Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File:                     qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier:          yZr8lxchdnpHxQKwx0YQ+TIk+40aM9EXXWIKhrPDAAA=
Subject key identifier:   DC:2B:7D:B7:3E:36:A2:DA:D6:27:14:38:BF:E2:BF:46:E2:C7:09:61
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number:          0844
Signing time:             Fri 08 Aug 2025 21:07:09 +0000
Manifest this update:     Fri 08 Aug 2025 21:07:08 +0000
Manifest next update:     Fri 15 Aug 2025 21:07:08 +0000
Files and hashes:         1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: X2r3q7cF5oZv4LfSS2lYyxYFEVsUInfxsZpVIjcrdv8=)
                          2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: QEmg34gYMLcRImmZXOGPqukjodjpiHJ4l1SGgXAsmiI=)
                          3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: d2hFjD7xeVN3cyOnjASfx1gXiQEjM5kCyEH2NHogTpU=)
                          4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Aug  8 21:07:08 2025 GMT
            Not After : Aug 15 21:07:08 2025 GMT
        Subject: CN=689666fc-05a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:03:86:0f:8b:44:d8:b4:53:48:80:28:b9:
                    80:17:15:fa:f7:54:a3:e1:77:3a:fe:2d:66:26:3f:
                    5f:3d:67:68:2f:05:52:6a:28:2d:6f:ab:89:e9:5f:
                    3e:b5:b6:fa:be:f6:03:30:3b:f5:5f:a3:3d:38:2f:
                    ed:17:98:b8:56:71:62:89:c0:cf:c5:33:f9:34:00:
                    ee:51:48:0b:63:b6:b2:63:9b:26:d6:e2:9c:4d:97:
                    38:48:05:ca:17:68:c8:ce:f7:89:12:35:7a:57:32:
                    33:ec:fb:93:04:e8:b7:ca:0f:42:ad:f4:47:17:7d:
                    4e:cc:1c:77:d7:e4:4e:f4:60:6d:1e:a1:83:3e:1e:
                    76:9c:5d:e9:fb:d8:4e:48:f7:fe:f2:23:92:97:7a:
                    6f:30:6b:cd:04:db:08:4b:c1:63:ba:8f:97:b2:7e:
                    bd:d4:d2:76:0e:d8:ba:c6:c0:b5:a6:79:59:d1:8c:
                    83:48:8c:20:5c:ea:74:fb:8c:6e:de:83:2c:35:6f:
                    ae:65:1f:4d:73:14:35:75:c3:8c:d9:c2:49:6e:12:
                    53:41:9c:ec:96:c0:cd:93:d3:b2:09:9d:14:68:0e:
                    5a:00:7b:e3:3c:ec:ca:a2:95:6f:64:92:cd:a9:e4:
                    0a:bb:88:fb:b2:23:7f:40:fb:62:50:27:3e:7a:cc:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:7D:B7:3E:36:A2:DA:D6:27:14:38:BF:E2:BF:46:E2:C7:09:61
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:ba:e3:5c:b2:1f:9e:d6:9e:b7:d5:1e:b2:da:92:64:12:
         de:2f:8e:0d:c7:d1:da:eb:0c:c3:25:d4:10:b4:00:50:5b:28:
         73:ef:8e:51:d4:b8:81:35:79:78:4b:d3:1c:8a:3a:20:7f:ee:
         ab:df:bf:07:c4:dc:07:32:b5:ed:ab:76:ca:c4:6c:3f:62:20:
         3c:df:92:f2:21:d3:51:78:59:9c:e7:3e:ce:ee:a9:0e:93:d3:
         f1:de:c6:f9:16:cd:da:62:a2:63:5b:67:fc:98:2a:f0:e5:f0:
         db:d8:cf:21:52:df:82:21:09:76:fd:d4:9b:48:db:76:41:6e:
         bf:64:0f:f5:6f:db:8b:d3:ca:b6:f7:ce:2a:5c:9d:d1:a0:4f:
         c6:b0:04:f9:69:24:4e:06:7a:93:ae:33:0f:2b:e0:fa:6f:dd:
         90:52:66:e8:10:74:4f:b7:08:ea:54:10:63:51:2e:78:1d:b3:
         dd:8a:30:03:1e:d9:8c:c1:d2:5c:4c:90:1f:a5:20:3b:ea:8d:
         be:db:7c:84:e4:b4:81:c8:e7:77:2c:69:39:fd:6f:3d:02:f6:
         da:5a:c4:9b:b0:1c:be:14:b2:83:fc:6c:58:b1:ed:fd:05:13:
         37:c7:02:bf:f6:4c:99:d5:0b:13:b0:ad:29:5a:c0:c6:77:91:
         fd:d3:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:24 2025 by rpki-client