Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
File:                     qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json)
Hash identifier:          Sp+K+fYoPRVQDEKhqgE+Zuh2ITU7dAd5iUHHszar3FI=
Subject key identifier:   69:CF:A0:D2:E5:2A:C8:0F:68:18:00:06:AE:CA:3D:D5:2F:23:F1:78
Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52
Certificate issuer:       /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052
Certificate serial:       13A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
Manifest number:          2A21
Signing time:             Fri 08 Aug 2025 17:07:58 +0000
Manifest this update:     Fri 08 Aug 2025 17:07:58 +0000
Manifest next update:     Fri 15 Aug 2025 17:07:58 +0000
Files and hashes:         1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: 3wP5Y0mvtIOelXmKsEUToATzRVbEWR3m9UJmCtTvGQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5028 (0x13a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052
        Validity
            Not Before: Aug  8 17:07:58 2025 GMT
            Not After : Aug 15 17:07:58 2025 GMT
        Subject: CN=68962eee-771b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:f6:1f:73:bc:91:26:b8:a6:93:f6:91:e4:
                    96:a5:48:64:0e:8f:d1:57:0f:b1:74:47:94:59:18:
                    14:1f:e1:47:fc:8f:47:2b:f2:cf:70:cb:83:dd:74:
                    55:ba:fc:ba:2c:a0:1f:48:57:1f:90:1d:4e:4f:30:
                    43:db:c5:3c:76:79:76:ba:38:5a:4c:99:2f:78:16:
                    b1:58:4f:22:31:dc:89:57:f5:8d:9f:f7:1b:e7:85:
                    01:c8:64:5d:11:54:e9:43:3c:0a:ee:0b:b3:6f:0f:
                    ff:cb:a4:93:0f:c5:12:b4:9d:d6:a3:57:76:16:4b:
                    16:d7:ed:fb:92:a1:94:c6:b3:4d:57:82:7f:b8:f6:
                    e1:8f:e4:40:0a:40:6a:20:83:88:aa:d8:f2:62:ba:
                    a2:02:44:53:8b:1a:89:10:9e:33:88:80:3b:e0:d6:
                    22:fe:52:94:b3:3d:da:9d:16:d5:ab:87:4d:a4:bf:
                    d3:de:a2:ab:77:62:d0:0f:7b:cc:82:94:a2:7b:4a:
                    6e:e2:ab:26:48:f7:27:9d:21:5d:aa:c9:fc:8b:b9:
                    76:80:80:b5:f8:16:59:d2:75:de:d5:38:8a:b0:05:
                    9b:4f:f9:d7:95:c9:7c:d5:fe:11:d2:03:57:38:fa:
                    18:56:d7:9c:d3:02:6d:df:8d:9c:8c:fb:4c:80:b9:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CF:A0:D2:E5:2A:C8:0F:68:18:00:06:AE:CA:3D:D5:2F:23:F1:78
            X509v3 Authority Key Identifier:
                keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e4:7b:40:09:6e:e4:09:b1:1c:e8:56:34:a8:5f:f2:94:17:
         94:6b:09:e1:3a:51:44:a5:f6:45:ee:c4:be:8b:14:ff:97:8a:
         7c:15:ae:86:71:60:9f:be:cd:9f:98:18:0c:09:c8:ba:56:8e:
         ea:af:39:70:83:b5:f3:8a:ca:f7:f4:4a:70:ea:1f:f6:02:ec:
         61:28:02:5c:0f:de:e5:52:73:b5:54:34:f7:09:f2:99:2e:ba:
         cc:7b:3d:db:24:ae:3d:24:65:fe:b3:0e:14:88:42:b2:4c:17:
         94:20:92:12:a0:fd:cc:af:cf:d3:e7:ba:0c:28:e0:3a:69:b9:
         a0:ef:f6:5d:2c:27:45:f8:aa:88:6b:11:0b:fd:b3:c7:83:9e:
         4c:2e:35:c4:b2:37:df:59:2c:ff:24:88:b7:81:8e:ff:dc:d2:
         59:ad:58:e3:e1:5c:2a:da:c7:4d:b0:c2:9e:52:2b:fd:b2:52:
         e5:53:bf:61:db:fb:b9:e1:f6:66:ee:66:5d:63:d9:76:09:d8:
         23:2b:f8:62:e1:b8:83:4d:33:00:7b:c1:d0:57:84:a3:c5:60:
         ec:6d:d7:08:a0:ac:a8:b5:57:30:5d:a8:4e:6d:bb:a8:01:5d:
         96:ce:c5:2f:c4:d7:ef:a0:09:2a:9c:c0:d7:ed:f7:01:08:95:
         02:61:a0:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx
RTA2NzcwNTIwHhcNMjUwODA4MTcwNzU4WhcNMjUwODE1MTcwNzU4WjAYMRYwFAYD
VQQDEw02ODk2MmVlZS03NzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz6D2H3O8kSa4ppP2keSWpUhkDo/RVw+xdEeUWRgUH+FH/I9HK/LPcMuD3XRV
uvy6LKAfSFcfkB1OTzBD28U8dnl2ujhaTJkveBaxWE8iMdyJV/WNn/cb54UByGRd
EVTpQzwK7guzbw//y6STD8UStJ3Wo1d2FksW1+37kqGUxrNNV4J/uPbhj+RACkBq
IIOIqtjyYrqiAkRTixqJEJ4ziIA74NYi/lKUsz3anRbVq4dNpL/T3qKrd2LQD3vM
gpSie0pu4qsmSPcnnSFdqsn8i7l2gIC1+BZZ0nXe1TiKsAWbT/nXlcl81f4R0gNX
OPoYVtec0wJt342cjPtMgLlaGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnPoNLl
KsgPaBgABq7KPdUvI/F4MB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT
eGNOeVVERkhEMzBlQm5jRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCI5HtACW7kCbEc6FY0qF/ylBeUawnhOlFEpfZF7sS+ixT/l4p8Fa6G
cWCfvs2fmBgMCci6Vo7qrzlwg7Xzisr39Epw6h/2AuxhKAJcD97lUnO1VDT3CfKZ
LrrMez3bJK49JGX+sw4UiEKyTBeUIJISoP3Mr8/T57oMKOA6abmg7/ZdLCdF+KqI
axEL/bPHg55MLjXEsjffWSz/JIi3gY7/3NJZrVjj4Vwq2sdNsMKeUiv9slLlU79h
2/u54fZm7mZdY9l2CdgjK/hi4biDTTMAe8HQV4SjxWDsbdcIoKyotVcwXahObbuo
AV2WzsUvxNfvoAkqnMDX7fcBCJUCYaDV
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:17 2025 by rpki-client