Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
File:                     QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json)
Hash identifier:          DeffUkMLlwY0g/su6ZJOZRXwf2kqYf/ZrJC+vlnprq0=
Subject key identifier:   59:AD:88:C3:D0:53:69:55:BB:3E:1D:FB:2E:33:EC:C4:42:93:34:02
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Certificate issuer:       /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
Manifest number:          0855
Signing time:             Sun 10 Aug 2025 20:47:51 +0000
Manifest this update:     Sun 10 Aug 2025 20:47:51 +0000
Manifest next update:     Sun 17 Aug 2025 20:47:51 +0000
Files and hashes:         1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: T/caUCsuVTd60cp0QWK4FabBnTxWXSO8vfNcKW2LblA=)
                          2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: dKNk5pPJbrzAnkXqkxI0ZuHUsGDU8sX1yqD52DpKuAQ=)
                          3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: 0ru7xYrLjnDIEAfDou0iidHCCux0ow/jB57Xp7tPDLw=)
                          4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: VWbla33K1wl9gTRgnLJYb5WMUbeDQqg2qZKrLOb3zTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
        Validity
            Not Before: Aug 10 20:47:51 2025 GMT
            Not After : Aug 17 20:47:51 2025 GMT
        Subject: CN=68990577-0f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:61:4c:2e:80:51:df:84:79:4a:ea:8a:da:
                    f8:96:e6:fb:62:24:a4:62:40:5a:50:18:33:10:5a:
                    ac:b9:68:b3:f6:af:0e:a8:f2:06:5c:56:5d:9e:bb:
                    bf:f9:03:de:db:23:80:d5:df:4c:bc:57:ee:d9:b5:
                    e1:48:3a:06:1a:c9:73:71:0b:3f:3b:3b:75:59:75:
                    f3:66:76:e5:56:00:a6:b0:75:98:0d:b3:1b:15:fd:
                    0c:00:18:ce:b1:e3:37:4e:c4:5f:36:ce:25:2c:1d:
                    8f:68:e9:23:60:21:c6:e9:d2:05:bd:10:90:03:4f:
                    2b:4a:10:42:b7:d0:7d:34:1f:b0:16:9f:9b:fd:4c:
                    89:b1:34:77:96:0d:ba:4a:66:09:6b:e6:e0:83:42:
                    31:a4:e4:2f:18:fa:6a:bd:37:22:66:3f:b2:a8:b0:
                    c3:c0:bf:fa:ea:a1:db:8c:e6:ba:84:fe:28:68:84:
                    2b:a1:c2:fe:e0:9c:05:2a:9a:fb:38:62:7c:83:db:
                    60:15:56:01:38:53:23:a6:3a:9e:c1:58:b8:4f:40:
                    1a:f3:84:55:69:cb:43:6d:a6:c1:96:fe:2b:f1:a2:
                    9c:dc:1b:31:68:fe:89:f9:55:b0:ae:68:f2:92:45:
                    c3:57:29:8a:90:d5:42:25:b6:32:89:c6:6f:f9:8b:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AD:88:C3:D0:53:69:55:BB:3E:1D:FB:2E:33:EC:C4:42:93:34:02
            X509v3 Authority Key Identifier:
                keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:91:92:1c:bf:0e:88:28:c9:1d:66:2f:a8:0c:da:e9:2b:
         e4:53:4c:4d:09:8e:e8:8f:2e:ca:02:f4:c2:f9:12:7e:05:50:
         79:af:99:15:9f:23:2b:81:a0:80:e6:67:bf:b0:5c:9e:73:45:
         6c:01:56:b7:c0:b6:59:72:0f:b9:78:b6:ce:23:9b:b5:c1:aa:
         06:98:12:0f:b1:11:c1:65:4e:4f:fb:e6:24:82:12:9b:50:bc:
         6a:e5:ba:69:34:ed:d1:6c:0f:71:c7:27:e3:d6:66:e4:c2:49:
         4d:23:aa:46:9e:43:6e:28:7c:db:45:55:80:49:82:eb:04:78:
         e2:7a:d6:f9:1b:ca:ff:f2:b8:40:4a:9c:f6:89:c5:93:a3:8f:
         35:6a:96:9c:a2:64:4d:8d:f2:0a:51:b1:7f:4e:37:ba:2e:99:
         90:b7:51:27:48:50:bc:66:f8:07:b5:66:78:fc:30:de:e1:8b:
         20:fb:c7:43:55:bd:73:57:30:ed:98:31:7b:c2:ff:a9:34:2d:
         8b:15:55:78:37:5b:5a:d2:45:3f:8f:b0:ed:a6:9e:1b:9c:3d:
         b0:f9:80:05:d4:27:91:85:ad:c8:df:61:53:1a:2f:df:c7:aa:
         86:d6:fe:1a:03:55:8b:2a:74:fb:63:48:6c:71:12:2b:27:3d:
         74:a9:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:31:32 2025 by rpki-client