Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
File:                     Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json)
Hash identifier:          c5DuddxwjiB0tsNSyY64EusTAwevlklpHVvabw4ukl4=
Subject key identifier:   60:40:44:36:8E:6A:62:70:1D:4D:AF:D5:B2:0F:FF:A7:89:EF:3A:C2
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Certificate issuer:       /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial:       02E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
Manifest number:          02DB
Signing time:             Mon 11 Aug 2025 01:33:15 +0000
Manifest this update:     Mon 11 Aug 2025 01:33:15 +0000
Manifest next update:     Mon 18 Aug 2025 01:33:15 +0000
Files and hashes:         1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: 6ZFqg1ENwoKR/myjXkJ0R/vjesz+XW54gpvYLKI0Geg=)
                          2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
                          rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503
        Validity
            Not Before: Aug 11 01:33:15 2025 GMT
            Not After : Aug 18 01:33:15 2025 GMT
        Subject: CN=6899485b-7397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:9b:b3:f9:04:f5:84:7f:f3:1b:cb:45:31:
                    48:cc:9f:a7:72:d6:c4:e7:c8:c4:82:e2:f2:5a:17:
                    dd:1e:53:de:1c:49:15:10:dd:4d:ba:a7:22:67:dd:
                    4e:d6:08:ab:72:64:c4:5f:9c:74:17:64:0f:7c:a8:
                    66:ba:70:18:4d:a8:56:9d:de:8d:08:5d:1e:6c:c1:
                    25:c3:0e:5a:75:46:dd:0d:f2:62:43:db:80:c7:8c:
                    fc:62:ba:33:f0:bc:8d:7e:da:be:c1:e0:c4:67:2b:
                    5a:fa:57:3f:e4:d2:23:9a:98:b3:3e:c0:85:14:bc:
                    6a:20:45:50:91:ea:22:b8:c8:35:0a:97:e4:74:73:
                    e6:04:5b:3c:fb:83:08:c3:6b:ea:01:e9:5e:0b:83:
                    5d:23:27:c8:26:cf:4a:87:cc:8d:d2:5c:67:3e:07:
                    06:9d:4c:eb:4b:63:62:e4:93:de:e6:60:1a:d0:ae:
                    a5:fd:28:a7:26:e3:61:2e:1a:0a:82:9b:f1:ac:e5:
                    1b:96:b7:99:3d:3d:41:38:6b:34:c6:b0:c0:26:45:
                    c0:eb:70:e9:e7:be:37:bc:64:d5:63:97:11:3f:fd:
                    90:28:f9:85:f2:7f:9d:94:52:e2:8a:3e:94:54:5f:
                    67:ff:41:01:3d:37:b1:9c:8f:f8:00:41:a3:f9:d5:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:40:44:36:8E:6A:62:70:1D:4D:AF:D5:B2:0F:FF:A7:89:EF:3A:C2
            X509v3 Authority Key Identifier:
                keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:bb:d8:ff:d9:ae:8b:54:54:c1:a0:3e:a4:fd:d6:46:23:
         e4:ea:4d:aa:53:9d:ff:ca:47:71:11:41:5f:7f:82:75:7a:a2:
         5f:ff:41:a3:f3:ae:e8:d8:e6:23:d9:b7:5c:d4:8d:ff:f3:eb:
         ce:7b:f1:89:fb:7b:5f:8e:72:17:11:69:df:05:62:ed:f7:15:
         e9:a3:70:c7:d3:07:a5:7a:e9:fe:3f:4a:ac:3f:ab:8d:60:89:
         c7:04:00:34:0c:09:80:ef:d5:79:bf:a6:ac:7b:13:fe:95:9f:
         44:f7:3d:51:88:fa:f3:70:24:d8:8c:cf:08:0b:09:c5:5d:0b:
         5e:9b:d7:eb:3f:dd:dc:6a:70:b0:ee:ba:80:cc:ec:d3:1c:a2:
         f1:1d:78:b4:9d:24:4d:2b:dd:c1:a9:d2:50:74:8a:75:0b:b8:
         aa:bd:a7:8a:3d:ae:fb:5d:9c:fd:f9:7a:b8:d8:d5:56:5f:5f:
         4c:ea:b9:00:96:96:f0:46:f4:37:8c:99:96:29:83:33:f3:34:
         01:27:4b:24:7b:1b:d1:5b:e3:d8:be:1c:d3:2d:42:51:6b:a6:
         92:de:60:71:0b:4f:72:b8:41:a1:31:44:d6:19:eb:7b:27:3c:
         22:0a:da:58:92:38:d4:59:1c:e0:82:15:66:90:95:83:1a:c0:
         c9:f7:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:46:03 2025 by rpki-client