Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
File:                     1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json)
Hash identifier:          5oH7zVCcsz0DOEiLpygftDdokHR0zQV7jC1C0qCzWvs=
Subject key identifier:   00:6B:EE:4E:9F:7C:A5:E5:EB:2E:33:C7:64:73:A5:03:71:91:D6:A1
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Certificate issuer:       /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial:       0B42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
Manifest number:          0B36
Signing time:             Mon 04 Aug 2025 19:27:44 +0000
Manifest this update:     Mon 04 Aug 2025 19:27:43 +0000
Manifest next update:     Mon 11 Aug 2025 19:27:43 +0000
Files and hashes:         1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: 2CwsZP3eMqAZYxe7fLX9Vt7op9tgSpn3lTWfdQHGEl8=)
                          2: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: gD5Iq8akoAlTIS4ryMBL5JIYOH1ViK0S3xNtIRVVfYc=)
                          3: 74CA44AA049F11F087661234C4F9AE02.roa (hash: 2OIryrqTJwARaXm6rXTbRJKfK80d24FVCzeiupTYqAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
                          rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 19:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
        Validity
            Not Before: Aug  4 19:27:43 2025 GMT
            Not After : Aug 11 19:27:43 2025 GMT
        Subject: CN=689109b0-32e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:4c:90:52:3d:71:c2:fd:09:c9:ed:fa:98:
                    0b:b7:92:d1:36:88:e3:a5:e2:31:ee:d0:e5:ab:6a:
                    4a:36:48:ea:7c:5f:76:1f:f3:e3:be:e7:6d:f4:bf:
                    95:01:08:e4:92:13:d3:81:5e:d1:74:f3:17:d3:11:
                    be:aa:0d:87:fb:fe:18:2a:2d:4b:f3:fc:ab:19:ec:
                    6e:e9:29:de:15:54:ec:9c:6e:aa:32:df:80:69:94:
                    e7:fb:f1:46:16:91:56:e6:99:38:a3:fc:9b:6f:53:
                    93:26:9b:29:2d:80:4f:45:0f:09:d3:e5:ef:ec:5c:
                    ed:48:c1:29:0b:2a:dc:28:42:12:ac:67:fa:d1:52:
                    62:e3:db:8e:24:b8:b5:11:4f:e7:ff:cd:db:20:62:
                    06:8b:aa:78:d4:f7:86:a8:b3:f9:a4:5e:dd:a7:45:
                    d0:33:3c:80:e1:cc:7e:be:fe:af:9d:79:ea:b4:dc:
                    f4:7f:80:4e:6b:f0:a4:ed:ba:68:09:bd:88:e5:ec:
                    c4:17:82:be:8d:b0:39:d1:24:3d:15:34:bd:4f:3a:
                    bb:34:ea:56:52:ac:88:4b:78:65:ee:1a:3f:f0:ab:
                    d2:d8:01:e7:d3:b5:ee:91:8f:c0:71:0e:57:f7:56:
                    16:cd:67:fd:b2:75:25:50:30:5b:37:22:c6:c6:c7:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6B:EE:4E:9F:7C:A5:E5:EB:2E:33:C7:64:73:A5:03:71:91:D6:A1
            X509v3 Authority Key Identifier:
                keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:c3:7b:78:36:16:e5:3b:5b:cf:82:62:1a:df:82:fb:3f:
         ba:24:8c:cb:17:2a:cd:07:6d:e2:28:ac:fc:60:ac:2f:22:52:
         a8:4a:58:8e:87:fe:a4:f7:40:c1:e5:75:72:f9:2d:86:42:82:
         e9:59:d4:db:83:1b:0e:cc:87:62:a7:ea:16:15:b1:fe:17:e1:
         d6:78:55:a3:69:95:0a:27:1e:bc:f6:f8:c1:60:3a:1e:40:50:
         8e:6b:d5:00:1a:ca:59:d1:c5:64:32:51:ed:90:8f:ce:67:a1:
         59:3c:3d:69:eb:bc:82:2d:f9:13:fa:3b:d9:dd:7a:cf:0a:b9:
         2d:0e:d0:78:b8:3a:0b:f6:1d:7a:b4:79:9e:1f:f5:4c:46:05:
         02:12:3c:65:12:e0:fa:6e:35:90:55:6c:28:a5:f2:0f:f6:88:
         c6:f1:1e:7a:e5:e2:87:1f:ea:86:b8:2e:a0:24:20:ee:7d:f3:
         ac:ad:a8:a4:c7:2f:05:ec:ad:6f:85:b5:62:9d:76:d9:50:7b:
         99:fe:c1:b1:6a:27:7a:bd:27:38:28:35:c3:e0:f8:69:54:db:
         c0:be:2f:27:97:13:53:5a:28:66:a4:64:58:5e:05:d2:37:e2:
         1e:0d:ec:a6:ee:96:7e:b4:73:ba:d3:e5:ed:0f:43:2f:9f:83:
         f2:cb:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:40 2025 by rpki-client