Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
File:                     qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json)
Hash identifier:          xBVlC3BhSunQAdOjMibfiJry8zldSiB9cx5h2ZO/CRk=
Subject key identifier:   1A:8F:23:2A:0A:AC:1E:47:B3:59:BD:F1:71:9C:8A:CD:49:66:ED:01
Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90
Certificate issuer:       /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
Certificate serial:       06AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
Manifest number:          06A4
Signing time:             Fri 08 Aug 2025 22:34:53 +0000
Manifest this update:     Fri 08 Aug 2025 22:34:52 +0000
Manifest next update:     Fri 15 Aug 2025 22:34:52 +0000
Files and hashes:         1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: tNQW/o0ctTppIJ4O85vHsUIoehm86mNP4JEC95D1eOU=)
                          2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl
                          rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709 (0x6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
        Validity
            Not Before: Aug  8 22:34:52 2025 GMT
            Not After : Aug 15 22:34:52 2025 GMT
        Subject: CN=68967b8d-3917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:ea:67:e0:83:31:a0:21:74:3c:49:17:65:
                    fd:1a:5c:5d:0b:d3:f8:98:b1:7d:fc:46:b6:6b:e3:
                    d1:57:03:dd:fb:eb:4b:4a:1b:10:ed:bd:d4:b6:36:
                    de:64:43:30:ce:75:54:71:0a:d7:19:d4:93:00:f6:
                    69:1b:18:12:ab:ab:ff:cb:aa:c0:1b:72:45:bb:ac:
                    68:1b:6c:c0:88:15:6f:72:0a:e6:20:27:d9:77:6a:
                    2f:e9:ab:3b:6f:c9:25:59:d0:88:f6:27:d9:cd:85:
                    d6:a3:03:e6:59:c5:9b:0b:76:04:8e:48:2b:03:4f:
                    46:71:87:7d:53:95:32:c8:71:b3:9e:f7:60:0a:ca:
                    4f:57:e5:68:51:1a:59:47:2b:ec:20:8c:b9:8d:d0:
                    f6:a8:2f:66:fd:68:87:f1:d5:42:fb:e2:8c:42:08:
                    98:f5:ee:7a:67:3d:34:db:cd:76:b5:fe:e8:28:b3:
                    c5:f4:3c:21:6d:5d:69:72:72:97:49:5f:01:f2:60:
                    fe:fd:20:dd:f8:45:09:ef:97:65:07:87:19:9c:57:
                    b0:ec:c0:2a:36:1d:46:45:e8:8d:9d:ed:4e:3b:e4:
                    c3:19:9f:39:11:50:f7:29:f3:02:e7:26:09:f0:8e:
                    20:dd:45:f2:fa:8c:e3:7e:ea:58:46:71:b4:62:17:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8F:23:2A:0A:AC:1E:47:B3:59:BD:F1:71:9C:8A:CD:49:66:ED:01
            X509v3 Authority Key Identifier:
                keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:02:e8:de:72:80:11:07:0a:0e:06:f8:ec:bc:30:00:2c:
         5f:dd:28:dc:9e:07:ca:fb:67:e6:b2:17:07:ab:7f:0a:9a:67:
         19:1d:33:10:c9:c7:e8:33:f3:d4:3d:96:08:1e:b7:51:cd:51:
         93:d1:ab:a7:13:ce:9b:7e:15:2c:47:52:79:e5:c5:06:76:30:
         28:15:e1:b9:4c:a5:2b:e4:07:b4:9a:ab:76:54:1d:37:06:6b:
         be:64:b4:d5:d3:52:b5:9b:21:8a:f2:58:d5:18:a7:0d:3f:65:
         69:83:d0:8c:9f:f3:72:83:fb:98:1f:af:0b:54:1b:e6:d3:e3:
         23:d5:4e:f1:5c:c2:0a:3b:e3:d5:73:ee:06:92:ab:1d:3f:0f:
         24:bc:f0:a9:f1:dc:e5:9d:f9:51:82:0f:22:de:ba:1d:b8:16:
         ce:db:da:91:56:13:63:2e:2e:5f:25:ca:be:2b:c5:16:ae:8a:
         0e:5d:3d:63:65:ab:e7:d2:ed:62:d5:69:09:40:96:00:e2:9d:
         02:7b:ee:af:5c:46:c9:fd:67:a5:f7:bb:b5:fa:2b:61:8c:c7:
         b5:a0:44:57:dc:3b:db:1b:1b:66:b4:35:4b:99:75:50:c3:c9:
         93:3b:5b:a3:26:3d:cd:af:e6:23:22:36:e3:98:5d:98:83:97:
         c3:89:45:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG
QTY5QjhBOTAwHhcNMjUwODA4MjIzNDUyWhcNMjUwODE1MjIzNDUyWjAYMRYwFAYD
VQQDEw02ODk2N2I4ZC0zOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppXqZ+CDMaAhdDxJF2X9GlxdC9P4mLF9/Ea2a+PRVwPd++tLShsQ7b3Utjbe
ZEMwznVUcQrXGdSTAPZpGxgSq6v/y6rAG3JFu6xoG2zAiBVvcgrmICfZd2ov6as7
b8klWdCI9ifZzYXWowPmWcWbC3YEjkgrA09GcYd9U5UyyHGznvdgCspPV+VoURpZ
RyvsIIy5jdD2qC9m/WiH8dVC++KMQgiY9e56Zz002812tf7oKLPF9DwhbV1pcnKX
SV8B8mD+/SDd+EUJ75dlB4cZnFew7MAqNh1GReiNne1OO+TDGZ85EVD3KfMC5yYJ
8I4g3UXy+ozjfupYRnG0YhdCgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqPIyoK
rB5Hs1m98XGcis1JZu0BMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2
RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf
WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAq4ALo3nKAEQcKDgb47LwwACxf3SjcngfK+2fmshcHq38KmmcZHTMQ
ycfoM/PUPZYIHrdRzVGT0aunE86bfhUsR1J55cUGdjAoFeG5TKUr5Ae0mqt2VB03
Bmu+ZLTV01K1myGK8ljVGKcNP2Vpg9CMn/Nyg/uYH68LVBvm0+Mj1U7xXMIKO+PV
c+4GkqsdPw8kvPCp8dzlnflRgg8i3roduBbO29qRVhNjLi5fJcq+K8UWrooOXT1j
Zavn0u1i1WkJQJYA4p0Ce+6vXEbJ/Wel97u1+ithjMe1oERX3DvbGxtmtDVLmXVQ
w8mTO1ujJj3Nr+YjIjbjmF2Yg5fDiUXE
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:06:30 2025 by rpki-client