Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File:                     QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier:          3l7fAEstXDEgR+7A2ZRfC5m96O5nS7gP3sD4cgBsEJw=
Subject key identifier:   9D:F2:51:5B:48:3A:A0:20:5A:3D:BF:C7:2E:7A:C2:46:E3:22:12:26
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer:       /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial:       0C93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number:          0C6C
Signing time:             Fri 08 Aug 2025 18:50:09 +0000
Manifest this update:     Fri 08 Aug 2025 18:50:09 +0000
Manifest next update:     Fri 15 Aug 2025 18:50:09 +0000
Files and hashes:         1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: tXO+2GLkfv5oCWvZeIu3SYsZ2HI9c8g0LCwXmuZOmQY=)
                          2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: 3Pf+UclR1ixgluEahQ2no6MMrcl7KhpZcpwccqiTviQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
                          rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3219 (0xc93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
        Validity
            Not Before: Aug  8 18:50:09 2025 GMT
            Not After : Aug 15 18:50:09 2025 GMT
        Subject: CN=689646e1-62b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:02:bd:b4:d0:ad:0c:35:1a:56:77:af:e4:c9:
                    85:17:c0:f3:c6:85:d9:1b:67:90:11:d1:d6:5f:81:
                    a7:87:79:99:08:28:1c:5a:0e:ef:f3:f9:1a:d8:83:
                    9c:2b:7c:86:d3:f3:56:ab:dc:ac:15:e1:83:fb:d4:
                    28:f7:89:41:05:7e:ab:78:c0:1f:af:ed:06:ea:23:
                    0c:f7:66:7c:0e:dd:6f:3b:31:dc:4a:9e:bc:50:a5:
                    31:8a:b4:2f:0c:59:53:d7:b3:57:29:56:0d:4c:2c:
                    75:63:b4:81:62:6b:77:e4:bf:10:c3:69:f6:23:24:
                    cf:32:ca:6c:68:8c:f0:6e:e4:b0:73:a0:70:ed:70:
                    eb:f7:d6:ba:ae:e0:10:48:09:5c:4c:8f:a3:a6:66:
                    13:1d:aa:df:88:57:ab:f2:15:71:2a:1e:b8:42:f0:
                    d9:4c:5b:92:a9:98:9f:d4:72:0a:b0:ed:7e:3f:57:
                    4a:25:48:1e:48:69:d6:20:34:d1:c1:f1:75:d5:a4:
                    58:64:4d:42:52:2e:62:2c:60:26:4b:90:96:eb:a5:
                    14:6f:ea:36:21:ec:76:30:7f:0d:22:c1:54:ab:7b:
                    7f:b7:1d:64:8e:8d:ff:98:e8:70:e4:44:e6:c0:f0:
                    9e:2b:e1:ca:fc:43:60:9a:dd:5a:3e:31:db:68:9e:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F2:51:5B:48:3A:A0:20:5A:3D:BF:C7:2E:7A:C2:46:E3:22:12:26
            X509v3 Authority Key Identifier:
                keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:24:b4:19:a8:26:fb:4d:54:c6:6a:a5:93:3f:e6:6f:4e:5d:
         5c:da:21:8f:56:e8:5e:93:c1:1e:56:77:d9:46:39:d2:4c:85:
         7a:4a:4a:01:a9:ae:53:3e:91:67:65:82:eb:09:1f:57:ab:63:
         84:63:57:3d:f0:da:c0:50:10:23:e6:b6:2c:d1:55:55:a4:e5:
         5d:67:7e:c8:72:3e:a2:4f:a7:c8:e5:b5:ab:34:e3:74:01:d2:
         b0:be:55:a0:d1:96:97:30:e6:3e:3f:cb:5b:78:0b:03:bc:f5:
         b7:d4:bc:f4:ce:5d:c3:ca:a0:f6:4d:d3:13:ef:bf:e3:d2:87:
         f0:ab:2c:62:92:32:32:38:51:91:e0:a1:29:df:f9:f6:a5:40:
         ac:40:6f:30:06:9d:53:22:98:94:08:f1:0a:de:f7:38:15:ed:
         da:f7:27:bf:21:44:c4:9b:ef:5c:10:25:41:6f:30:76:43:43:
         99:e1:55:26:2c:ea:2c:30:47:b6:12:1e:06:99:47:28:7f:4f:
         74:dc:6c:c5:6b:68:78:76:d3:af:61:12:c2:1e:30:f2:d0:d3:
         66:a6:e4:bc:67:3e:a4:6e:34:f0:84:e1:a0:36:7b:3a:e4:5d:
         01:77:d6:ca:63:51:b0:39:98:0f:34:87:fd:c6:32:b7:63:ab:
         5a:d7:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:12 2025 by rpki-client