Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
File:                     rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json)
Hash identifier:          bTj2aM+PYFw6xev7mfrOXfWM+y+5h716Q80tnTtUgqk=
Subject key identifier:   AB:03:14:E0:D2:0C:49:70:72:14:75:74:A3:85:DD:7F:E9:1F:2F:CF
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Certificate issuer:       /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
Manifest number:          0243
Signing time:             Sun 03 Aug 2025 02:27:07 +0000
Manifest this update:     Sun 03 Aug 2025 02:27:06 +0000
Manifest next update:     Sun 10 Aug 2025 02:27:06 +0000
Files and hashes:         1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: SQDtVo4FvykhLpgozepwDQwqwvTBXHMtN64RCY9dw24=)
                          2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: iDeeY7cczGJlVpoNqxYKwzcP0iNYTGCgB6+Xi39HWPg=)
                          3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: MlSWr+baoX0iIeudBnt/7RnQIgEalzKtR7VxANOwdB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
                          rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 02:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
        Validity
            Not Before: Aug  3 02:27:06 2025 GMT
            Not After : Aug 10 02:27:06 2025 GMT
        Subject: CN=688ec8fb-f815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:af:a7:2e:ed:72:a7:3d:5f:7e:36:d2:71:
                    09:5f:52:e2:0f:06:38:4f:57:20:44:f5:fe:91:0e:
                    c7:63:eb:3d:1e:8d:e9:34:36:96:2b:e1:f6:d2:a2:
                    ab:3d:f1:a6:1e:cc:3e:26:0c:77:c1:5d:ea:6b:4a:
                    91:1a:55:02:af:50:b3:96:8f:53:04:dd:cc:29:28:
                    3a:be:de:bb:cc:3c:91:27:f7:1a:c3:7a:61:e2:42:
                    ea:c5:40:92:b0:97:a5:96:aa:d8:9b:c9:24:b0:c3:
                    00:f9:35:b8:01:16:3a:a5:31:78:b5:34:b0:c8:f5:
                    da:0a:f7:55:5e:79:24:fd:a1:37:36:dd:a6:b2:d7:
                    63:07:5c:c8:b4:c9:be:66:d9:4a:37:5c:df:6f:51:
                    0c:56:08:c3:97:b3:59:09:c2:7d:bd:b9:86:4b:bb:
                    2d:fd:88:04:43:00:4f:da:f6:e2:fb:89:6b:6a:11:
                    fc:83:da:dc:0b:00:cb:5c:5d:7a:4d:51:fd:76:d0:
                    30:85:80:4c:fa:a8:c1:ff:47:f5:fa:0e:41:09:f5:
                    a0:2d:1e:04:62:e2:55:5b:d1:86:45:53:f9:22:5d:
                    20:16:e3:73:b5:26:bc:67:f4:7d:e0:d0:ef:44:45:
                    78:37:88:da:65:8c:ea:92:a7:64:df:d0:38:04:91:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:03:14:E0:D2:0C:49:70:72:14:75:74:A3:85:DD:7F:E9:1F:2F:CF
            X509v3 Authority Key Identifier:
                keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:81:d2:86:5c:57:85:d8:59:58:79:52:af:4f:2a:f5:25:bc:
         6b:e0:73:4d:34:1e:dd:02:7f:42:aa:0c:a4:9a:83:84:a0:3e:
         84:e0:34:92:51:04:ef:37:3c:03:ec:b6:5b:1f:40:7e:cf:ed:
         2d:ab:e2:16:0f:e7:f4:2b:f9:14:82:70:c2:7d:43:cc:39:62:
         95:1d:86:1f:63:65:ca:64:58:e2:37:bf:62:60:c8:99:05:dd:
         ef:37:58:b1:7a:29:33:c3:bc:ff:79:cb:bd:98:ab:28:1e:30:
         59:cd:11:e7:44:2f:e9:69:22:a6:6a:d8:cb:54:52:bc:87:b9:
         e4:e8:f5:aa:c6:69:61:8d:c8:33:15:36:23:68:03:b7:16:fc:
         87:24:cc:26:84:99:ac:e5:1b:b0:82:a5:c1:2a:27:a9:94:b5:
         a8:fd:16:89:a0:26:1b:63:f5:d1:91:bf:5e:a1:5f:77:6b:22:
         0e:08:1e:49:7b:1b:60:c7:e6:f1:f6:83:9d:e3:cf:6a:83:f1:
         fd:0f:d2:17:ca:ec:4d:99:fb:96:7a:8f:02:71:4e:c2:15:19:
         cc:ea:b1:ce:c9:24:a7:a8:cd:27:29:ec:fd:33:c4:b6:ad:8e:
         5d:14:0c:a6:91:c4:51:92:b1:77:61:a8:ce:dd:78:fc:3b:42:
         d2:de:5c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:12 2025 by rpki-client