Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          SHps8E9+PnyH2ckL6G9D6LxgjS+MdIu9AsV3tR+I1jM=
Subject key identifier:   81:13:58:12:35:96:02:8E:F5:D7:C2:7F:A1:CD:64:AB:79:CB:59:D6
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1C20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1BFE
Signing time:             Fri 08 Aug 2025 16:23:29 +0000
Manifest this update:     Fri 08 Aug 2025 16:23:28 +0000
Manifest next update:     Fri 15 Aug 2025 16:23:28 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: em2PDim+ygPxSEa+Qg/Ob6qkCtFJCmKnsEmrDn3eoDk=)
                          2: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: Q0+hX7TsyFyWEUhoyFXxRcuYnmI5ezzOdvEkCo3BkCI=)
                          3: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: BbGcUbwtP+aZHPYce4149SbFzjL1B5hYLShi68qQcek=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: HlwCeu7nRQrhAHteeDH8/AzpstkCTMTYbzNnFUCPtI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7200 (0x1c20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Aug  8 16:23:28 2025 GMT
            Not After : Aug 15 16:23:28 2025 GMT
        Subject: CN=68962480-fd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a7:8f:4a:ad:35:94:df:ff:d8:fc:9b:7f:aa:
                    1e:5a:4a:46:fe:77:02:da:15:a4:df:7d:4e:5e:b7:
                    6f:86:90:5c:96:29:8c:0c:02:7b:72:45:d0:e5:a0:
                    57:0e:e0:dc:f8:90:8c:ab:44:e7:cf:81:b5:68:f3:
                    25:76:aa:78:7f:54:7a:1f:6c:e4:3c:99:00:ba:bc:
                    52:39:be:ac:f3:56:8c:a8:60:de:0d:74:a9:39:23:
                    1c:ea:93:ec:27:14:d1:cb:11:e6:3d:ad:e5:d7:0d:
                    5c:45:fa:ea:d4:b6:88:77:1c:cc:86:82:51:4d:fc:
                    1e:48:28:12:4c:72:55:32:5a:21:47:8a:38:19:e1:
                    e4:19:d7:1a:89:d5:42:10:53:a0:3c:01:32:ed:1b:
                    18:10:0c:f9:d8:ca:8f:7c:45:13:e4:18:ef:9d:08:
                    81:44:14:da:44:fd:0f:91:21:4b:dd:9e:b2:87:85:
                    ab:6b:63:17:3c:e2:a9:93:49:b7:a4:46:01:42:15:
                    40:c6:c6:98:c6:1b:b4:8d:be:fb:dc:81:9d:6d:5e:
                    3a:9e:a7:56:3b:cd:98:9a:e6:9e:d1:72:49:1d:c2:
                    78:ab:10:74:99:15:4f:3f:d0:c7:0d:df:68:bf:cd:
                    2c:47:85:b9:ab:3f:d2:67:b0:65:78:7e:cf:90:31:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:13:58:12:35:96:02:8E:F5:D7:C2:7F:A1:CD:64:AB:79:CB:59:D6
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:11:7d:28:51:f1:0e:3f:01:3f:ba:b5:ba:eb:aa:ea:cd:6c:
         79:56:7c:2d:6f:b2:8b:94:00:3d:bd:56:16:8c:95:29:29:b1:
         e9:85:5c:6f:1e:74:24:63:41:bf:c0:23:ef:0c:f0:01:f6:ea:
         cb:cc:19:9c:2e:79:23:b8:0f:ff:ce:67:56:1d:7a:d2:6d:50:
         84:c0:65:4d:2a:59:98:35:76:e0:b9:b7:3d:30:9b:2a:67:5b:
         32:82:e9:63:05:a4:1f:db:71:b3:27:d6:cb:55:1d:56:37:37:
         71:be:42:3a:74:e9:be:46:ae:3e:72:ec:b2:18:24:f6:e8:20:
         67:e7:a7:8e:77:7e:ce:d2:57:db:5a:c2:75:04:bd:66:24:82:
         b5:86:4c:c5:20:94:bd:f6:f3:dc:14:dc:00:45:34:ac:84:1c:
         cf:13:92:63:3b:45:01:c5:07:5e:d1:c1:d8:24:3d:e5:c2:f2:
         fa:83:c2:23:cd:20:0c:b7:7a:28:56:b9:26:e6:c2:95:6c:89:
         50:cc:54:e7:16:2f:85:89:fb:b0:7a:d6:0a:32:a7:cd:c7:77:
         52:4f:ca:eb:a3:a7:20:0d:9a:10:0d:cf:f5:ed:88:2e:eb:58:
         bb:66:c8:bc:51:da:0f:55:85:61:e8:fa:68:fb:32:30:55:70:
         96:12:43:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB
OEE0QjdERUEwHhcNMjUwODA4MTYyMzI4WhcNMjUwODE1MTYyMzI4WjAYMRYwFAYD
VQQDEw02ODk2MjQ4MC1mZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2aePSq01lN//2Pybf6oeWkpG/ncC2hWk331OXrdvhpBclimMDAJ7ckXQ5aBX
DuDc+JCMq0Tnz4G1aPMldqp4f1R6H2zkPJkAurxSOb6s81aMqGDeDXSpOSMc6pPs
JxTRyxHmPa3l1w1cRfrq1LaIdxzMhoJRTfweSCgSTHJVMlohR4o4GeHkGdcaidVC
EFOgPAEy7RsYEAz52MqPfEUT5BjvnQiBRBTaRP0PkSFL3Z6yh4Wra2MXPOKpk0m3
pEYBQhVAxsaYxhu0jb773IGdbV46nqdWO82Ymuae0XJJHcJ4qxB0mRVPP9DHDd9o
v80sR4W5qz/SZ7BleH7PkDHAYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIETWBI1
lgKO9dfCf6HNZKt5y1nWMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD
QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1
eFVJNnZfZEhncmlvcExmZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCEX0oUfEOPwE/urW666rqzWx5Vnwtb7KLlAA9vVYWjJUpKbHphVxv
HnQkY0G/wCPvDPAB9urLzBmcLnkjuA//zmdWHXrSbVCEwGVNKlmYNXbgubc9MJsq
Z1syguljBaQf23GzJ9bLVR1WNzdxvkI6dOm+Rq4+cuyyGCT26CBn56eOd37O0lfb
WsJ1BL1mJIK1hkzFIJS99vPcFNwARTSshBzPE5JjO0UBxQde0cHYJD3lwvL6g8Ij
zSAMt3ooVrkm5sKVbIlQzFTnFi+FifuwetYKMqfNx3dST8rro6cgDZoQDc/17Ygu
61i7Zsi8UdoPVYVh6Ppo+zIwVXCWEkNr
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:25 2025 by rpki-client