Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File:                     qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier:          QcyamDK+uxo4+6aUWiom08gAPEojIAiT4+Vr4A/k0E8=
Subject key identifier:   86:98:24:EF:74:AB:C3:82:83:7D:3F:7B:CB:89:79:BC:87:83:F2:1F
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer:       /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial:       0EB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number:          0E97
Signing time:             Fri 08 Aug 2025 17:53:42 +0000
Manifest this update:     Fri 08 Aug 2025 17:53:41 +0000
Manifest next update:     Fri 15 Aug 2025 17:53:41 +0000
Files and hashes:         1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: a5HFtd+8ZbygOQGrtqvNi+7dENWeZD3dUOLQz/nia2A=)
                          2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=)
                          3: 42629FDADD9511EEAA0F2324C4F9AE02.roa (hash: +hn7T4kOPQRiT4pAI5U0s2X9XGmZExacuKpk1xJzme8=)
                          4: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=)
                          5: 34DCFB18C94E11E9A4F6FE21C4F9AE02.roa (hash: PQRWtI7uNa0DrowLXSGG8eKzHjE+mScrhL8bc6GhWo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
                          rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3769 (0xeb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
        Validity
            Not Before: Aug  8 17:53:41 2025 GMT
            Not After : Aug 15 17:53:41 2025 GMT
        Subject: CN=689639a6-2ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:39:74:e8:6e:42:87:f4:b2:a5:bd:75:7b:
                    c7:f1:62:9c:7b:d4:ce:a2:76:93:fe:14:69:c1:42:
                    49:3f:63:65:24:da:d0:f3:89:56:22:66:fe:7d:fc:
                    b1:1c:49:84:7c:d5:8d:75:e6:cf:0b:45:38:a3:76:
                    d4:58:73:aa:f7:91:87:36:06:52:82:92:a9:63:fc:
                    71:59:e5:ed:a9:f5:d2:67:b6:3d:03:ba:9d:eb:87:
                    ae:b2:9b:29:87:43:d1:1b:f2:4e:e7:58:71:a9:f7:
                    d0:f4:97:d6:58:f2:0b:c4:40:92:06:55:ee:f2:c9:
                    71:80:c7:5d:4d:43:80:65:82:8b:07:bb:1c:0a:ad:
                    62:e9:de:1f:ea:48:cf:14:37:3a:a8:43:35:1d:6e:
                    7d:9b:1c:0b:1d:c1:67:a5:3a:bc:a6:52:c7:38:38:
                    bf:32:a9:51:45:0b:22:88:3f:d7:11:46:c5:e4:6e:
                    b9:99:d6:a1:0c:41:24:81:21:bf:2d:36:a5:19:0f:
                    6d:9b:2d:10:98:87:fe:2a:34:21:09:25:7d:b3:44:
                    11:f1:29:54:6b:1a:22:a8:5e:44:b5:2f:25:9e:93:
                    5d:87:e5:96:1f:ef:50:3f:83:24:dd:bd:09:95:8d:
                    0b:26:c6:1b:01:ea:40:c8:5a:4c:2c:fa:73:f5:33:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:98:24:EF:74:AB:C3:82:83:7D:3F:7B:CB:89:79:BC:87:83:F2:1F
            X509v3 Authority Key Identifier:
                keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:80:7b:46:c8:0a:5c:5a:80:00:62:2f:5d:4c:97:75:f1:
         a1:7f:53:82:69:46:a5:93:cd:09:ae:38:23:ee:18:cd:38:38:
         af:6f:eb:a0:bc:9b:24:78:da:14:0a:a6:1b:9d:17:51:da:90:
         84:cc:c8:09:06:89:eb:11:f6:08:a6:b0:19:7f:52:e6:f7:77:
         a3:5c:3d:d5:35:fe:75:3a:e4:62:fd:61:52:20:8b:2a:7a:b8:
         cb:cf:e3:a0:5c:12:77:53:38:6f:07:7c:cb:66:dc:0a:f2:92:
         19:24:24:d2:31:8d:15:20:e7:95:ac:cf:ab:24:3e:df:18:85:
         f7:bc:fb:71:e4:fe:5f:cd:82:4b:7e:58:7e:13:b5:18:b6:97:
         04:30:9e:f1:2a:69:26:83:08:eb:0c:58:f3:ae:5e:5a:ed:9d:
         a0:6a:09:42:0c:dc:de:94:bf:51:f4:ad:84:3f:ee:c3:72:9f:
         86:1c:2f:a3:2a:32:fa:5d:1c:35:23:48:a6:a4:3f:7b:e1:5d:
         80:04:c4:7f:86:b9:be:05:5f:51:e1:38:bf:06:8e:10:11:4b:
         64:7a:e8:73:28:63:3f:2d:1b:d2:1e:fd:50:86:fe:de:45:c7:
         4f:de:74:64:52:e9:f8:0e:77:1a:6e:15:1a:f3:69:fc:07:73:
         14:8b:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:03:21 2025 by rpki-client