Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft
File:                     qHs26y4WaoD40fwBFc6ZGwoBh50.mft (raw, json)
Hash identifier:          klJYWNHxIUbnEkmwz60glGI/SulVXQlSWOx4J7J0L5Y=
Subject key identifier:   E6:A5:7B:84:EB:F2:E2:8B:0C:C0:07:26:83:1B:E3:26:B4:66:B5:9E
Authority key identifier: A8:7B:36:EB:2E:16:6A:80:F8:D1:FC:01:15:CE:99:1B:0A:01:87:9D
Certificate issuer:       /CN=A9166279/serialNumber=A87B36EB2E166A80F8D1FC0115CE991B0A01879D
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft
Manifest number:          16
Signing time:             Mon 11 Aug 2025 08:16:21 +0000
Manifest this update:     Mon 11 Aug 2025 08:16:20 +0000
Manifest next update:     Mon 18 Aug 2025 08:16:20 +0000
Files and hashes:         1: qHs26y4WaoD40fwBFc6ZGwoBh50.crl (hash: S99Xf2j4to4DxtVY0aVNNiNfvxMWqSQGpcQY6ByaW24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.crl
                          rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 08:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166279, serialNumber=A87B36EB2E166A80F8D1FC0115CE991B0A01879D
        Validity
            Not Before: Aug 11 08:16:20 2025 GMT
            Not After : Aug 18 08:16:20 2025 GMT
        Subject: CN=6899a6d5-edf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:36:5d:eb:2d:e9:e5:5c:53:a3:92:1d:88:
                    aa:e9:77:0d:b0:38:45:96:2b:59:0a:55:0c:63:34:
                    cd:68:12:6c:6c:cb:53:38:63:09:6d:06:fd:4b:89:
                    42:66:78:15:d0:1e:a3:60:4a:31:cb:30:d3:5c:06:
                    1f:8f:a8:15:b8:86:a0:9d:b0:70:49:de:d4:cc:81:
                    d4:a8:7e:08:a2:d9:13:66:c7:4e:72:31:70:74:07:
                    46:51:43:b0:7f:57:de:1a:44:8a:7e:62:78:27:a0:
                    c5:3e:09:f6:a9:ca:2a:eb:17:10:4e:d3:58:55:0c:
                    05:c3:1c:a7:8b:52:85:b3:fb:2e:0d:4a:c5:ee:de:
                    c5:64:24:14:31:e7:0b:fd:da:2d:97:05:1f:87:47:
                    4e:a9:13:5f:31:85:c9:03:14:bf:5f:4e:ff:8a:19:
                    e0:ba:db:02:31:35:93:1f:c5:7c:ba:56:66:b2:08:
                    bc:f1:11:1c:fe:be:d1:7f:ab:87:e0:ba:fb:35:73:
                    7c:cc:1f:04:94:c2:16:be:45:02:c9:54:16:db:0c:
                    46:f1:7b:4e:82:d9:34:8c:e3:bb:68:19:f6:e2:4c:
                    ab:6a:cb:c1:99:c9:ec:8a:e3:2d:00:af:1d:a7:b6:
                    5e:5e:9e:93:73:46:ee:76:e1:75:b0:16:af:8e:d7:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:7B:84:EB:F2:E2:8B:0C:C0:07:26:83:1B:E3:26:B4:66:B5:9E
            X509v3 Authority Key Identifier:
                keyid:A8:7B:36:EB:2E:16:6A:80:F8:D1:FC:01:15:CE:99:1B:0A:01:87:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:13:5a:54:96:fd:24:41:5e:93:ad:ab:34:e0:f7:4c:47:bc:
         2c:ac:d8:f7:dd:bf:26:a5:18:24:0b:7e:ca:aa:33:e0:12:06:
         8e:23:15:a9:c4:1f:67:a2:79:fb:66:0e:ae:37:df:ef:10:c9:
         e7:47:b6:d2:b4:1c:0a:0a:d1:fc:3f:c5:56:5c:a1:30:0f:f2:
         fa:e4:f4:92:01:ec:ec:0e:a2:a0:6e:65:6c:d2:93:40:9c:9c:
         7a:9f:e4:2a:77:20:a7:8b:86:b2:e4:a7:8c:33:11:5e:1b:cf:
         51:0c:6a:2a:94:4e:ae:81:bd:01:44:3b:c9:19:92:cd:3b:2a:
         9d:45:ba:d5:d2:ce:b9:a8:7b:3d:1a:79:1c:75:d9:1f:eb:d2:
         a4:7e:56:df:93:04:68:6b:a5:9c:f0:ab:29:f5:1b:a7:ea:60:
         53:31:c2:92:88:e3:f4:45:9c:98:3a:f1:2f:74:bf:b0:5d:5e:
         c4:14:eb:50:fd:52:0b:a8:c0:d7:cb:b3:64:8a:e6:00:0a:64:
         aa:4c:5b:38:5e:bf:91:4e:12:bb:ee:86:c0:25:2f:da:4a:64:
         fb:6a:86:ee:f9:14:83:a5:fb:48:09:7d:69:f9:bd:58:e3:e2:
         9e:b5:d3:a1:d1:79:02:6a:e4:89:4e:e5:9a:0e:ed:28:86:bb:
         27:e3:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:43 2025 by rpki-client