Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
File:                     QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json)
Hash identifier:          mu6GCBcLqaihyVlzcEnKyNt+wE+6fMOLg94L9WQiNes=
Subject key identifier:   44:7E:A1:74:13:1C:13:36:F0:E6:F6:01:20:50:33:40:A0:E9:3D:4A
Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
Certificate issuer:       /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
Manifest number:          30
Signing time:             Sat 09 Aug 2025 08:10:13 +0000
Manifest this update:     Sat 09 Aug 2025 08:10:12 +0000
Manifest next update:     Sat 16 Aug 2025 08:10:12 +0000
Files and hashes:         1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: z6xhIEpZ52F9kYwADtWARh8csXnGMiQ7lcFUAAKIqiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
        Validity
            Not Before: Aug  9 08:10:12 2025 GMT
            Not After : Aug 16 08:10:12 2025 GMT
        Subject: CN=68970264-06f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:d9:27:db:42:88:84:ca:3f:02:51:7a:75:
                    a7:0f:d3:9a:96:17:46:b6:9b:b9:e1:90:7f:fc:83:
                    51:b1:0a:de:7a:6c:66:1c:01:24:85:45:fa:7e:cd:
                    7d:d8:4f:68:2c:96:46:0d:b5:3e:80:3f:5e:70:71:
                    79:12:d1:21:33:f0:0c:81:24:30:96:35:f2:27:85:
                    c1:65:58:1c:4e:22:5b:ff:74:6d:89:5e:cd:20:bb:
                    ef:cc:be:5c:1f:aa:14:9b:32:78:f9:92:39:6d:62:
                    73:f6:c2:0b:d6:2d:12:e6:25:dd:c6:60:7c:aa:93:
                    f6:13:1c:b4:33:48:df:d2:d9:e3:6e:ee:fb:1e:95:
                    4c:f0:69:cf:52:6e:90:5a:e5:fa:d7:09:a0:43:6b:
                    bc:3c:78:b0:0f:4d:0b:a3:a7:a6:3f:ef:20:9b:7e:
                    85:35:79:14:ad:60:d0:e2:de:70:c8:08:0c:80:e8:
                    2f:30:3a:ec:11:8a:0a:e2:a1:b7:04:88:46:3d:bc:
                    73:67:f2:fe:0f:28:4b:23:b1:7a:d4:82:0d:65:74:
                    4c:85:3e:39:32:10:b6:0f:47:5c:04:46:52:0e:3e:
                    64:84:8e:00:fd:2e:17:9d:82:58:bf:7a:62:8c:a6:
                    06:54:35:45:dc:0f:37:eb:82:59:8e:75:b7:bc:dc:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7E:A1:74:13:1C:13:36:F0:E6:F6:01:20:50:33:40:A0:E9:3D:4A
            X509v3 Authority Key Identifier:
                keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e9:69:d5:54:0d:b0:c1:0d:9f:3f:6f:4b:37:5d:96:d8:3f:
         ec:52:bc:0e:80:95:eb:b1:f4:03:d4:e7:56:d1:bd:bf:66:9a:
         60:64:25:7c:b1:96:dd:16:79:08:48:9c:50:4c:07:f1:1f:d4:
         3c:f6:57:22:66:d6:eb:ce:e6:9a:c7:97:f7:a3:e5:a3:cb:57:
         41:f1:f1:86:a5:52:34:97:bb:e2:19:4d:50:83:93:1f:f5:e7:
         d3:d8:6a:11:2a:dd:13:ef:be:07:08:e8:b3:04:14:48:c5:24:
         cf:5b:27:87:b5:c7:3c:44:16:15:6a:63:b2:69:c0:17:d0:d1:
         af:36:60:75:52:f7:83:c5:15:d2:d5:4c:f4:36:76:85:09:e1:
         c0:79:63:a5:7d:60:92:13:d1:bf:a1:75:d3:9f:1f:f9:7e:ec:
         42:64:d4:2a:b6:ff:bc:d2:3e:1a:ed:b6:86:24:3b:92:f8:55:
         7b:b6:d2:61:75:68:51:cc:3b:57:c9:90:4e:6b:04:bc:aa:de:
         9c:b7:35:79:95:d0:69:ff:b4:89:f6:71:eb:38:a3:c6:0d:d7:
         13:fd:5f:8f:db:c6:48:21:54:52:51:6c:4c:67:67:5b:23:38:
         e2:b1:4d:cd:c7:a3:c5:07:e1:83:f6:36:ea:b0:0e:f4:47:4e:
         38:03:f1:62
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MUE5NTExMC8GA1UEBRMoNDExMDYxQkU1QzlEMjRDNTI5QkM3RDU2OTg5QjRBRDJD
MTM4RDEyMzAeFw0yNTA4MDkwODEwMTJaFw0yNTA4MTYwODEwMTJaMBgxFjAUBgNV
BAMTDTY4OTcwMjY0LTA2ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXz9kn20KIhMo/AlF6dacP05qWF0a2m7nhkH/8g1GxCt56bGYcASSFRfp+zX3Y
T2gslkYNtT6AP15wcXkS0SEz8AyBJDCWNfInhcFlWBxOIlv/dG2JXs0gu+/Mvlwf
qhSbMnj5kjltYnP2wgvWLRLmJd3GYHyqk/YTHLQzSN/S2eNu7vselUzwac9SbpBa
5frXCaBDa7w8eLAPTQujp6Y/7yCbfoU1eRStYNDi3nDICAyA6C8wOuwRigriobcE
iEY9vHNn8v4PKEsjsXrUgg1ldEyFPjkyELYPR1wERlIOPmSEjgD9Lhedgli/emKM
pgZUNUXcDzfrglmOdbe83F7vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURH6hdBMc
Ezbw5vYBIFAzQKDpPUowHwYDVR0jBBgwFoAUQRBhvlydJMUpvH1WmJtK0sE40SMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1Lzk0NzYxODg2MkJE
OTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1VcHZIMVdtSnRLMHNFNDBT
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUVJCaHZseWRKTVVwdkgxV21KdEswc0U0MFNNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx
QTk1Lzk0NzYxODg2MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1V
cHZIMVdtSnRLMHNFNDBTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEfpadVUDbDBDZ8/b0s3XZbYP+xSvA6Aleux9APU51bRvb9mmmBkJXyx
lt0WeQhInFBMB/Ef1Dz2VyJm1uvO5prHl/ej5aPLV0Hx8YalUjSXu+IZTVCDkx/1
59PYahEq3RPvvgcI6LMEFEjFJM9bJ4e1xzxEFhVqY7JpwBfQ0a82YHVS94PFFdLV
TPQ2doUJ4cB5Y6V9YJIT0b+hddOfH/l+7EJk1Cq2/7zSPhrttoYkO5L4VXu20mF1
aFHMO1fJkE5rBLyq3py3NXmV0Gn/tIn2ces4o8YN1xP9X4/bxkghVFJRbExnZ1sj
OOKxTc3Ho8UH4YP2NuqwDvRHTjgD8WI=
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:43:45 2025 by rpki-client