:     Sun 10 Aug 2025 16:10:11 +0000
Manifest next update:     Sun 17 Aug 2025 16:10:11 +0000
Files and hashes:         1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: yL+fWknCihpjhsZgNtIIkcXr+fPF+XV1CUrZIDZR7/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7307 (0x1c8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
        Validity
            Not Before: Aug 10 16:10:11 2025 GMT
            Not After : Aug 17 16:10:11 2025 GMT
        Subject: CN=6898c464-35fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:a0:50:50:a4:4b:5c:22:c5:ee:25:22:2c:
                    c1:26:ec:fd:35:c0:1b:90:c8:61:4b:21:d5:b5:e1:
                    c6:dd:d0:2c:66:64:22:61:cd:20:83:b4:b3:10:e3:
                    38:bd:19:4b:7d:80:1d:58:74:6b:46:1c:31:b8:19:
                    3d:97:ff:d7:ed:64:8d:88:b9:0a:e2:c0:4d:68:7e:
                    ef:cb:00:8a:5b:12:1e:81:c1:92:2f:db:e6:3a:c9:
                    1f:4b:a5:ac:64:57:ad:7b:5d:d7:8d:18:86:39:db:
                    34:96:08:4d:e0:62:3a:b4:09:33:d6:ef:42:88:f4:
                    69:af:f7:e9:de:a1:4c:59:2f:1b:49:c8:0a:2e:10:
                    6d:2b:d3:7b:b9:09:bd:5a:63:96:44:2a:ba:c0:45:
                    bb:e9:02:8f:1c:3b:4a:f0:0f:d4:7f:4e:38:40:b0:
                    de:f9:a7:bd:6f:eb:c0:36:5d:a2:c9:b4:bd:cf:35:
                    9f:97:ca:cc:56:01:19:59:48:a3:31:8b:b0:b7:87:
                    27:48:68:c1:93:61:8a:29:26:d1:3e:c2:7d:e1:be:
                    e6:d8:23:5f:82:43:9a:8d:c7:14:cd:ca:4d:bd:1c:
                    3b:86:55:e2:b3:2f:ed:80:00:21:c7:ec:04:a9:d7:
                    ae:24:72:c5:c1:4b:0f:0c:a0:00:33:ba:a3:c7:02:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9C:AB:79:F2:FB:3C:F5:0E:D2:B2:EA:6F:FE:1A:5E:D3:F1:1C:82
            X509v3 Authority Key Identifier:
                keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f5:f6:3d:05:66:89:e3:67:64:6f:d8:8b:5b:0d:b4:ee:b3:
         3a:ef:10:e0:02:68:9d:8c:04:28:5d:05:33:51:bf:7a:fc:25:
         a6:e4:a8:4f:14:14:a5:8d:16:91:1b:4c:c5:7d:0e:0a:40:6f:
         17:df:59:d3:02:6b:fd:9f:9b:1f:c9:39:64:bd:ad:a6:48:b5:
         7a:5d:29:8f:3c:1d:a4:1c:3d:ee:fa:dd:b9:2e:63:9f:f5:10:
         1d:25:66:bf:0a:2b:e0:89:60:83:36:64:8b:18:ee:fc:5d:c9:
         5e:70:16:09:06:d3:00:c3:37:3b:07:d8:76:ec:ed:84:91:fa:
         f1:62:22:fd:ae:af:2d:a9:aa:56:ca:ee:09:02:b2:5e:68:da:
         33:9f:c7:80:dd:a1:8e:80:6e:31:d0:48:e5:b5:d1:e4:e7:c8:
         2b:9c:6e:de:08:67:98:9f:a4:39:b9:fd:16:20:2f:43:95:c6:
         0b:19:6d:22:5c:8e:f9:5f:a0:8c:7c:5d:78:a2:de:f4:ca:30:
         3b:67:78:dc:98:79:41:79:5d:0f:84:b5:6a:e2:e8:51:8f:bb:
         d0:af:76:bc:af:ac:ff:1e:61:12:65:98:31:07:87:a8:bd:dd:
         0f:9c:94:d7:ad:28:49:f7:70:0c:09:49:15:19:88:0a:59:7c:
         45:d0:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:03 2025 by rpki-client