Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File:                     qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier:          SExrtDRtA7pA4eRO0mNgXFwBaEZO8qQDjikESSO+Tq8=
Subject key identifier:   BA:0C:E2:F1:95:21:CC:F6:5B:43:76:2F:71:77:BB:F2:86:44:E0:FA
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer:       /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial:       09D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number:          09C4
Signing time:             Sun 10 Aug 2025 20:01:13 +0000
Manifest this update:     Sun 10 Aug 2025 20:01:13 +0000
Manifest next update:     Sun 17 Aug 2025 20:01:13 +0000
Files and hashes:         1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: 9GxWoYYobZAskiXdBaz9apQqAa2CSb/4hMW+RTBU7AE=)
                          2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
                          rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2515 (0x9d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
        Validity
            Not Before: Aug 10 20:01:13 2025 GMT
            Not After : Aug 17 20:01:13 2025 GMT
        Subject: CN=6898fa89-adb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:05:c5:46:b2:53:b8:d0:c7:c6:48:f6:d6:
                    92:ea:2e:c7:6e:5a:f0:d8:66:62:11:61:8f:5c:7d:
                    c9:8d:e0:b5:f4:1b:06:55:08:c8:c1:4e:4e:24:38:
                    f6:f5:9e:a5:c4:e6:72:1b:00:1c:34:50:80:dc:d4:
                    db:09:40:87:19:43:fd:42:97:f4:e4:3c:e4:67:67:
                    5d:27:88:94:c2:49:8d:30:cd:73:bc:7f:e5:48:72:
                    af:bc:56:3f:d1:56:ba:7d:95:66:01:4d:de:4e:98:
                    e6:4a:35:9b:68:cf:94:59:8c:42:7c:43:7e:35:64:
                    d8:75:5e:ff:61:24:13:b5:df:d0:d7:9d:b6:ff:6f:
                    69:03:47:4d:20:1a:2d:9a:5a:8a:ff:cb:9f:b1:b3:
                    49:70:c8:00:af:3e:16:68:68:eb:29:1b:b0:df:b4:
                    4b:90:97:26:3d:f6:d9:19:e1:b7:80:df:a4:17:b5:
                    81:9c:aa:7a:23:9d:c3:2d:6d:fb:b7:06:80:20:6e:
                    7f:54:fb:7b:dd:05:27:d5:da:47:19:09:00:9e:64:
                    e0:c8:62:85:07:62:8f:03:7c:5c:20:04:21:e1:bf:
                    30:c3:81:a0:b3:89:ec:14:b9:c3:58:b1:00:ea:b8:
                    32:fa:75:eb:03:df:fd:40:b5:9c:63:a8:83:e6:e3:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0C:E2:F1:95:21:CC:F6:5B:43:76:2F:71:77:BB:F2:86:44:E0:FA
            X509v3 Authority Key Identifier:
                keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:84:b2:e9:13:70:a9:bb:f8:7e:6f:f0:65:45:59:3a:95:c4:
         57:88:a6:04:7c:2c:13:be:44:49:aa:4b:a9:9f:38:d5:2d:bb:
         a7:91:66:28:de:7b:0f:2c:82:9d:2f:1b:e7:9e:f0:db:c4:af:
         c4:ee:8f:a0:f7:05:9a:ea:63:16:6e:ee:01:95:72:90:54:4f:
         31:e0:62:98:8a:40:96:c0:fd:d8:f5:05:33:5b:97:de:8e:fa:
         ba:70:d4:0c:34:23:79:7c:ac:8c:18:f2:b0:f1:5a:18:01:7f:
         d1:b6:2d:55:c4:a3:21:4f:88:44:c6:d5:fb:12:7d:8c:28:2f:
         3c:a9:15:06:66:06:22:5d:e6:2e:73:02:37:ac:9d:cc:ed:9f:
         a7:20:58:49:cf:4e:7d:4e:93:f4:ee:62:d9:86:4e:8c:4d:a8:
         40:93:42:81:59:97:e5:80:c6:d0:99:55:e2:9d:05:db:9b:83:
         58:54:80:c0:9a:45:e8:bd:a2:cc:3b:72:c8:b5:6a:16:03:47:
         ec:12:4a:c5:43:8c:c3:d4:be:e7:6f:06:36:45:2e:e0:bc:03:
         8b:d9:9b:d8:89:45:df:be:63:9f:da:96:ea:38:af:52:d2:d4:
         16:c7:d7:6f:88:c3:3a:47:93:90:7a:dc:36:77:fd:25:21:6d:
         a1:74:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:27:25 2025 by rpki-client