Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
File:                     QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json)
Hash identifier:          5ZvPhAysUZYKG9ftrZCxnrFHp7oOtrEAz/dIxpoi/Cc=
Subject key identifier:   66:2B:C9:4C:BC:6B:E2:0E:80:12:FE:23:70:25:38:EF:C5:8D:1F:CF
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Certificate issuer:       /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial:       0C91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
Manifest number:          0C83
Signing time:             Fri 08 Aug 2025 18:27:47 +0000
Manifest this update:     Fri 08 Aug 2025 18:27:46 +0000
Manifest next update:     Fri 15 Aug 2025 18:27:46 +0000
Files and hashes:         1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: KM5xO6xpSoi/T3JsZQbJwzKOiEvrUVO/zRFA8k9f8nY=)
                          2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=)
                          3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
                          rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3217 (0xc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
        Validity
            Not Before: Aug  8 18:27:46 2025 GMT
            Not After : Aug 15 18:27:46 2025 GMT
        Subject: CN=689641a3-9cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e6:2b:15:77:f1:17:7f:70:63:77:03:48:22:
                    27:40:70:80:5a:0b:65:28:aa:0d:18:e8:8c:47:12:
                    75:fe:ca:ba:e5:df:1e:18:31:87:63:87:ae:d6:ee:
                    26:5c:2d:a4:85:ca:65:b3:4a:1b:ef:d9:b3:53:bd:
                    7e:79:4f:0a:a7:46:eb:95:fd:4b:9c:63:a7:37:40:
                    9a:56:18:a1:4f:d9:a6:2f:5d:0f:53:14:ff:4f:12:
                    9e:cb:d8:af:68:3f:a6:65:79:80:e7:28:f3:5b:f5:
                    7f:2b:d1:66:0d:27:76:d5:45:2c:3b:b5:47:f5:e0:
                    83:9b:3b:e0:c0:b8:7b:84:86:8c:79:2d:03:f9:b0:
                    a5:1c:5b:d0:c0:a1:a1:48:7c:7e:4b:0c:4c:6f:7c:
                    e1:a9:45:ec:41:b5:98:5a:59:c1:c9:fa:84:2f:ca:
                    56:4a:ed:05:32:a6:e4:9a:4e:8a:cf:fc:0d:49:37:
                    6b:c2:62:2a:eb:5a:ac:7c:b6:32:7b:a3:28:2d:7c:
                    f0:77:f0:dc:ff:47:63:2f:a3:97:51:6b:7a:8e:0c:
                    a9:00:06:45:62:8c:b1:4e:98:ca:77:4e:a6:02:57:
                    dd:bb:91:7a:5d:cd:d6:3e:bd:c6:f3:23:25:7b:b6:
                    cf:ea:f2:69:fe:06:ed:13:68:a2:b9:08:95:59:1b:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2B:C9:4C:BC:6B:E2:0E:80:12:FE:23:70:25:38:EF:C5:8D:1F:CF
            X509v3 Authority Key Identifier:
                keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d6:94:a5:b5:fb:6a:52:52:eb:17:b3:e2:0d:75:70:26:86:
         a1:99:98:5a:c0:35:c8:dd:3d:8b:e4:91:27:fb:dc:b3:7b:52:
         ab:48:a8:5e:ac:2a:2f:9c:33:f9:02:c5:04:a4:bc:d2:c6:b4:
         0f:d0:88:61:97:75:8a:72:14:ee:9a:6a:1a:34:72:95:84:4f:
         e5:5b:75:5b:33:7a:5e:25:2e:30:93:28:f6:1c:7b:f0:66:cf:
         2c:c7:29:10:ed:e6:34:14:6f:ce:88:5d:38:24:b4:b8:8f:31:
         bc:37:30:0f:20:19:99:dd:7e:1b:17:24:d7:71:34:a0:a6:14:
         a2:5a:f0:c0:29:5d:30:24:6f:5e:8b:8b:c0:e1:80:aa:6c:64:
         15:67:93:f8:5f:f9:93:ab:30:61:f0:16:2a:b1:9e:5c:4c:56:
         6a:17:a0:a9:83:15:9e:eb:94:4c:3d:74:c6:c9:67:03:dc:f7:
         a3:77:39:03:e7:80:bd:68:15:9e:7e:95:b2:15:ec:85:fe:62:
         f9:7a:c6:34:d4:37:1b:bc:c5:c8:c2:b8:74:7a:40:9e:5a:7c:
         e9:13:f8:f0:07:49:76:dc:d7:6c:fb:d6:02:91:ff:09:88:cd:
         66:c7:a1:01:5d:0a:ce:99:7b:7e:17:cd:ee:7e:27:d6:f7:2c:
         e1:29:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:32 2025 by rpki-client